debian/jansson vulnerabilities

Latest debian/jansson CVEs

Newest publication first

1. CVE-2016-4425 Jansson 2.7 and earlier allows context-dependent attackers to cause a denial of service (deep recursion, stack consumption, and crash) via crafted JSON data.

   Published 2016-05-17

   High·CVSS 7.5 EPSS 1.9%

   Jansson 2.7 and earlier allows context-dependent attackers to cause a denial of service (deep recursion, stack consumption, and crash) via crafted JSON data.

2. DSA-3577-1 jansson - security update

   Published 2016-05-14

   Unknown

3. DLA-471-1 jansson - security update

   Published 2016-05-13

   Unknown

4. CVE-2013-6401 Jansson, possibly 2.4 and earlier, does not restrict the ability to trigger hash collisions predictably, which allows context-dependent attackers to cause a denial of service (CPU consumption) via a c...

   Published 2014-03-20

   Medium·CVSS 5.0 EPSS 2.0%

   Jansson, possibly 2.4 and earlier, does not restrict the ability to trigger hash collisions predictably, which allows context-dependent attackers to cause a denial of service (CPU consumption) via a crafted JSON document.

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.