CVE-2013-6370

MediumCVSS 5.0/10Last modified Jun 17, 2026

Description

Buffer overflow in the printbuf APIs in json-c before 0.12 allows remote attackers to cause a denial of service via unspecified vectors.

Metrics

CVSS 2.0 5.0/10AV:N/AC:L/Au:N/C:N/I:N/A:P

Weakness enumeration

CWE-119

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://lists.fedoraproject.org/pipermail/package-announce/2014-April/131845.htmlMailing List
http://secunia.com/advisories/57791Permissions Required, Third Party Advisory
http://www.mandriva.com/security/advisories?name=MDVSA-2014:079Broken Link
http://www.oracle.com/technetwork/topics/security/bulletinoct2015-2511968.htmlThird Party Advisory
http://www.securityfocus.com/bid/66720Third Party Advisory, VDB Entry
https://bugzilla.redhat.com/show_bug.cgi?id=1032322Issue Tracking
https://exchange.xforce.ibmcloud.com/vulnerabilities/92540VDB Entry
https://github.com/json-c/json-c/commit/64e36901a0614bf64a19bc3396469c66dcd0b015Exploit, Patch
http://lists.fedoraproject.org/pipermail/package-announce/2014-April/131845.htmlMailing List
http://secunia.com/advisories/57791Permissions Required, Third Party Advisory
http://www.mandriva.com/security/advisories?name=MDVSA-2014:079Broken Link
http://www.oracle.com/technetwork/topics/security/bulletinoct2015-2511968.htmlThird Party Advisory
http://www.securityfocus.com/bid/66720Third Party Advisory, VDB Entry
https://bugzilla.redhat.com/show_bug.cgi?id=1032322Issue Tracking
https://exchange.xforce.ibmcloud.com/vulnerabilities/92540VDB Entry
https://github.com/json-c/json-c/commit/64e36901a0614bf64a19bc3396469c66dcd0b015Exploit, Patch

Timeline

Published: Apr 22, 2014
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2013

CVE-2013-63715.0The hash functionality in json-c before 0.12 allows context-dependent attackers to cause a denial of service (CPU consumption) via crafted J CVE-2013-63722.1The Subversion plugin before 1.54 for Jenkins stores credentials using base64 encoding, which allows local users to obtain passwords and SSH CVE-2013-63735.5The Exclusion plugin before 0.9 for Jenkins does not properly prevent access to resource locks, which allows remote authenticated users to l CVE-2013-63743.5Cross-site scripting (XSS) vulnerability in the Build Failure Analyzer plugin before 1.5.1 for Jenkins allows remote authenticated users to CVE-2013-63757.9Xen 4.2.x and 4.3.x, when using Intel VT-d for PCI passthrough, does not properly flush the TLB after clearing a present translation table e CVE-2013-63765.2The recalculate_apic_map function in arch/x86/kvm/lapic.c in the KVM subsystem in the Linux kernel through 3.12.5 allows guest OS users to c CVE-2013-63784.4The lbs_debugfs_write function in drivers/net/wireless/libertas/debugfs.c in the Linux kernel through 3.12.1 allows local users to cause a d CVE-2013-63804.7The aac_send_raw_srb function in drivers/scsi/aacraid/commctrl.c in the Linux kernel through 3.12.1 does not properly validate a certain siz CVE-2013-63816.9Buffer overflow in the qeth_snmp_command function in drivers/s390/net/qeth_core_main.c in the Linux kernel through 3.12.1 allows local users CVE-2013-63824.0Multiple buffer underflows in the XFS implementation in the Linux kernel through 3.12.1 allow local users to cause a denial of service (memo CVE-2013-63836.9The aac_compat_ioctl function in drivers/scsi/aacraid/linit.c in the Linux kernel before 3.11.8 does not require the CAP_SYS_RAWIO capabilit CVE-2013-63841.9(1) impl_db2.py and (2) impl_mongodb.py in OpenStack Ceilometer 2013.2 and earlier, when the logging level is set to INFO, logs the connecti