CVE-2013-6370: Buffer Overflow
Buffer overflow in the printbuf APIs in json-c before 0.12 allows remote attackers to cause a denial of service via unspecified vectors.
Other sources
Florian Weimer reported that the printbuf APIs used in the json-c library used ints for counting buffer lengths, which is inappropriate for 32bit architectures. These functions need to be changed to using sizet if possible for sizes, or to be hardened against negative values if not. This could be used to cause a denial of service in an application linked to the json-c library.
Acknowledgements:
This issue was discovered by Florian Weimer of the Red Hat Product Security Team.
— Red Hat
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2013-6370?
CVE-2013-6370 has a severity rating that indicates it can lead to a denial of service.
How do I fix CVE-2013-6370?
To fix CVE-2013-6370, ensure you upgrade to json-c version 0.12 or later.
What software is affected by CVE-2013-6370?
CVE-2013-6370 affects json-c versions prior to 0.12 and Fedora 20.
What type of vulnerability is CVE-2013-6370?
CVE-2013-6370 is classified as a buffer overflow vulnerability.
Who reported the issue of CVE-2013-6370?
CVE-2013-6370 was reported by Florian Weimer.