Back to search
CVE-2015-8863
Published: May 6, 2016
Modified: Aug 6, 2024
PUBLISHED
Description
Off-by-one error in the tokenadd function in jv_parse.c in jq allows remote attackers to cause a denial of service (crash) via a long JSON-encoded number, which triggers a heap-based buffer overflow.
| Vendor | Product | Versions |
|---|---|---|
n/a | n/a | affected n/a |
References
RHSA-2016:1106
vendor-advisory
x_refsource_REDHAT
RHSA-2016:1099
vendor-advisory
x_refsource_REDHAT
[oss-security] 20160423 Re: CVE Request: jq: heap buffer overflow in tokenadd() function
mailing-list
x_refsource_MLIST
openSUSE-SU-2016:1212
vendor-advisory
x_refsource_SUSE
RHSA-2016:1098
vendor-advisory
x_refsource_REDHAT
https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=802231
x_refsource_CONFIRM
https://github.com/stedolan/jq/issues/995
x_refsource_CONFIRM
[oss-security] 20160423 CVE Request: jq: heap buffer overflow in tokenadd() function
mailing-list
x_refsource_MLIST
openSUSE-SU-2016:1214
vendor-advisory
x_refsource_SUSE
GLSA-201612-20
vendor-advisory
x_refsource_GENTOO
Security Training
Train your team to recognize and prevent security threats with our comprehensive security awareness program.
Start TrainingVulnerability Scanning
Discover vulnerabilities in your applications and infrastructure before attackers do.
Scan Now