CVE-2023-23088

See a problem?
Please try reporting it to the source first.

Source

https://cve.org/CVERecord?id=CVE-2023-23088

Import Source

https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2023-23088.json

JSON Data

https://api.osv.dev/v1/vulns/CVE-2023-23088

Downstream

UBUNTU-CVE-2023-23088

Published

2023-02-03T18:15:17.177Z

Modified

2025-11-20T12:15:50.232679Z

Severity

9.8 (Critical) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H CVSS Calculator

Summary

[none]

Details

Buffer OverFlow Vulnerability in Barenboim json-parser master and v1.1.0 fixed in v1.1.1 allows an attacker to execute arbitrary code via the jsonvalueparse function.

References

https://github.com/Barenboim/json-parser/issues/7

Affected packages

Git / github.com/barenboim/json-parser

Affected ranges

Type: GIT
Repo: https://github.com/barenboim/json-parser
Events: Introduced

0 Unknown introduced commit / All previous commits are affected

Last affected

fc599bfcdda30ffc683ad94841a5987cbabbbfce

Affected versions

v1.*

v1.0.0

v1.0.1

v1.1.0

Database specific

source

"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2023-23088.json"