CVE-2020-12762
published 2020-05-09CVE-2020-12762: json-c through 0.14 has an integer overflow and out-of-bounds write via a large JSON file, as demonstrated by printbuf_memappend.
PriorityP337high7.8CVSS 3.1
AVLACLPRNUIRSUCHIHAH
EPSS
1.89%
77.4th percentile
json-c through 0.14 has an integer overflow and out-of-bounds write via a large JSON file, as demonstrated by printbuf_memappend.
Affected
30 ranges· showing 25
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| canonical | ubuntu_linux | — | — |
| canonical | ubuntu_linux | — | — |
| canonical | ubuntu_linux | — | — |
| canonical | ubuntu_linux | — | — |
| canonical | ubuntu_linux | — | — |
| canonical | ubuntu_linux | — | — |
| debian | debian_linux | — | — |
| debian | debian_linux | — | — |
| debian | debian_linux | — | — |
| debian | json-c | < json-c 0.13.1+dfsg-8 (bookworm) | json-c 0.13.1+dfsg-8 (bookworm) |
| debian | libfastjson | < json-c 0.13.1+dfsg-8 (bookworm) | json-c 0.13.1+dfsg-8 (bookworm) |
| fedoraproject | fedora | — | — |
| fedoraproject | fedora | — | — |
| fedoraproject | fedora | — | — |
| json-c | json-c | < 0.15-20200726 | 0.15-20200726 |
| json-c | json-c | >= 0 < 0.13.1+dfsg-8 | 0.13.1+dfsg-8 |
| json-c | json-c | >= 0 < 0.13.1+dfsg-8 | 0.13.1+dfsg-8 |
| json-c | json-c | >= 0 < 0.13.1+dfsg-8 | 0.13.1+dfsg-8 |
| json-c | json-c | >= 0 < 0.13.1+dfsg-8 | 0.13.1+dfsg-8 |
| json-c | json-c | >= 0 < 0.11-4ubuntu2.6 | 0.11-4ubuntu2.6 |
| json-c | json-c | >= 0 < 0.12.1-1.3ubuntu0.3 | 0.12.1-1.3ubuntu0.3 |
| json-c | json-c | >= 0 < 0.13.1+dfsg-7ubuntu0.3 | 0.13.1+dfsg-7ubuntu0.3 |
| json-c | json-c | >= 0 < 0.11-3ubuntu1.2+esm3 | 0.11-3ubuntu1.2+esm3 |
| msrc | cbl2_json-c_0.15-2_on_cbl_mariner_2.0 | — | — |
| msrc | cbl_mariner_1.0_arm | — | — |
CVSS provenance
nvdv3.17.8HIGHCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
nvdv2.06.8MEDIUMAV:N/AC:M/Au:N/C:P/I:P/A:P
osv7.8HIGH
vendor_debian7.8HIGH
vendor_msrc7.8HIGH
vendor_redhat7.8HIGH
vendor_ubuntu7.8HIGH
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
CISA ICS
Siemens SIMATIC S7-1500 CPU 1518(F)-4 PN/DP MFP V3.1
cisa_ics·2023-12-14
Siemens SIMATIC S7-1500 CPU 1518(F)-4 PN/DP MFP V3.1
ICS Advisory
##
Siemens SIMATIC S7-1500 CPU 1518(F)-4 PN/DP MFP V3.1
Release DateDecember 14, 2023
Alert CodeICSA-23-348-10
As of January 10, 2023, CISA will no longer be updating ICS security advisories for Siemens product vulnerabilities beyond the initial advisory. For the most up-to-date information on vulnerabilities in this advisory, please see Siemens' ProductCERT Security Advisories (CERT Services | Services | Siemens Global).
View CSAF
## 1. EXECUTIVE SUMMARY
- CVSS v3 9.8
- ATTENTION: Exploitable remotely/low attack complexity
- Vendor: Siemens
- Equipment: SIMATIC S7-1500 CPU 1518(F)-4 PN/DP MFP V3.1
- Vulnerabilities: Improper Restriction of XML External Entity Reference, Time-of-check Time-of-use (TOCTOU) Race Condition, Command Injection, Miss
CISA ICS
Siemens SINEC INS
cisa_ics·2022-09-15·CVSS 7.8
[HIGH] Siemens SINEC INS
## Archived Content In an effort to keep CISA.gov current, the archive contains outdated information that may not reflect current policy or programs.
