tocsin

Debian/json-c: unknown

The hash functionality in json-c before 0.12 allows context-dependent attackers to cause a denial of service (CPU consumption) via crafted JSON data, involving collisions.

Action: Upgrade json-c to 0.11-4 or later.

Affected

introducedfixedlast affected
00.11-4-

Fixed versions

0.11-4

Sources

published · modified · JSON