ID CVE-2020-35381
Summary jsonparser 1.0.0 allows attackers to cause a denial of service (panic: runtime error: slice bounds out of range) via a GET call.
References
Vulnerable Configurations
  • cpe:2.3:a:jsonparser_project:jsonparser:1.0.0:*:*:*:*:*:*:*
    cpe:2.3:a:jsonparser_project:jsonparser:1.0.0:*:*:*:*:*:*:*
  • cpe:2.3:o:fedoraproject:fedora:32:*:*:*:*:*:*:*
    cpe:2.3:o:fedoraproject:fedora:32:*:*:*:*:*:*:*
  • cpe:2.3:o:fedoraproject:fedora:33:*:*:*:*:*:*:*
    cpe:2.3:o:fedoraproject:fedora:33:*:*:*:*:*:*:*
CVSS
Base: 7.8 (as of 06-10-2022 - 18:05)
Impact:
Exploitability:
CWE NVD-CWE-noinfo
CAPEC
Access
VectorComplexityAuthentication
NETWORK LOW NONE
Impact
ConfidentialityIntegrityAvailability
NONE NONE COMPLETE
cvss-vector via4 AV:N/AC:L/Au:N/C:N/I:N/A:C
refmap via4
fedora
  • FEDORA-2021-5676f1be7d
  • FEDORA-2021-b670727349
misc https://github.com/buger/jsonparser/issues/219
Last major update 06-10-2022 - 18:05
Published 15-12-2020 - 21:15
Last modified 06-10-2022 - 18:05
Back to Top