CVE-2013-6370

Published: Apr 22, 2014Modified: May 6, 2026

5.0

Vector

AV:N/AC:L/Au:N/C:N/I:N/A:P

Exploitability: 10.0 / Impact: 2.9

Source: NVD

Description

Buffer overflow in the printbuf APIs in json-c before 0.12 allows remote attackers to cause a denial of service via unspecified vectors.

Affected (2)

Products: Json C: Json C · Fedoraproject: Fedora

1 product

1 product

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Json C Json C	Before 0.12-20140410

Configuration B

1 vulnerable

Vulnerable Software	Affected Versions
Fedoraproject Fedora	Version 20

Related CWEs

CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.

References (16)

http://lists.fedoraproject.org/pipermail/package-announce/2014-April/131845.html

Source: secalert@redhat.com

Mailing List

http://secunia.com/advisories/57791

Source: secalert@redhat.com

Permissions RequiredThird Party Advisory

http://www.mandriva.com/security/advisories?name=MDVSA-2014:079

Source: secalert@redhat.com

Broken Link

http://www.oracle.com/technetwork/topics/security/bulletinoct2015-2511968.html

Source: secalert@redhat.com

Third Party Advisory

http://www.securityfocus.com/bid/66720

Source: secalert@redhat.com

Third Party AdvisoryVDB Entry

https://bugzilla.redhat.com/show_bug.cgi?id=1032322

Source: secalert@redhat.com

Issue Tracking

https://exchange.xforce.ibmcloud.com/vulnerabilities/92540

Source: secalert@redhat.com

VDB Entry

https://github.com/json-c/json-c/commit/64e36901a0614bf64a19bc3396469c66dcd0b015

Source: secalert@redhat.com

ExploitPatch

http://lists.fedoraproject.org/pipermail/package-announce/2014-April/131845.html