GJSON <1.6.5 allows attackers to cause a denial of service (remote) via crafted JSON.

An update of the telegraf package has been released.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - GJSON <1.6.5 allows attackers to cause a denial of service (remote) via crafted JSON. (CVE-2020-36066)

Note that Nessus relies on the presence of the package as reported by the vendor.

There are packages installed that are affected by a vulnerability referenced in the following CVE:

  - GJSON <1.6.5 allows attackers to cause a denial of service (remote) via crafted JSON. (CVE-2020-36066)

ID	Name	Product	Family	Type	Severity
333780	Photon OS 5.0: Telegraf PHSA-2023-5.0-91-0041	Nessus	PhotonOS Local Security Checks	Local	high
257173	Linux Distros Unpatched Vulnerability : CVE-2020-36066	Nessus	Misc.	Local	high
419972	SCA: security update for github.com/tidwall/gjson (GHSA-wjm3-fq3r-5x46)	Tenable Cloud Security	SCA Checks	Local	high
419972	SCA: security update for github.com/tidwall/gjson (GHSA-wjm3-fq3r-5x46)	Tenable Self-Hosted Container Security	SCA Checks	Local	high
204388	Photon OS 5.0: Telegraf PHSA-2023-5.0-0041	Nessus	PhotonOS Local Security Checks	Local	high

Detections

Analytics

CVE-2020-36066

high

Tenable Plugins

high

high

high

high

high