CVE-2021-32292

An issue was discovered in json-c from 20200420 (post 0.14 unreleased code) through 0.15-20200726. A stack-buffer-overflow exists in the auxiliary sample program json_parse which is located in the function parseit.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTNIST
9.8 CRITICAL
NETWORK
LOW
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
mitreCNA
---
---
CVEADP
---
---
CISA-ADPADP
---
---
Base Score
CVSS 3.x
EPSS Score
Percentile: 36%
VendorProductVersion
netappactive_iq_unified_manager
-
json-cjson-c
0.15-20200726
𝑥
= Vulnerable software versions
Debian logo
Debian Releases
Debian Product
Codename
json-c
bullseye (security)
0.15-2+deb11u1
fixed
bullseye
0.15-2+deb11u1
fixed
buster
not-affected
bookworm
0.16-2
fixed
sid
0.18+ds-1
fixed
trixie
0.18+ds-1
fixed
Ubuntu logo
Ubuntu Releases
Ubuntu Product
Codename
json-c
lunar
not-affected
jammy
Fixed 0.15-3~ubuntu1.22.04.2
released
focal
not-affected
bionic
not-affected
xenial
not-affected
trusty
not-affected
Common Weakness Enumeration
References
https://github.com/json-c/json-c/issues/654
https://security.netapp.com/advisory/ntap-20230929-0010/
https://www.debian.org/security/2023/dsa-5486
https://github.com/json-c/json-c/issues/654
https://security.netapp.com/advisory/ntap-20230929-0010/
https://www.debian.org/security/2023/dsa-5486