ICS Advisory
##
Siemens SINEC INS
Last RevisedSeptember 15, 2022
Alert CodeICSA-22-258-05
## 1. EXECUTIVE SUMMARY
- CVSS v3 8.8
- ATTENTION: Exploitable remotely/Low attack complexity
- Vendor: Siemens
- Equipment: SINEC INS
- Vulnerabilities: Improper Input Validation, Integer Overflow or Wraparound, Uncontrolled Resource Consumption, Command Injection, Inadequate Encryption Strength, Missing Encryption of Sensitive Data, Improper Restriction of Operations Within the Bounds of a Memory Buffer, Exposure of Private Personal Information to an Unauthorized Actor, Open Redirect, Improper Resour
Ubuntu
json-c vulnerability
vendor_ubuntu·2020-05-28·CVSS 7.8
CVE-2020-12762 [HIGH] json-c vulnerability
Title: json-c vulnerability
Summary: json-c could be made to execute arbitrary code if it received
a specially crafted JSON file.
USN-4360-1 fixed a vulnerability in json-c. The security fix introduced a
memory leak that was reverted in USN-4360-2 and USN-4360-3. This update provides
the correct fix update for CVE-2020-12762.
Original advisory details:
It was discovered that json-c incorrectly handled certain JSON files.
An attacker could possibly use this issue to execute arbitrary code.
Instructions: In general, a standard system update will make all the necessary changes.
Ubuntu
json-c vulnerability
vendor_ubuntu·2020-05-14
CVE-2020-12762 json-c vulnerability
Title: json-c vulnerability
Summary: json-c could be made to execute arbitrary code if it received
a specially crafted JSON file.
It was discovered that json-c incorrectly handled certain JSON files.
An attacker could possibly use this issue to execute arbitrary code.
Instructions: In general, a standard system update will make all the necessary changes.
Microsoft
json-c through 0.14 has an integer overflow and out-of-bounds write via a large JSON file as demonstrated by printbuf_memappend.
vendor_msrc·2020-05-12·CVSS 7.8
CVE-2020-12762 [HIGH] CWE-787 json-c through 0.14 has an integer overflow and out-of-bounds write via a large JSON file as demonstrated by printbuf_memappend.
json-c through 0.14 has an integer overflow and out-of-bounds write via a large JSON file as demonstrated by printbuf_memappend.
FAQ: Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?
One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See this blog post for more information. If impact to additional products is identified, we will update the CVE to reflect this.
Mariner: Mariner
mitre: mitre
Customer Action R
Red Hat
libfastjson: integer overflow and out-of-bounds write via a large JSON file
vendor_redhat·2020-05-02·CVSS 7.8
CVE-2020-12762 [HIGH] CWE-190 libfastjson: integer overflow and out-of-bounds write via a large JSON file
libfastjson: integer overflow and out-of-bounds write via a large JSON file
json-c through 0.14 has an integer overflow and out-of-bounds write via a large JSON file, as demonstrated by printbuf_memappend.
A flaw was found in json-c. In printbuf_memappend, certain crafted values can overflow the memory allowing an attacker to write past the memory boundary. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.
Statement: This is essentially a integer overflow in the 'size' variable caused by large data input. In most systems its a signed integer overflow and results in out of bounds buffer write on the heap. However the impact is greatly reduced because such an attack is only possible if the application compiled with json-c i
Debian
CVE-2020-12762: json-c - json-c through 0.14 has an integer overflow and out-of-bounds write via a large ...
vendor_debian·2020·CVSS 7.8
CVE-2020-12762 [HIGH] CVE-2020-12762: json-c - json-c through 0.14 has an integer overflow and out-of-bounds write via a large ...
json-c through 0.14 has an integer overflow and out-of-bounds write via a large JSON file, as demonstrated by printbuf_memappend.
