ID CVE-2013-6371
Summary The hash functionality in json-c before 0.12 allows context-dependent attackers to cause a denial of service (CPU consumption) via crafted JSON data, involving collisions.
References
Vulnerable Configurations
  • Fedora 20
    cpe:2.3:o:fedoraproject:fedora:20
  • JSON-C Project JSON-C 0.11
    cpe:2.3:a:json-c_project:json-c:0.11
  • JSON-C Project JSON-C 0.10
    cpe:2.3:a:json-c_project:json-c:0.10
  • JSON-C Project JSON-C 0.9
    cpe:2.3:a:json-c_project:json-c:0.9
  • JSON-C Project JSON-C 0.8
    cpe:2.3:a:json-c_project:json-c:0.8
  • JSON-C Project JSON-C 0.7
    cpe:2.3:a:json-c_project:json-c:0.7
  • JSON-C Project JSON-C 0.6
    cpe:2.3:a:json-c_project:json-c:0.6
  • JSON-C Project JSON-C 0.5
    cpe:2.3:a:json-c_project:json-c:0.5
  • JSON-C Project JSON-C 0.4
    cpe:2.3:a:json-c_project:json-c:0.4
  • JSON-C Project JSON-C 0.3
    cpe:2.3:a:json-c_project:json-c:0.3
  • JSON-C Project JSON-C 0.2
    cpe:2.3:a:json-c_project:json-c:0.2
  • JSON-C Project JSON-C 0.1
    cpe:2.3:a:json-c_project:json-c:0.1
CVSS
Base: 5.0 (as of 21-11-2016 - 16:45)
Impact:
Exploitability:
CWE CWE-310
CAPEC
  • Signature Spoofing by Key Recreation
    An attacker obtains an authoritative or reputable signer's private signature key by exploiting a cryptographic weakness in the signature algorithm or pseudorandom number generation and then uses this key to forge signatures from the original signer to mislead a victim into performing actions that benefit the attacker.
Access
VectorComplexityAuthentication
NETWORK LOW NONE
Impact
ConfidentialityIntegrityAvailability
NONE NONE PARTIAL
nessus via4
  • NASL family Mandriva Local Security Checks
    NASL id MANDRIVA_MDVSA-2015-102.NASL
    description Updated json-c packages fix security vulnerabilities : Florian Weimer reported that the printbuf APIs used in the json-c library used ints for counting buffer lengths, which is inappropriate for 32bit architectures. These functions need to be changed to using size_t if possible for sizes, or to be hardened against negative values if not. This could be used to cause a denial of service in an application linked to the json-c library (CVE-2013-6370). Florian Weimer reported that the hash function in the json-c library was weak, and that parsing smallish JSON strings showed quadratic timing behaviour. This could cause an application linked to the json-c library, and that processes some specially crafted JSON data, to use excessive amounts of CPU (CVE-2013-6371).
    last seen 2019-02-21
    modified 2018-07-19
    plugin id 82355
    published 2015-03-30
    reporter Tenable
    source https://www.tenable.com/plugins/index.php?view=single&id=82355
    title Mandriva Linux Security Advisory : json-c (MDVSA-2015:102)
  • NASL family Databases
    NASL id DB2_105FP4.NASL
    description According to its version, the installation of IBM DB2 10.5 running on the remote host is affected by the following vulnerabilities : - An error exists related to JavaScript Object Notation (JSON-C) handling, string parsing, and the hash function that allows denial of service attacks. (CVE-2013-6371) - A buffer overflow error exists related to handling 'ALTER MODULE' statements that could lead to server crashes or arbitrary code execution. (CVE-2014-3094) - An error exists related to handling 'SELECT' statements having subqueries using 'UNION' that allows denial of service attacks. (CVE-2014-3095) - An error exists related to Columnar Data Engine (CDE) tables and 'LOAD' statement handling that allows local information disclosure. (CVE-2014-4805)
    last seen 2019-02-21
    modified 2018-07-06
    plugin id 77571
    published 2014-09-09
    reporter Tenable
    source https://www.tenable.com/plugins/index.php?view=single&id=77571
    title IBM DB2 10.5 < Fix Pack 4 Multiple Vulnerabilities
  • NASL family Fedora Local Security Checks
    NASL id FEDORA_2014-4975.NASL
    description Address CVE-2013-6370 and CVE-2013-6371. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.
