Debian/jq: critical 9.8
Off-by-one error in the tokenadd function in jv_parse.c in jq allows remote attackers to cause a denial of service (crash) via a long JSON-encoded number, which triggers a heap-based buffer overflow.
Action: Upgrade jq to 1.5+dfsg-1.1 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 1.5+dfsg-1.1 | - |
Fixed versions
| 1.5+dfsg-1.1 |
Sources
published · modified · JSON