CVE-2010-1666: Buffer Overflow in python-cjson
Summary
CVE-2010-1666: Improper Restriction of Operations within the Bounds of a Memory Buffer in python-cjson. Affects python-cjson versions < 1.0.5.1. Fixed in 1.0.5.1. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Habilume
Habit tracker with a companion that grows with you
Complete habits, earn Lume Points, and watch your Lume grow as you stay consistent.
Background
python-cjson is a Python extension module that provides a fast JSON encoder/decoder for Python. It is commonly used to serialize and deserialize JSON data. The vulnerability affects version 1.0.5 of python-cjson when UCS-4 encoding is enabled.
Vulnerability Detail
The vulnerability in python-cjson 1.0.5 is due to an improper restriction of operations within the bounds of a memory buffer. This can be exploited by context-dependent attackers through crafted Unicode input to the cjson.encode function. The impact of this vulnerability includes a denial of service (application crash) or potentially other unspecified consequences.
How To Fix
Minimum fixed version
1.0.5.1
This is the first release that contains the fix.
pip install --upgrade "python-cjson==1.0.5.1"Tip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
There is no known workaround for this vulnerability. It is recommended to apply the fix mentioned above.
Conclusion
In conclusion, the buffer overflow vulnerability in python-cjson 1.0.5 can lead to a denial of service or other potential impacts. It is crucial to upgrade to version 1.0.5.1 or later to mitigate this vulnerability. For further support on vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for python-cjson →
FAQ
python-cjson is a Python extension module that provides a fast JSON encoder/decoder for Python.
Version 1.0.5 of python-cjson is affected.
The vulnerability can result in a denial of service (application crash) or potentially other unspecified consequences.
To fix this vulnerability, upgrade to version 1.0.5.1 or later of python-cjson.
There is no known workaround for this vulnerability. It is recommended to apply the fix mentioned above.
Related vulnerabilities
Recent vulnerabilities recorded for python-cjson.
Habilume
Habit tracker with a companion that grows with you
Complete habits, earn Lume Points, and watch your Lume grow as you stay consistent.