Scope: local
bookworm: resolved (fixed in 0.13.1+dfsg-8)
bullseye: resolved (fixed in 0.13.1+dfsg-8)
forky: resolved (fixed in 0.13.1+dfsg-8)
sid: resolved (fixed in 0.13.1+dfsg-8)
trixie: resolved (fixed in 0.13.1+dfsg-8)
GHSA
GHSA-3797-gmjf-45gm: json-c through 0
ghsa_unreviewed·2022-05-24
CVE-2020-12762 [MEDIUM] CWE-190 GHSA-3797-gmjf-45gm: json-c through 0
json-c through 0.14 has an integer overflow and out-of-bounds write via a large JSON file, as demonstrated by printbuf_memappend.
OSV
json-c vulnerability
osv·2020-05-28·CVSS 7.8
CVE-2020-12762 [HIGH] json-c vulnerability
json-c vulnerability
USN-4360-1 fixed a vulnerability in json-c. The security fix introduced a
memory leak that was reverted in USN-4360-2 and USN-4360-3. This update provides
the correct fix update for CVE-2020-12762.
Original advisory details:
It was discovered that json-c incorrectly handled certain JSON files.
An attacker could possibly use this issue to execute arbitrary code.
OSV
CVE-2020-12762: json-c through 0
osv·2020-05-09·CVSS 7.8
CVE-2020-12762 [HIGH] CVE-2020-12762: json-c through 0
json-c through 0.14 has an integer overflow and out-of-bounds write via a large JSON file, as demonstrated by printbuf_memappend.
No detection rules found.
No public exploits indexed.
Bugzilla
CVE-2020-12762 json-c12: json-c: integer overflow and out-of-bounds write via a large JSON file [epel-7]
bugzilla·2020-05-15·CVSS 7.8
CVE-2020-12762 [HIGH] CVE-2020-12762 json-c12: json-c: integer overflow and out-of-bounds write via a large JSON file [epel-7]
CVE-2020-12762 json-c12: json-c: integer overflow and out-of-bounds write via a large JSON file [epel-7]
This is an automatically created tracking bug! It was created to ensure
that one or more security vulnerabilities are fixed in affected versions
of epel-7.
For comments that are specific to the vulnerability please use bugs filed
against the "Security Response" product referenced in the "Blocks" field.
For more information see:
http://fedoraproject.org/wiki/Security/TrackingBugs
When submitting as an update, use the fedpkg template provided in the next
comment(s). This will include the bug IDs of this tracking bug as well as
the relevant top-level CVE bugs.
Please also mention the CVE IDs being fixed in the RPM changelog and the
fedpkg commit message.
Discussion:
Use the followin
Bugzilla
CVE-2020-12762 json-c12: json-c: integer overflow and out-of-bounds write via a large JSON file [epel-6]
bugzilla·2020-05-15·CVSS 7.8
CVE-2020-12762 [HIGH] CVE-2020-12762 json-c12: json-c: integer overflow and out-of-bounds write via a large JSON file [epel-6]
CVE-2020-12762 json-c12: json-c: integer overflow and out-of-bounds write via a large JSON file [epel-6]
This is an automatically created tracking bug! It was created to ensure
that one or more security vulnerabilities are fixed in affected versions
of epel-6.
For comments that are specific to the vulnerability please use bugs filed
against the "Security Response" product referenced in the "Blocks" field.
For more information see:
http://fedoraproject.org/wiki/Security/TrackingBugs
When submitting as an update, use the fedpkg template provided in the next
comment(s). This will include the bug IDs of this tracking bug as well as
the relevant top-level CVE bugs.
Please also mention the CVE IDs being fixed in the RPM changelog and the
fedpkg commit message.
