Buffer overflow in Dan Pascu python-cjson 1.0.5, when UCS-4 encoding is enabled, allows context-dependent attackers to cause a denial of service (application crash) or possibly have unspecified other impact via vectors involving crafted Unicode input to the cjson.encode function.

There are packages installed that are affected by a vulnerability referenced in the following CVE:

  - Buffer overflow in Dan Pascu python-cjson 1.0.5, when UCS-4 encoding is enabled, allows context-dependent
    attackers to cause a denial of service (application crash) or possibly have unspecified other impact via
    vectors involving crafted Unicode input to the cjson.encode function. (CVE-2010-1666)

- Sat Jul 3 2010 Felix Schwarz <felix.schwarz at     oss.schwarz.eu> - 1.0.5-5

    - CVE-2010-1666 (fixed by including a patch from Ubuntu,       see Launchpad 585274)

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

Matt Giuca discovered a buffer overflow in python-cjson, a fast JSON encoder/decoder for Python. This allows a remote attacker to cause a denial of service (application crash) through a specially crafted Python script.

ID	Name	Product	Family	Severity
414037	SCA: security update for python-cjson (GHSA-cqmh-mpx2-g633)	Tenable Cloud Security	SCA Checks	medium
414037	SCA: security update for python-cjson (GHSA-cqmh-mpx2-g633)	Tenable Self-Hosted Container Security	SCA Checks	medium
47770	Fedora 13 : python-cjson-1.0.5-5.fc13 (2010-10728)	Nessus	Fedora Local Security Checks	medium
47769	Fedora 12 : python-cjson-1.0.5-5.fc12 (2010-10710)	Nessus	Fedora Local Security Checks	medium
47704	Debian DSA-2068-1 : python-cjson - buffer overflow	Nessus	Debian Local Security Checks	medium

Detections

Analytics

CVE-2010-1666

medium

Tenable Plugins

medium

medium

medium

medium

medium