GJSON before 1.6.4 allows attackers to cause a denial of service via crafted JSON.

An update of the telegraf package has been released.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - GJSON before 1.6.4 allows attackers to cause a denial of service via crafted JSON. (CVE-2020-35380)

Note that Nessus relies on the presence of the package as reported by the vendor.

There are packages installed that are affected by a vulnerability referenced in the following CVE:

  - GJSON before 1.6.4 allows attackers to cause a denial of service via crafted JSON. (CVE-2020-35380)

ID	Name	Product	Family	Type	Severity
333780	Photon OS 5.0: Telegraf PHSA-2023-5.0-91-0041	Nessus	PhotonOS Local Security Checks	Local	high
259013	Linux Distros Unpatched Vulnerability : CVE-2020-35380	Nessus	Misc.	Local	high
419826	SCA: security update for github.com/tidwall/gjson (GHSA-w942-gw6m-p62c)	Tenable Cloud Security	SCA Checks	Local	high
419826	SCA: security update for github.com/tidwall/gjson (GHSA-w942-gw6m-p62c)	Tenable Self-Hosted Container Security	SCA Checks	Local	high
204388	Photon OS 5.0: Telegraf PHSA-2023-5.0-0041	Nessus	PhotonOS Local Security Checks	Local	high

Detections

Analytics

CVE-2020-35380

high

Tenable Plugins

high

high

high

high

high