Ubuntu Security Notice (C) 2014 Canonical, Inc. / NASL script (C) 2014 Tenable Network Security, Inc.
The remote Ubuntu host is missing a security-related patch.
Florian Weimer discovered that json-c incorrectly handled buffer
lengths. An attacker could use this issue with a specially crafted
large JSON document to cause json-c to crash, resulting in a denial of
Florian Weimer discovered that json-c incorrectly handled hash arrays.
An attacker could use this issue with a specially crafted JSON
document to cause json-c to consume CPU resources, resulting in a
denial of service. (CVE-2013-6371).
Update the affected libjson0 package.
Risk factor :
Medium / CVSS Base Score : 5.0
CVSS Temporal Score : 4.3
Public Exploit Available : false
Family: Ubuntu Local Security Checks
Nessus Plugin ID: 74509 ()
Bugtraq ID: 6671566720
CVE ID: CVE-2013-6370CVE-2013-6371
The cookie settings on this website are set to 'allow all cookies' to give you the very best website experience. If you continue without changing these settings, you consent to this - but if you want, you can opt out of all cookies by clicking below.