    last seen 2019-02-21
    modified 2015-10-19
    plugin id 73772
    published 2014-04-30
    reporter Tenable
    source https://www.tenable.com/plugins/index.php?view=single&id=73772
    title Fedora 19 : json-c-0.11-6.fc19 (2014-4975)
  • NASL family Red Hat Local Security Checks
    NASL id REDHAT-RHSA-2014-0703.NASL
    description Updated json-c packages that fix two security issues are now available for Red Hat Enterprise Linux 7. The Red Hat Security Response Team has rated this update as having Moderate security impact. Common Vulnerability Scoring System (CVSS) base scores, which give detailed severity ratings, are available for each vulnerability from the CVE links in the References section. JSON-C implements a reference counting object model that allows you to easily construct JSON objects in C, output them as JSON-formatted strings, and parse JSON-formatted strings back into the C representation of JSON objects. Multiple buffer overflow flaws were found in the way the json-c library handled long strings in JSON documents. An attacker able to make an application using json-c parse excessively large JSON input could cause the application to crash. (CVE-2013-6370) A denial of service flaw was found in the implementation of hash arrays in json-c. An attacker could use this flaw to make an application using json-c consume an excessive amount of CPU time by providing a specially crafted JSON document that triggers multiple hash function collisions. To mitigate this issue, json-c now uses a different hash function and randomization to reduce the chance of an attacker successfully causing intentional collisions. (CVE-2013-6371) These issues were discovered by Florian Weimer of the Red Hat Product Security Team. All json-c users are advised to upgrade to these updated packages, which contain backported patches to correct these issues.
    last seen 2019-02-21
    modified 2018-11-10
    plugin id 76898
    published 2014-07-30
    reporter Tenable
    source https://www.tenable.com/plugins/index.php?view=single&id=76898
    title RHEL 7 : json-c (RHSA-2014:0703)
  • NASL family Fedora Local Security Checks
    NASL id FEDORA_2014-5006.NASL
    description Address CVE-2013-6370 and CVE-2013-6371. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.
    last seen 2019-02-21
    modified 2015-10-19
    plugin id 73603
    published 2014-04-18
    reporter Tenable
    source https://www.tenable.com/plugins/index.php?view=single&id=73603
    title Fedora 20 : json-c-0.11-6.fc20 (2014-5006)
  • NASL family Mandriva Local Security Checks
    NASL id MANDRIVA_MDVSA-2014-079.NASL
    description Updated json-c packages fix security vulnerabilities : Florian Weimer reported that the printbuf APIs used in the json-c library used ints for counting buffer lengths, which is inappropriate for 32bit architectures. These functions need to be changed to using size_t if possible for sizes, or to be hardened against negative values if not. This could be used to cause a denial of service in an application linked to the json-c library (CVE-2013-6370). Florian Weimer reported that the hash function in the json-c library was weak, and that parsing smallish JSON strings showed quadratic timing behaviour. This could cause an application linked to the json-c library, and that processes some specially crafted JSON data, to use excessive amounts of CPU (CVE-2013-6371).
    last seen 2019-02-21
    modified 2018-07-19
    plugin id 73604
    published 2014-04-18
    reporter Tenable
    source https://www.tenable.com/plugins/index.php?view=single&id=73604
    title Mandriva Linux Security Advisory : json-c (MDVSA-2014:079)
  • NASL family Ubuntu Local Security Checks
    NASL id UBUNTU_USN-2245-1.NASL
    description Florian Weimer discovered that json-c incorrectly handled buffer lengths. An attacker could use this issue with a specially crafted large JSON document to cause json-c to crash, resulting in a denial of service. (CVE-2013-6370) Florian Weimer discovered that json-c incorrectly handled hash arrays. An attacker could use this issue with a specially crafted JSON document to cause json-c to consume CPU resources, resulting in a denial of service. (CVE-2013-6371). Note that Tenable Network Security has extracted the preceding description block directly from the Ubuntu security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.
    last seen 2019-02-21
    modified 2018-12-01
    plugin id 74509
    published 2014-06-13
    reporter Tenable
    source https://www.tenable.com/plugins/index.php?view=single&id=74509
    title Ubuntu 12.04 LTS / 13.10 / 14.04 LTS : json-c vulnerabilities (USN-2245-1)
  • NASL family SuSE Local Security Checks
    NASL id OPENSUSE-2014-317.NASL
    description This json-c update fixes the following two security issue : - bnc#870147: Fixed buffer overflow if size_t is larger than int (CVE-2013-6370). - bnc#870147: Fixed possible hash collision DoS (CVE-2013-6371).