Discussion:
Use the followin
Bugzilla
CVE-2020-12762 json-c: integer overflow and out-of-bounds write via a large JSON file [fedora-all]
bugzilla·2020-05-13·CVSS 7.8
CVE-2020-12762 [HIGH] CVE-2020-12762 json-c: integer overflow and out-of-bounds write via a large JSON file [fedora-all]
CVE-2020-12762 json-c: integer overflow and out-of-bounds write via a large JSON file [fedora-all]
This is an automatically created tracking bug! It was created to ensure
that one or more security vulnerabilities are fixed in affected versions
of fedora-all.
For comments that are specific to the vulnerability please use bugs filed
against the "Security Response" product referenced in the "Blocks" field.
For more information see:
http://fedoraproject.org/wiki/Security/TrackingBugs
When submitting as an update, use the fedpkg template provided in the next
comment(s). This will include the bug IDs of this tracking bug as well as
the relevant top-level CVE bugs.
Please also mention the CVE IDs being fixed in the RPM changelog and the
fedpkg commit message.
NOTE: this issue affects multip
Bugzilla
CVE-2020-12762 json-c, libfastjson: integer overflow and out-of-bounds write via a large JSON file
bugzilla·2020-05-13·CVSS 7.8
CVE-2020-12762 [HIGH] CVE-2020-12762 json-c, libfastjson: integer overflow and out-of-bounds write via a large JSON file
CVE-2020-12762 json-c, libfastjson: integer overflow and out-of-bounds write via a large JSON file
json-c through 0.14 has an integer overflow and out-of-bounds write via a large JSON file, as demonstrated by printbuf_memappend.
Reference:
https://github.com/json-c/json-c/pull/592
Discussion:
Created json-c tracking bugs for this issue:
Affects: fedora-all [bug 1835255]
---
Upstream patch: https://github.com/json-c/json-c/pull/592/commits/d07b91014986900a3a75f306d302e13e005e9d67
---
Statement:
This is essentially a integer overflow in the 'size' variable caused by large data input. In most systems its a signed integer overflow and results in out of bounds buffer write on the heap. However the impact is greatly reduced because such an attack is only possible if the application com
https://cert-portal.siemens.com/productcert/pdf/ssa-637483.pdfhttps://github.com/json-c/json-c/pull/592https://github.com/rsyslog/libfastjson/issues/161https://lists.debian.org/debian-lts-announce/2020/05/msg00032.htmlhttps://lists.debian.org/debian-lts-announce/2020/05/msg00034.htmlhttps://lists.debian.org/debian-lts-announce/2020/07/msg00031.htmlhttps://lists.debian.org/debian-lts-announce/2023/06/msg00023.htmlhttps://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/CBR36IXYBHITAZFB5PFBJTED22WO5ONB/https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/CQQRRGBQCAWNCCJ2HN3W5SSCZ4QGMXQI/https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/W226TSCJBEOXDUFVKNWNH7ETG7AR6MCS/https://security.gentoo.org/glsa/202006-13https://security.netapp.com/advisory/ntap-20210521-0001/https://usn.ubuntu.com/4360-1/https://usn.ubuntu.com/4360-4/https://www.debian.org/security/2020/dsa-4741https://cert-portal.siemens.com/productcert/pdf/ssa-637483.pdfhttps://github.com/json-c/json-c/pull/592https://github.com/rsyslog/libfastjson/issues/161https://lists.debian.org/debian-lts-announce/2020/05/msg00032.htmlhttps://lists.debian.org/debian-lts-announce/2020/05/msg00034.htmlhttps://lists.debian.org/debian-lts-announce/2020/07/msg00031.htmlhttps://lists.debian.org/debian-lts-announce/2023/06/msg00023.htmlhttps://lists.debian.org/debian-lts-announce/2025/07/msg00021.htmlhttps://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/CBR36IXYBHITAZFB5PFBJTED22WO5ONB/https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/CQQRRGBQCAWNCCJ2HN3W5SSCZ4QGMXQI/https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/W226TSCJBEOXDUFVKNWNH7ETG7AR6MCS/https://security.gentoo.org/glsa/202006-13https://security.netapp.com/advisory/ntap-20210521-0001/https://usn.ubuntu.com/4360-1/https://usn.ubuntu.com/4360-4/https://www.debian.org/security/2020/dsa-4741
2020-05-09
Published