GJSON <=v1.6.5 allows attackers to cause a denial of service (panic: runtime error: slice bounds out of range) via a crafted GET call.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - GJSON <=v1.6.5 allows attackers to cause a denial of service (panic: runtime error: slice bounds out of     range) via a crafted GET call. (CVE-2020-36067)

Note that Nessus relies on the presence of the package as reported by the vendor.

There are packages installed that are affected by a vulnerability referenced in the following CVE:

  - GJSON <=v1.6.5 allows attackers to cause a denial of service (panic: runtime error: slice bounds out of
    range) via a crafted GET call. (CVE-2020-36067)

An update of the telegraf package has been released.

ID	Name	Product	Family	Severity
255735	Linux Distros Unpatched Vulnerability : CVE-2020-36067	Nessus	Misc.	high
417323	SCA: security update for github.com/tidwall/gjson (GHSA-p64j-r5f4-pwwx)	Tenable Cloud Security	SCA Checks	high
417323	SCA: security update for github.com/tidwall/gjson (GHSA-p64j-r5f4-pwwx)	Tenable Self-Hosted Container Security	SCA Checks	high
204388	Photon OS 5.0: Telegraf PHSA-2023-5.0-0041	Nessus	PhotonOS Local Security Checks	high

Detections

Analytics

CVE-2020-36067

high

Tenable Plugins

high

high

high

high