CVE-2019-1010239 — NULL Pointer Dereference in Cjson Cjson

CWE-476 — NULL Pointer DereferenceCWE-754 — Improper Check for Unusual or Exceptional Conditions6 documents6 sources
Severity
7.5HIGHNVD
EPSS
0.7%
top 28.61%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
3
Oracle Timesten In-memory DatabaseDavegamble Cjson CjsonDavegamble Cjson
Timeline
PublishedJul 19
Latest updateMay 24

Description

DaveGamble/cJSON cJSON 1.7.8 is affected by: Improper Check for Unusual or Exceptional Conditions. The impact is: Null dereference, so attack can cause denial of service. The component is: cJSON_GetObjectItemCaseSensitive() function. The attack vector is: crafted json file. The fixed version is: 1.7.9 and later.

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:HExploitability: 3.9 | Impact: 3.6

Affected Packages3 packages

▶NVDdavegamble/cjson1.7.8
▶CVEListV5davegamble/cjson_cjson1.7.8 [fixed: 1.7.9 and later]

Patches

Patch: github.com ↗Patch: www.oracle.com ↗Patch: github.com ↗

🔴Vulnerability Details

3
GHSA
GHSA-fqq7-vx9f-v496: DaveGamble/cJSON cJSON 1↗2022-05-24
▶
CVEList
CVE-2019-1010239: DaveGamble/cJSON cJSON 1↗2019-07-19
▶
OSV
CVE-2019-1010239: DaveGamble/cJSON cJSON 1↗2019-07-19
▶

📋Vendor Advisories

2
Oracle
Oracle Oracle TimesTen In-Memory Database Risk Matrix: Install (Dave Gamble/cJSON) — CVE-2019-1010239↗2020-10-15
▶
Debian
CVE-2019-1010239: cjson - DaveGamble/cJSON cJSON 1.7.8 is affected by: Improper Check for Unusual or Excep...↗2019
▶
CVE-2019-1010239 — NULL Pointer Dereference | cvebase