oval:org.mitre.oval:def:25278
| Definition Id: oval:org.mitre.oval:def:25278 | |||
| Oval ID: | oval:org.mitre.oval:def:25278 | ||
| Title: | RHSA-2014:0703: json-c security update (Moderate) | ||
| Description: | JSON-C implements a reference counting object model that allows you to easily construct JSON objects in C, output them as JSON-formatted strings, and parse JSON-formatted strings back into the C representation of JSON objects. Multiple buffer overflow flaws were found in the way the json-c library handled long strings in JSON documents. An attacker able to make an application using json-c parse excessively large JSON input could cause the application to crash. (CVE-2013-6370) A denial of service flaw was found in the implementation of hash arrays in json-c. An attacker could use this flaw to make an application using json-c consume an excessive amount of CPU time by providing a specially crafted JSON document that triggers multiple hash function collisions. To mitigate this issue, json-c now uses a different hash function and randomization to reduce the chance of an attacker successfully causing intentional collisions. (CVE-2013-6371) These issues were discovered by Florian Weimer of the Red Hat Product Security Team. All json-c users are advised to upgrade to these updated packages, which contain backported patches to correct these issues. | ||
| Family: | unix | Class: | patch |
| Reference(s): | RHSA-2014:0703-00 CVE-2013-6370 CVE-2013-6371 | Version: | 4 |
| Platform(s): | Red Hat Enterprise Linux 7 CentOS Linux 7 | Product(s): | json-c |
| Definition Synopsis: | |||
| |||
| Definition Id: oval:org.mitre.oval:def:24773 | |||
| Oval ID: | oval:org.mitre.oval:def:24773 | ||
| Title: | The operating system installed on the system is CentOS Linux 7.x | ||
| Description: | The operating system installed on the system is CentOS Linux 7.x | ||
| Family: | unix | Class: | inventory |
| Reference(s): | cpe:/o:centos:centos:7 | Version: | 3 |
| Platform(s): | CentOS Linux 7 | Product(s): | |
| Definition Synopsis: | |||
| Referenced By: | |||
| oval:org.mitre.oval:def:25278 | |||
| Definition Id: oval:org.mitre.oval:def:24953 | |||
| Oval ID: | oval:org.mitre.oval:def:24953 | ||
| Title: | The operating system installed on the system is Red Hat Enterprise Linux 7 | ||
| Description: | The operating system installed on the system is Red Hat Enterprise Linux 7. | ||
| Family: | unix | Class: | inventory |
| Reference(s): | cpe:/o:redhat:enterprise_linux:7 | Version: | 3 |
| Platform(s): | Red Hat Enterprise Linux 7 | Product(s): | |
| Definition Synopsis: | |||
| Referenced By: | |||
| oval:org.mitre.oval:def:25278 | |||
