Alerts This Week
Warning Icon 1 714
Alerts This Week
Warning Icon 1 714

Debian 11: Critical Integer Overflow DoS in libjson-xs-perl CVE-2025-40928

debian lts
Calendar Grey September 30, 2025
Dist Debian Esm H88
A critical security update for libjson-xs-perl addresses an integer overflow vulnerability allowing denial-of-service attacks.
A vulnerability has been fixed in libjson-xs-perl, a Perl module which does C/XS-accelerated manipulation of JSON-formatted data
Topics%20covered

Topics Covered

security advisory critical debian DoS integer overflow libjson-xs-perl

Summary

CVE-2025-40928

Integer buffer overflow causing a segfault when parsing crafted JSON,
enabling denial-of-service attacks or other unspecified impact

For Debian 11 bullseye, this problem has been fixed in version
4.030-1+deb11u1.

We recommend that you upgrade your libjson-xs-perl packages.

For the detailed security status of libjson-xs-perl please refer to
its security tracker page at:
https://security-tracker.debian.org/tracker/source-package/libjson-xs-perl

Further information about Debian LTS security advisories, how to apply
these updates to your system and frequently asked questions can be
found at: https://wiki.debian.org/LTS



Severity
critical
Lowest
Low
Medium
High
Critical

Package: libjson-xs-perl
Version: 4.030-1+deb11u1
CVE ID: CVE-2025-40928

Topics%20covered

Topics Covered

security advisory critical debian DoS integer overflow libjson-xs-perl

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here