QwikSec

Security Database

CVE

CWE

Training

CVE-2020-10663

Published: Apr 28, 2020

Modified: Aug 4, 2024

PUBLISHED

Description

The JSON gem through 2.2.0 for Ruby, as used in Ruby 2.4 through 2.4.9, 2.5 through 2.5.7, and 2.6 through 2.6.5, has an Unsafe Object Creation Vulnerability. This is quite similar to CVE-2013-0269, but does not rely on poor garbage-collection behavior within Ruby. Specifically, use of JSON parsing methods can lead to creation of a malicious object within the interpreter, with adverse effects that are application-dependent.

Vendor	Product	Versions
n/a	n/a	affected `n/a`

References

https://www.ruby-lang.org/en/news/2020/03/19/json-dos-cve-2020-10663/

x_refsource_CONFIRM

[debian-lts-announce] 20200430 [SECURITY] [DLA 2192-1] ruby2.1 security update

mailing-list

x_refsource_MLIST

openSUSE-SU-2020:0586

vendor-advisory

x_refsource_SUSE

FEDORA-2020-26df92331a

vendor-advisory

x_refsource_FEDORA

FEDORA-2020-d171bf636d

vendor-advisory

x_refsource_FEDORA

FEDORA-2020-a95706b117

vendor-advisory

x_refsource_FEDORA

vendor-advisory

x_refsource_DEBIAN

[zookeeper-dev] 20200913 [jira] [Created] (ZOOKEEPER-3933) owasp failing with json-simple-1.1.1.jar: CVE-2020-10663, CVE-2020-7712

mailing-list

x_refsource_MLIST

[zookeeper-issues] 20200913 [jira] [Created] (ZOOKEEPER-3933) owasp failing with json-simple-1.1.1.jar: CVE-2020-10663, CVE-2020-7712

mailing-list

x_refsource_MLIST

[zookeeper-issues] 20200913 [jira] [Resolved] (ZOOKEEPER-3933) owasp failing with json-simple-1.1.1.jar: CVE-2020-10663, CVE-2020-7712

mailing-list

x_refsource_MLIST

[zookeeper-issues] 20200930 [jira] [Comment Edited] (ZOOKEEPER-3933) owasp failing with json-simple-1.1.1.jar: CVE-2020-10663, CVE-2020-7712

mailing-list

x_refsource_MLIST

[zookeeper-issues] 20200930 [jira] [Commented] (ZOOKEEPER-3933) owasp failing with json-simple-1.1.1.jar: CVE-2020-10663, CVE-2020-7712

mailing-list

x_refsource_MLIST

[zookeeper-issues] 20200930 [jira] [Issue Comment Deleted] (ZOOKEEPER-3933) owasp failing with json-simple-1.1.1.jar: CVE-2020-10663, CVE-2020-7712

mailing-list

x_refsource_MLIST

https://support.apple.com/kb/HT211931

x_refsource_CONFIRM

20201215 APPLE-SA-2020-12-14-4 Additional information for APPLE-SA-2020-11-13-1 macOS Big Sur 11.0.1

mailing-list

x_refsource_FULLDISC

[zookeeper-issues] 20210106 [jira] [Updated] (ZOOKEEPER-3933) owasp failing with json-simple-1.1.1.jar: CVE-2020-10663, CVE-2020-7712

mailing-list

x_refsource_MLIST

https://security.netapp.com/advisory/ntap-20210129-0003/

x_refsource_CONFIRM

[zookeeper-issues] 20210404 [jira] [Updated] (ZOOKEEPER-3933) owasp failing with json-simple-1.1.1.jar: CVE-2020-10663, CVE-2020-7712

mailing-list

x_refsource_MLIST

[zookeeper-issues] 20210404 [jira] [Assigned] (ZOOKEEPER-3933) owasp failing with json-simple-1.1.1.jar: CVE-2020-10663, CVE-2020-7712

mailing-list

x_refsource_MLIST

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.