Salvatore Bonaccorso pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
3290ae3b by Salvatore Bonaccorso at 2025-05-23T23:04:11+02:00
Add CVE-2023-53154/cjson
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -369,6 +369,10 @@ CVE-2024-48702 (PHPGurukul Old Age Home Management System
v1.0 is vulnerable to
CVE-2024-13945 (Stored Absolute Path Traversal vulnerabilities in ASPECT could
expose ...)
NOT-FOR-US: ABB group
CVE-2023-53154 (parse_string in cJSON before 1.7.18 has a heap-based buffer
over-read ...)
+ - cjson 1.7.18-1
+ NOTE: https://github.com/DaveGamble/cJSON/issues/800
+ NOTE: https://github.com/DaveGamble/cJSON/pull/852
+ NOTE: Fixed by:
https://github.com/DaveGamble/cJSON/commit/3ef4e4e730e5efd381be612df41e1ff3f5bb3c32
(v1.7.18)
TODO: check
CVE-2023-34873 (On MOBOTIX P3 cameras before MX-V4.7.2.18 and Mx6 cameras
before MX-V5 ...)
NOT-FOR-US: MOBOTIX P3 cameras
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/3290ae3b0b2cdec3025c63979078f36e13f9a093
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/3290ae3b0b2cdec3025c63979078f36e13f9a093
You're receiving this email because of your account on salsa.debian.org.
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
