Alerts This Week
Warning Icon 1 692
Alerts This Week
Warning Icon 1 692

Debian LTS: DLA-2929-1 Moderate Security Issue: Ujson Buffer Overflow

debian lts
Calendar Grey February 26, 2022
Dist Debian Esm H88
Debian recommends that users of ujson perform an upgrade to address a buffer overflow vulnerability identified in its JSON handling.
One issue have been discovered in ujson: ultra fast JSON encoder and decoder for Python
Topics%20covered

Topics Covered

security advisory moderate security issue buffer overflow software update Debian ujson

Summary

CVE-2021-45958

Stack-based buffer overflow in Buffer_AppendIndentUnchecked (called from encode) has
been detected. Exploitation can, for example, use a large amount of indentation.


For Debian 9 stretch, this problem has been fixed in version
1.35-1+deb9u1.

We recommend that you upgrade your ujson packages.

For the detailed security status of ujson please refer to
its security tracker page at:
https://security-tracker.debian.org/tracker/source-package/ujson

Further information about Debian LTS security advisories, how to apply
these updates to your system and frequently asked questions can be
found at: https://wiki.debian.org/LTS


Package: ujson
Version: 1.35-1+deb9u1
CVE ID: CVE-2021-45958

Topics%20covered

Topics Covered

security advisory moderate security issue buffer overflow software update Debian ujson

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Related News

Your message here