Vulnerability in Json-C

CVE-2013-6371

The hash functionality in json-c before 0.12 allows context-dependent attackers to cause a denial of service (CPU consumption) via crafted JSON data, involving collisions.

Vulnerability class: POODLE (CVE-2014-3566)

EPSS: 0.030 (86.1th percentile) — read the EPSS interpretation.

Affected products

Json-c
Fedoraproject Fedora — versions 20
N/a — versions n/a

Weakness classification (CWE)

CWE-310 — Cryptographic Issues

References

secalert@redhat.com (vendor-advisory, x_refsource_MANDRIVA, Broken Link)
secalert@redhat.com (x_refsource_CONFIRM, Issue Tracking)
secalert@redhat.com (VDB Entry, vdb-entry, x_refsource_XF)
secalert@redhat.com (Permissions Required, x_refsource_SECUNIA, Third Party Advisory, third-party-advisory)
secalert@redhat.com (VDB Entry, Third Party Advisory, vdb-entry, x_refsource_BID)
secalert@redhat.com (vendor-advisory, x_refsource_FEDORA, Third Party Advisory)
secalert@redhat.com (x_refsource_CONFIRM, Patch, Issue Tracking)
secalert@redhat.com (x_refsource_CONFIRM, Third Party Advisory)