oss-sec mailing list archives

CVE Request: jq: heap buffer overflow in tokenadd() function

From: Salvatore Bonaccorso <carnil () debian org>
Date: Sat, 23 Apr 2016 08:27:15 +0200

Hi

Could you assign a CVE for the following issue in jq, a lightweight
and flexible command-line JSON processor.

Upstream report:

https://github.com/stedolan/jq/issues/995

Upstream commit:

https://github.com/stedolan/jq/commit/8eb1367ca44e772963e704a700ef72ae2e12babd

Reports:

https://bugs.debian.org/802231
https://bugzilla.redhat.com/show_bug.cgi?id=1328747

Regards,
Salvatore

Current thread:

CVE Request: jq: heap buffer overflow in tokenadd() function Salvatore Bonaccorso (Apr 22)
- Re: CVE Request: jq: heap buffer overflow in tokenadd() function cve-assign (Apr 23)