IM
IronMonkey Threat Research

CVE-2020-12762 HIGH

Published: 2020-05-09 | Last Modified: 2025-11-03 | Status: Modified

Description

json-c through 0.14 has an integer overflow and out-of-bounds write via a large JSON file, as demonstrated by printbuf_memappend.

Additional Descriptions (1)

json-c versiones hasta 0.14, presenta un desbordamiento de enteros y una escritura fuera de límites por medio de un archivo JSON grande, como es demostrado por la función printbuf_memappend.

CVSS Metrics

Base Score: 7.8 (HIGH)

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Attack VectorLOCAL
Attack ComplexityLOW
Privileges RequiredNONE
User InteractionREQUIRED
ScopeUNCHANGED
Confidentiality ImpactHIGH
Integrity ImpactHIGH
Availability ImpactHIGH

Source: [email protected]

Type: Primary

Exploitability Score: 1.8

Impact Score: 5.9

Base Score: 6.8 (MEDIUM)

AV:N/AC:M/Au:N/C:P/I:P/A:P

Access VectorNETWORK
Access ComplexityMEDIUM
AuthenticationNONE
Confidentiality ImpactPARTIAL
Integrity ImpactPARTIAL
Availability ImpactPARTIAL

Source: [email protected]

Type: Primary

Exploitability Score: 8.6

Impact Score: 6.4

Weaknesses

Source Type Description
[email protected] Primary
en CWE-190
en CWE-787
134c704f-9b21-4f2e-91b3-4a467353bcc0 Secondary
en CWE-787

Affected Products

Vendor Product Version Update Type
json-c json-c * <built-in method update of dict object at 0x7fd384e9a000> Application
fedoraproject fedora 30 <built-in method update of dict object at 0x7fd36b8077c0> Operating System
fedoraproject fedora 31 <built-in method update of dict object at 0x7fd36b8078c0> Operating System
fedoraproject fedora 32 <built-in method update of dict object at 0x7fd36821ba00> Operating System
debian debian_linux 8.0 <built-in method update of dict object at 0x7fd3683371c0> Operating System
debian debian_linux 9.0 <built-in method update of dict object at 0x7fd3683346c0> Operating System
debian debian_linux 10.0 <built-in method update of dict object at 0x7fd36b807bc0> Operating System
canonical ubuntu_linux 12.04 <built-in method update of dict object at 0x7fd386746080> Operating System
canonical ubuntu_linux 14.04 <built-in method update of dict object at 0x7fd36b807c40> Operating System
canonical ubuntu_linux 16.04 <built-in method update of dict object at 0x7fd3683374c0> Operating System
canonical ubuntu_linux 18.04 <built-in method update of dict object at 0x7fd36b50b880> Operating System
canonical ubuntu_linux 19.10 <built-in method update of dict object at 0x7fd2982b2b00> Operating System
canonical ubuntu_linux 20.04 <built-in method update of dict object at 0x7fd384e99c40> Operating System
siemens sinec_ins - <built-in method update of dict object at 0x7fd368218100> Application
siemens sinec_ins 1.0 <built-in method update of dict object at 0x7fd3853c4380> Application
siemens sinec_ins 1.0 <built-in method update of dict object at 0x7fd360439940> Application

Affected Configurations

Operator: OR

Vulnerable CPE
Yes cpe:2.3:a:json-c:json-c:*:*:*:*:*:*:*:*

Operator: OR

Vulnerable CPE
Yes cpe:2.3:o:fedoraproject:fedora:30:*:*:*:*:*:*:*
Yes cpe:2.3:o:fedoraproject:fedora:31:*:*:*:*:*:*:*
Yes cpe:2.3:o:fedoraproject:fedora:32:*:*:*:*:*:*:*

Operator: OR

Vulnerable CPE
Yes cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*
Yes cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*
Yes cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*

Operator: OR

Vulnerable CPE
Yes cpe:2.3:o:canonical:ubuntu_linux:12.04:*:*:*:-:*:*:*
Yes cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:esm:*:*:*
Yes cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:esm:*:*:*
Yes cpe:2.3:o:canonical:ubuntu_linux:18.04:*:*:*:lts:*:*:*
Yes cpe:2.3:o:canonical:ubuntu_linux:19.10:*:*:*:*:*:*:*
Yes cpe:2.3:o:canonical:ubuntu_linux:20.04:*:*:*:lts:*:*:*

Operator: OR

Vulnerable CPE
Yes cpe:2.3:a:siemens:sinec_ins:-:*:*:*:*:*:*:*
Yes cpe:2.3:a:siemens:sinec_ins:1.0:-:*:*:*:*:*:*
Yes cpe:2.3:a:siemens:sinec_ins:1.0:sp1:*:*:*:*:*:*

References