CVE-2023-50472
Fixed in a distro release EPSS <1%
cJSON v1.7.16 was discovered to contain a segmentation violation via the function cJSON_SetValuestring at cJSON.c.
Products: davegamble cjson
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Alpine 3.15 | cjson | 1.7.17-r0 |
| Alpine 3.16 | cjson | 1.7.17-r0 |
| Alpine 3.17 | cjson | 1.7.17-r0 |
| Alpine 3.18 | cjson | 1.7.17-r0 |
| Alpine 3.19 | cjson | 1.7.17-r0 |
| Alpine 3.20 | cjson | 1.7.17-r0 |
| Alpine 3.21 | cjson | 1.7.17-r0 |
| Alpine 3.22 | cjson | 1.7.17-r0 |
| Alpine 3.23 | cjson | 1.7.17-r0 |
| Alpine 3.24 | cjson | 1.7.17-r0 |
| Debian 12 | cjson | 1.7.15-1+deb12u1 |
| Debian 13 | cjson | 1.7.17-1 |
| Debian 14 | cjson | 1.7.17-1 |
| Red Hat satellite 6.15 | cjson | 0:1.7.18-1.el8sat |
| Red Hat satellite 6.15 | cjson-debuginfo | 0:1.7.18-1.el8sat |
| Red Hat satellite 6.15 | cjson-debugsource | 0:1.7.18-1.el8sat |
| Red Hat satellite 6.15 | python-sqlparse | 0:0.5.0-1.el8pc |
| Red Hat satellite 6.15 | python3.11-sqlparse | 0:0.5.0-1.el8pc |
| Red Hat satellite 6.15 | rubygem-rack | 0:2.2.14-1.el8sat |
| Red Hat satellite capsule 6.15 | cjson | 0:1.7.18-1.el8sat |
| Red Hat satellite capsule 6.15 | cjson-debuginfo | 0:1.7.18-1.el8sat |
| Red Hat satellite capsule 6.15 | cjson-debugsource | 0:1.7.18-1.el8sat |
| Red Hat satellite capsule 6.15 | python-sqlparse | 0:0.5.0-1.el8pc |
| Red Hat satellite capsule 6.15 | python3.11-sqlparse | 0:0.5.0-1.el8pc |
| Red Hat satellite capsule 6.15 | rubygem-rack | 0:2.2.14-1.el8sat |
| SUSE Package Hub 15 SP5 | cJSON | 1.7.18-bp155.3.3.1 |
| Ubuntu Pro 22.04 LTS | cjson | 1.7.15-1ubuntu0.1~esm2 |
| Ubuntu Pro 24.04 LTS | cjson | 1.7.17-1ubuntu0.1~esm2 |
| openSUSE Leap 15.5 | cJSON | 1.7.18-bp155.3.3.1 |
| openSUSE Tumbleweed | cJSON | 1.7.17-1.1 |