Vulnerability · Published May 9, 2020 · Assigned by mitre
CVE-2020-12762
High 7.8
In plain English
A high-severity out-of-bounds write in the json-c-devel package (AlmaLinux). There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 1.9% (higher than 80% of all known vulnerabilities). Fixed versions are available - upgrade the affected package.
Severity (CVSS 3.1)7.8High
Exploit odds (30 days)1.9%top 20.3% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known
Official description
json-c through 0.14 has an integer overflow and out-of-bounds write via a large JSON file, as demonstrated by printbuf_memappend.
Affected packages & fixed versions
| Ecosystem | Package | Fixed in | Advisory |
|---|---|---|---|
| AlmaLinux:8 | json-c-devel | 0.13.1-2.el8 | ALSA-2021:4382 |
| AlmaLinux:8 | json-c-doc | 0.13.1-2.el8 | ALSA-2021:4382 |
| AlmaLinux:8 | libfastjson | 0.99.9-2.el8 | ALSA-2023:6976 |
| AlmaLinux:9 | libfastjson | 0.99.9-5.el9 | ALSA-2023:6431 |
| AlmaLinux:9 | libfastjson-devel | 0.99.9-5.el9 | ALSA-2023:6431 |
| Alpine:v3.20 | json-c | 0.14-r1 | ALPINE-CVE-2020-12762 |
| Alpine:v3.21 | json-c | 0.14-r1 | ALPINE-CVE-2020-12762 |
| Alpine:v3.22 | json-c | 0.14-r1 | ALPINE-CVE-2020-12762 |
| Alpine:v3.23 | json-c | 0.14-r1 | ALPINE-CVE-2020-12762 |
| Alpine:v3.24 | json-c | 0.14-r1 | ALPINE-CVE-2020-12762 |
| Alpine:v3.20 | libfastjson | 1.2304.0-r0 | ALPINE-CVE-2020-12762 |
| Alpine:v3.21 | libfastjson | 1.2304.0-r0 | ALPINE-CVE-2020-12762 |
| Alpine:v3.22 | libfastjson | 1.2304.0-r0 | ALPINE-CVE-2020-12762 |
| Alpine:v3.23 | libfastjson | 1.2304.0-r0 | ALPINE-CVE-2020-12762 |
| Alpine:v3.24 | libfastjson | 1.2304.0-r0 | ALPINE-CVE-2020-12762 |
| Debian:12 | json-c | 0.13.1+dfsg-8 | DEBIAN-CVE-2020-12762 |
| Debian:13 | json-c | 0.13.1+dfsg-8 | DEBIAN-CVE-2020-12762 |
| Debian:14 | json-c | 0.13.1+dfsg-8 | DEBIAN-CVE-2020-12762 |
| Debian:12 | libfastjson | 1.2304.0-1 | DEBIAN-CVE-2020-12762 |
| Debian:13 | libfastjson | 1.2304.0-1 | DEBIAN-CVE-2020-12762 |
| Debian:14 | libfastjson | 1.2304.0-1 | DEBIAN-CVE-2020-12762 |
| Rocky Linux:8 | json-c | 0:0.13.1-2.el8 | RLSA-2021:4382 |
| Rocky Linux:8 | libfastjson | 0:0.99.9-2.el8 | RLSA-2023:6976 |
| Rocky Linux:9 | libfastjson | 0:0.99.9-5.el9 | RLSA-2023:6431 |
Affected products (as reported)
Weakness: CWE-787 · Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
References
- https://github.com/json-c/json-c/pull/592
- https://github.com/rsyslog/libfastjson/issues/161
- FEDORA-2020-63c6f4ab1d vendor-advisory
- USN-4360-1 vendor-advisory
- FEDORA-2020-847ad856ab vendor-advisory
- FEDORA-2020-7eb7eac270 vendor-advisory
- [debian-lts-announce] 20200531 [SECURITY] [DLA 2228-1] json-c security update mailing-list
- [debian-lts-announce] 20200531 [SECURITY] [DLA 2228-2] json-c regression update mailing-list
- USN-4360-4 vendor-advisory
- GLSA-202006-13 vendor-advisory
- [debian-lts-announce] 20200730 [SECURITY] [DLA 2301-1] json-c security update mailing-list
- DSA-4741 vendor-advisory
- https://security.netapp.com/advisory/ntap-20210521-0001/
- https://cert-portal.siemens.com/productcert/pdf/ssa-637483.pdf
- [debian-lts-announce] 20230620 [SECURITY] [DLA 3461-1] libfastjson security update mailing-list
- https://lists.debian.org/debian-lts-announce/2025/07/msg00021.html
- https://cert-portal.siemens.com/productcert/html/ssa-637483.html
- https://cert-portal.siemens.com/productcert/html/ssa-794697.html
- https://cert-portal.siemens.com/productcert/html/ssa-398330.html
- https://cert-portal.siemens.com/productcert/html/ssa-202008.html