buger/jsonparser · Security
Denial of Service in jsonparser
- GHSA ID
- GHSA-8vrw-m3j9-j27c
- CVE ID
- CVE-2020-35381
- Severity
- high
- Published
- Updated
- CVSS
- 7.5 · CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
- CVSS v3
- 7.5 · CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Description
jsonparser before 1.1.1 allows attackers to cause a denial of service via a GET call.
CWEs
- CWE-125 · Out-of-bounds Read
References
- https://nvd.nist.gov/vuln/detail/CVE-2020-35381 ↗
- https://github.com/buger/jsonparser/issues/219 ↗
- https://github.com/buger/jsonparser/pull/221 ↗
- https://github.com/buger/jsonparser/commit/df3ea76ece10095374fd1c9a22a4fb85a44efc42 ↗
- https://pkg.go.dev/vuln/GO-2021-0057 ↗
- https://lists.fedoraproject.org/archives/list/[email protected]/message/27EA7OGCELV7QFAGVIHODHWKMKGFVIUZ ↗
- https://lists.fedoraproject.org/archives/list/[email protected]/message/LJO5N7YTDEUSTKYTNA372CE6VHCZJWUG ↗
- https://github.com/advisories/GHSA-8vrw-m3j9-j27c ↗