jsonparser 1.0.0 allows attackers to cause a denial of service (panic: runtime error: slice bounds out of range) via a GET call.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - jsonparser 1.0.0 allows attackers to cause a denial of service (panic: runtime error: slice bounds out of     range) via a GET call. (CVE-2020-35381)

Note that Nessus relies on the presence of the package as reported by the vendor.

There are packages installed that are affected by a vulnerability referenced in the following CVE:

  - jsonparser 1.0.0 allows attackers to cause a denial of service (panic: runtime error: slice bounds out of
    range) via a GET call. (CVE-2020-35381)

The remote Fedora 32 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2021-b670727349 advisory.

  - jsonparser 1.0.0 allows attackers to cause a denial of service (panic: runtime error: slice bounds out of     range) via a GET call. (CVE-2020-35381)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Fedora 33 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2021-5676f1be7d advisory.

  - jsonparser 1.0.0 allows attackers to cause a denial of service (panic: runtime error: slice bounds out of     range) via a GET call. (CVE-2020-35381)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Severity
255658	Linux Distros Unpatched Vulnerability : CVE-2020-35381	Nessus	Misc.	high
412876	SCA: security update for github.com/buger/jsonparser (GHSA-8vrw-m3j9-j27c)	Tenable Cloud Security	SCA Checks	high
412876	SCA: security update for github.com/buger/jsonparser (GHSA-8vrw-m3j9-j27c)	Tenable Self-Hosted Container Security	SCA Checks	high
145190	Fedora 32 : golang-github-buger-jsonparser (2021-b670727349)	Nessus	Fedora Local Security Checks	high
145126	Fedora 33 : golang-github-buger-jsonparser (2021-5676f1be7d)	Nessus	Fedora Local Security Checks	high

Detections

Analytics

CVE-2020-35381

high

Tenable Plugins

high

high

high

high

high