Re: CVE Request: Jansson: stack exhaustion parsing a JSON file

[Gustavo Grieco <gustavo.grieco () gmail com>]

2016-05-02 14:46 GMT+02:00 <cve-assign () mitre org>:

> -----BEGIN PGP SIGNED MESSAGE-----
> Hash: SHA256
>
> > https://github.com/akheron/jansson/issues/282
>
> > It takes a less than 100kb json file to crash the library, which is
> > bad if you are receiving untrusted inputs.
>
> > > https://github.com/akheron/jansson/blob/master/README.rst
> > > Jansson is a C library for encoding, decoding and manipulating JSON
> data.
>
> Use CVE-2016-4425.

It was fixed here: https://github.com/akheron/jansson/pull/284