Moole Vulnerability Database

Find real vulnerabilities before they ship

High

CVE-2016-4425

Jansson 2.7 and earlier allows context-dependent attackers to cause a denial of service (deep recursion, stack consumption, and crash) via crafted JSON data.

VectorNETWORK

PublishedMay 17, 2016, 14:08

Published Bycve@mitre.org

Base Score

Score7.5

Affected Versions

No affected versions found.

References

http://www.debian.org/security/2015/dsa-3577
http://www.openwall.com/lists/oss-security/2016/05/01/5
http://www.openwall.com/lists/oss-security/2016/05/02/1
http://www.openwall.com/lists/oss-security/2016/05/03/3
https://github.com/akheron/jansson/issues/282
https://github.com/akheron/jansson/pull/284
https://github.com/akheron/jansson/pull/284/commits/64ce0ad3731ebd77e02897b07920eadd0e2cc318

Weakness Type

CWE-20

CVSS Metrics

Base Score

6.5

Vector String

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

Base SeverityMedium

Version

3.1

Attack Vector (AV)

NETWORK