Moderate: libfastjson security update
Summary
ALSA-2023:6431: Moderate: libfastjson security update. Affects libfastjson versions < 0.99.9-5.el9. Fixed in 0.99.9-5.el9. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The libfastjson library is a crucial component for handling JavaScript Object Notation (JSON) in C. It allows users to create JSON objects, convert them to JSON-formatted strings, and convert JSON-formatted strings back to the C representation of JSON objects.
Vulnerability Detail
The libfastjson library is affected by an integer overflow and out-of-bounds write vulnerability, identified as CVE-2020-12762. This vulnerability can be exploited by an attacker through a large JSON file, potentially leading to arbitrary code execution or denial of service. The impact of this vulnerability is considered moderate.
How To Fix
Minimum fixed version
0.99.9-5.el9
This is the first release that contains the fix.
sudo dnf update libfastjsonTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
There is no known workaround for this vulnerability. It is essential to apply the provided security update to ensure the mitigation of the issue.
Conclusion
In conclusion, the libfastjson library is affected by a moderate vulnerability that can be mitigated by updating the package to version 0.99.9-5.el9 or later. It is crucial to apply the provided security update to protect against potential exploitation. For further support on vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for libfastjson →
FAQ
Libfastjson is a library that enables JSON handling in C, allowing users to create, manipulate, and convert JSON objects.
CVE-2020-12762 can lead to arbitrary code execution or denial of service if exploited through a large JSON file.
To fix this vulnerability, update the libfastjson package to version 0.99.9-5.el9 or later.
No, there is no known workaround for this vulnerability. Updating the package is the recommended solution.
You can find more information about this vulnerability in the CVE page listed in the References section of the advisory.
Related vulnerabilities
Recent vulnerabilities recorded for libfastjson.
