CVE-2021-45958
01.01.2022, 00:15
UltraJSON (aka ujson) through 5.1.0 has a stack-based buffer overflow in Buffer_AppendIndentUnchecked (called from encode). Exploitation can, for example, use a large amount of indentation.Enginsight
| Vendor | Product | Version |
|---|---|---|
| ultrajson_project | ultrajson | 𝑥 < 5.2.0 |
| debian | debian_linux | 9.0 |
𝑥
= Vulnerable software versions
Debian Releases
Ubuntu Releases
Ubuntu Product | |||||||||||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| pandas |
| ||||||||||||||||||||||
| ujson |
|
Common Weakness Enumeration
References