Alerts This Week
Warning Icon 1 758
Alerts This Week
Warning Icon 1 758

Ubuntu 22.04 LTS Security Advisory USN-6784-1 Critical cJSON DoS

ubuntu
Calendar Grey May 23, 2024
Dist Ubuntu Esm H88
A vulnerability was found in cJSON that can trigger a crash when fed with specific inputs, resulting in a denial of service on Ubuntu systems. Stay tuned for fixes.
cJSON could be made to crash if it received specially crafted input.

Summary

cJSON could be made to crash if it received specially crafted

input.

Software Description:

- cjson: Ultralightweight JSON parser in ANSI C (development files)

Details:

It was discovered that cJSON incorrectly handled certain input. An

attacker could possibly use this issue to cause cJSON to crash, resulting

in a denial of service. This issue only affected Ubuntu 22.04 LTS and

Ubuntu 23.10. (CVE-2023-50471, CVE-2023-50472)

Luo Jin discovered that cJSON incorrectly handled certain input. An

attacker could possibly use this issue to cause cJSON to crash, resulting

in a denial of service. (CVE-2024-31755)

Topics%20covered

Topics Covered

security advisory denial of service update critical Ubuntu input handling cJSON

Update Instructions

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 24.04 LTS
   libcjson1                       1.7.17-1ubuntu0.1~esm2
                                   Available with Ubuntu Pro

Ubuntu 23.10
   libcjson1                       1.7.16-1ubuntu0.2

Ubuntu 22.04 LTS
   libcjson1                       1.7.15-1ubuntu0.1~esm2
                                   Available with Ubuntu Pro

In general, a standard system update will make all the necessary changes.

References

https://ubuntu.com/security/notices/USN-6784-1

CVE-2023-50471, CVE-2023-50472, CVE-2024-31755

Severity
critical
Lowest
Low
Medium
High
Critical

Ubuntu Security Notice USN-6784-1

Topics%20covered

Topics Covered

security advisory denial of service update critical Ubuntu input handling cJSON

Package Information

https://launchpad.net/ubuntu/+source/cjson/1.7.16-1ubuntu0.2

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here