    last seen 2019-02-21
    modified 2018-11-10
    plugin id 75330
    published 2014-06-13
    reporter Tenable
    source https://www.tenable.com/plugins/index.php?view=single&id=75330
    title openSUSE Security Update : json-c (openSUSE-SU-2014:0558-1)
  • NASL family Oracle Linux Local Security Checks
    NASL id ORACLELINUX_ELSA-2014-0703.NASL
    description From Red Hat Security Advisory 2014:0703 : Updated json-c packages that fix two security issues are now available for Red Hat Enterprise Linux 7. The Red Hat Security Response Team has rated this update as having Moderate security impact. Common Vulnerability Scoring System (CVSS) base scores, which give detailed severity ratings, are available for each vulnerability from the CVE links in the References section. JSON-C implements a reference counting object model that allows you to easily construct JSON objects in C, output them as JSON-formatted strings, and parse JSON-formatted strings back into the C representation of JSON objects. Multiple buffer overflow flaws were found in the way the json-c library handled long strings in JSON documents. An attacker able to make an application using json-c parse excessively large JSON input could cause the application to crash. (CVE-2013-6370) A denial of service flaw was found in the implementation of hash arrays in json-c. An attacker could use this flaw to make an application using json-c consume an excessive amount of CPU time by providing a specially crafted JSON document that triggers multiple hash function collisions. To mitigate this issue, json-c now uses a different hash function and randomization to reduce the chance of an attacker successfully causing intentional collisions. (CVE-2013-6371) These issues were discovered by Florian Weimer of the Red Hat Product Security Team. All json-c users are advised to upgrade to these updated packages, which contain backported patches to correct these issues.
    last seen 2019-02-21
    modified 2015-12-01
    plugin id 76736
    published 2014-07-24
    reporter Tenable
    source https://www.tenable.com/plugins/index.php?view=single&id=76736
    title Oracle Linux 7 : json-c (ELSA-2014-0703)
  • NASL family Amazon Linux Local Security Checks
    NASL id ALA_ALAS-2014-416.NASL
    description The hash functionality in json-c before 0.12 allows context-dependent attackers to cause a denial of service (CPU consumption) via crafted JSON data, involving collisions. Buffer overflow in the printbuf APIs in json-c before 0.12 allows remote attackers to cause a denial of service via unspecified vectors.
    last seen 2019-02-21
    modified 2018-04-18
    plugin id 78359
    published 2014-10-12
    reporter Tenable
    source https://www.tenable.com/plugins/index.php?view=single&id=78359
    title Amazon Linux AMI : json-c (ALAS-2014-416)
redhat via4
advisories
bugzilla
id 1032322
title CVE-2013-6370 json-c: buffer overflow if size_t is larger than int
oval
AND
  • OR
    • comment Red Hat Enterprise Linux 7 Client is installed
      oval oval:com.redhat.rhsa:tst:20140675001
    • comment Red Hat Enterprise Linux 7 Server is installed
      oval oval:com.redhat.rhsa:tst:20140675002
    • comment Red Hat Enterprise Linux 7 Workstation is installed
      oval oval:com.redhat.rhsa:tst:20140675003
    • comment Red Hat Enterprise Linux 7 ComputeNode is installed
      oval oval:com.redhat.rhsa:tst:20140675004
  • OR
    • AND
      • comment json-c is earlier than 0:0.11-4.el7_0
        oval oval:com.redhat.rhsa:tst:20140703005
      • comment json-c is signed with Red Hat redhatrelease2 key
        oval oval:com.redhat.rhsa:tst:20140703006
    • AND
      • comment json-c-devel is earlier than 0:0.11-4.el7_0
        oval oval:com.redhat.rhsa:tst:20140703007
      • comment json-c-devel is signed with Red Hat redhatrelease2 key
        oval oval:com.redhat.rhsa:tst:20140703008
    • AND
      • comment json-c-doc is earlier than 0:0.11-4.el7_0
        oval oval:com.redhat.rhsa:tst:20140703009
      • comment json-c-doc is signed with Red Hat redhatrelease2 key
        oval oval:com.redhat.rhsa:tst:20140703010
rhsa
id RHSA-2014:0703
released 2014-06-10
severity Moderate
title RHSA-2014:0703: json-c security update (Moderate)
rpms
  • json-c-0:0.11-4.el7_0
  • json-c-devel-0:0.11-4.el7_0
  • json-c-doc-0:0.11-4.el7_0
refmap via4
bid 66715
confirm
fedora FEDORA-2014-5006
mandriva MDVSA-2014:079
secunia 57791
xf jsonc-cve20136371-dos(92541)
Last major update 21-11-2016 - 20:47
Published 22-04-2014 - 09:06
Last modified 28-08-2017 - 21:33
Back to Top