The remote SUSE Linux SLES15 host has packages installed that are affected by a vulnerability as referenced in the SUSE- SU-2022:0184-2 advisory.

  - json-c through 0.14 has an integer overflow and out-of-bounds write via a large JSON file, as demonstrated     by printbuf_memappend. (CVE-2020-12762)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Debian 10 host has packages installed that are affected by a vulnerability as referenced in the dla-3461 advisory.

  - json-c through 0.14 has an integer overflow and out-of-bounds write via a large JSON file, as demonstrated     by printbuf_memappend. (CVE-2020-12762)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote CentOS Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CESA-2021:4382 advisory.

  - json-c: integer overflow and out-of-bounds write via a large JSON file (CVE-2020-12762)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2021:4382 advisory.

    JSON-C implements a reference counting object model that allows users to easily construct JavaScript     Object Notation (JSON) objects in C, output them as JSON formatted strings, and parse JSON formatted     strings back into the C representation of JSON objects.

    Security Fix(es):

    * json-c: integer overflow and out-of-bounds write via a large JSON file (CVE-2020-12762)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

    Additional Changes:

    For detailed information on changes in this release, see the Red Hat Enterprise Linux 8.5 Release Notes     linked from the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SUSE15 host has packages installed that are affected by a vulnerability as referenced in the openSUSE-SU-2022:0184-1 advisory.

  - json-c through 0.14 has an integer overflow and out-of-bounds write via a large JSON file, as demonstrated     by printbuf_memappend. (CVE-2020-12762)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Oracle Linux 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2023-6431 advisory.

    [0.99.9-5]
    - Rebuild     Resolves: rhbz#2227786

    [0.99.9-4]
    - Address CVE-2020-12762     Resolves: rhbz#2203172

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Ubuntu 16.04 LTS / 18.04 LTS / 20.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-4360-4 advisory.

    USN-4360-1 fixed a vulnerability in json-c. The security fix introduced a memory leak that was reverted in     USN-4360-2 and USN-4360-3. This update provides the correct fix update for CVE-2020-12762.



Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

json-c through 0.14 has an integer overflow and out-of-bounds write via a large JSON file, as demonstrated by printbuf_memappend.
(CVE-2020-12762)

The remote Redhat Enterprise Linux 9 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2024:1154 advisory.

    The libfastjson library provides essential JavaScript Object Notation (JSON) handling functions. The     library enables users to construct JSON objects in C, output them as JSON-formatted strings, and convert     JSON-formatted strings back to the C representation of JSON objects.

    Security Fix(es):

    * json-c, libfastjson: integer overflow and out-of-bounds write via a large JSON file (CVE-2020-12762)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

- Fix CVE-2020-12762.

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

ID	Name	Product	Family	Published	Updated	Severity
158156	SUSE SLES15 Security Update : json-c (SUSE-SU-2022:0184-2)	Nessus	SuSE Local Security Checks	2/18/2022	7/13/2023	high
177513	Debian DLA-3461-1 : libfastjson - LTS security update	Nessus	Debian Local Security Checks	6/22/2023	6/22/2023	high
155054	CentOS 8 : json-c (CESA-2021:4382)	Nessus	CentOS Local Security Checks	11/11/2021	11/24/2023	high
155122	RHEL 8 : json-c (RHSA-2021:4382)	Nessus	Red Hat Local Security Checks	11/11/2021	11/7/2024	high
157084	openSUSE 15 Security Update : json-c (openSUSE-SU-2022:0184-1)	Nessus	SuSE Local Security Checks	1/26/2022	11/17/2023	high
185871	Oracle Linux 9 : libfastjson (ELSA-2023-6431)	Nessus	Oracle Linux Local Security Checks	11/16/2023	11/2/2024	high
136964	Ubuntu 16.04 LTS / 18.04 LTS / 20.04 LTS : json-c vulnerability (USN-4360-4)	Nessus	Ubuntu Local Security Checks	5/29/2020	10/29/2024	high
138044	Amazon Linux 2 : json-c (ALAS-2020-1442)	Nessus	Amazon Linux Local Security Checks	7/2/2020	3/5/2024	high
191588	RHEL 9 : libfastjson (RHSA-2024:1154)	Nessus	Red Hat Local Security Checks	3/5/2024	11/7/2024	high
136936	Fedora 31 : json-c (2020-7eb7eac270)	Nessus	Fedora Local Security Checks	5/28/2020	3/8/2024	high

Detections

Analytics

Plugins Search

high

high

high

high

high

high

high

high

high

high