CVE-2016-4303

Published: Sep 26, 2016Modified: May 6, 2026

9.8

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Exploitability: 3.9 / Impact: 5.9

Source: NVD

Description

The parse_string function in cjson.c in the cJSON library mishandles UTF8/16 strings, which allows remote attackers to cause a denial of service (crash) or execute arbitrary code via a non-hex character in a JSON string, which triggers a heap-based buffer overflow.

Affected (6)

Products: Es: Iperf3 · Novell: Suse Package Hub For Suse Linux Enterprise · Opensuse: Leap, Opensuse · +1 more

Show all products

Es: Iperf3 · Novell: Suse Package Hub For Suse Linux Enterprise · Opensuse: Leap, Opensuse · Debian: Debian Linux

1 product

1 product

Suse Package Hub For Suse Linux Enterprise

2 products

1 product

Configuration A

2 vulnerable

Vulnerable Software	Affected Versions
Es Iperf3	From 3.0 to 3.0.12
Es Iperf3	From 3.1 to 3.1.3

Configuration B

3 vulnerable

Vulnerable Software	Affected Versions
Novell Suse Package Hub For Suse Linux Enterprise	Version 12
Opensuse Leap	Version 42.1
Opensuse Opensuse	Version 13.2

Configuration C

1 vulnerable

Vulnerable Software	Affected Versions
Debian Debian Linux	Version 8.0

Related CWEs

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

The product copies an input buffer to an output buffer without verifying that the size of the input buffer is less than the size of the output buffer, leading to a buffer overflow.

References (16)

http://blog.talosintel.com/2016/06/esnet-vulnerability.html

Source: cret@cert.org

ExploitThird Party Advisory

http://lists.opensuse.org/opensuse-updates/2016-08/msg00082.html

Source: cret@cert.org

Mailing ListThird Party Advisory

http://lists.opensuse.org/opensuse-updates/2016-08/msg00090.html

Source: cret@cert.org

Mailing ListThird Party Advisory

http://software.es.net/iperf/news.html#security-issue-iperf-3-1-3-iperf-3-0-12-released

Source: cret@cert.org

Release NotesThird Party Advisory

http://www.talosintelligence.com/reports/TALOS-2016-0164/

Source: cret@cert.org

ExploitThird Party Advisory

https://github.com/esnet/iperf/commit/91f2fa59e8ed80dfbf400add0164ee0e508e412a

Source: cret@cert.org

PatchThird Party Advisory

https://lists.debian.org/debian-lts-announce/2020/01/msg00023.html

Source: cret@cert.org

Mailing ListThird Party Advisory

https://raw.githubusercontent.com/esnet/security/master/cve-2016-4303/esnet-secadv-2016-0001.txt.asc

Source: cret@cert.org

Third Party Advisory

http://blog.talosintel.com/2016/06/esnet-vulnerability.html

Source: af854a3a-2127-422b-91ae-364da2661108

ExploitThird Party Advisory

http://lists.opensuse.org/opensuse-updates/2016-08/msg00082.html

Source: af854a3a-2127-422b-91ae-364da2661108

Mailing ListThird Party Advisory

http://lists.opensuse.org/opensuse-updates/2016-08/msg00090.html

Source: af854a3a-2127-422b-91ae-364da2661108

Mailing ListThird Party Advisory

http://software.es.net/iperf/news.html#security-issue-iperf-3-1-3-iperf-3-0-12-released

Source: af854a3a-2127-422b-91ae-364da2661108

Release NotesThird Party Advisory

http://www.talosintelligence.com/reports/TALOS-2016-0164/

Source: af854a3a-2127-422b-91ae-364da2661108

ExploitThird Party Advisory

https://github.com/esnet/iperf/commit/91f2fa59e8ed80dfbf400add0164ee0e508e412a

Source: af854a3a-2127-422b-91ae-364da2661108

PatchThird Party Advisory

https://lists.debian.org/debian-lts-announce/2020/01/msg00023.html

Source: af854a3a-2127-422b-91ae-364da2661108

Mailing ListThird Party Advisory

https://raw.githubusercontent.com/esnet/security/master/cve-2016-4303/esnet-secadv-2016-0001.txt.asc

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party Advisory

Timeline

No history available yet.