UBUNTU-CVE-2025-9403

See a problem?
Please try reporting it to the source first.

Source

https://ubuntu.com/security/CVE-2025-9403

Import Source

https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2025/UBUNTU-CVE-2025-9403.json

JSON Data

https://api.osv.dev/v1/vulns/UBUNTU-CVE-2025-9403

Upstream

CVE-2025-9403

Published

2025-08-25T03:15:00Z

Modified

2026-05-21T06:15:06Z

Severity

3.3 (Low) CVSS_V3 - CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L CVSS Calculator
5.5 (Medium) CVSS_V3 - CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H CVSS Calculator
1.9 (Low) CVSS_V4 - CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:P CVSS Calculator
Ubuntu - negligible

Summary

[none]

Details

A vulnerability was determined in jqlang jq up to 1.6. Impacted is the function run_jq_tests of the file jq_test.c of the component JSON Parser. Executing manipulation can lead to reachable assertion. The attack requires local access. The exploit has been publicly disclosed and may be utilized. Other versions might be affected as well.

References

Affected packages

Ubuntu:22.04:LTS

Package

Name: jq
Purl: pkg:deb/ubuntu/jq?arch=source&distro=jammy

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Affected versions

1.*

1.6-2.1ubuntu2

1.6-2.1ubuntu3

1.6-2.1ubuntu3.1

1.6-2.1ubuntu3.2

Ecosystem specific

{
    "binaries": [
        {
            "binary_name": "jq",
            "binary_version": "1.6-2.1ubuntu3.2"
        },
        {
            "binary_name": "libjq1",
            "binary_version": "1.6-2.1ubuntu3.2"
        }
    ],
    "priority_reason": "affects test suite"
}

Database specific

source

"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2025/UBUNTU-CVE-2025-9403.json"

Ubuntu:24.04:LTS

Package

Name: jq
Purl: pkg:deb/ubuntu/jq?arch=source&distro=noble

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Affected versions

1.*

1.6-3

1.7-1

1.7.1-2

1.7.1-3

1.7.1-3build1

1.7.1-3ubuntu0.24.04.1

1.7.1-3ubuntu0.24.04.2

Ecosystem specific

{
    "binaries": [
        {
            "binary_name": "jq",
            "binary_version": "1.7.1-3ubuntu0.24.04.2"
        },
        {
            "binary_name": "libjq1",
            "binary_version": "1.7.1-3ubuntu0.24.04.2"
        }
    ],
    "priority_reason": "affects test suite"
}

Database specific

source

"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2025/UBUNTU-CVE-2025-9403.json"

Ubuntu:25.10

Package

Name: jq
Purl: pkg:deb/ubuntu/jq?arch=source&distro=questing

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Affected versions

1.*

1.7.1-3ubuntu1

1.7.1-6ubuntu1

1.8.1-3ubuntu1

1.8.1-3ubuntu1.1

Ecosystem specific

{
    "binaries": [
        {
            "binary_name": "jq",
            "binary_version": "1.8.1-3ubuntu1.1"
        },
        {
            "binary_name": "libjq1",
            "binary_version": "1.8.1-3ubuntu1.1"
        }
    ],
    "priority_reason": "affects test suite"
}

Database specific

source

"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2025/UBUNTU-CVE-2025-9403.json"

Ubuntu:26.04:LTS

Package

Name: jq
Purl: pkg:deb/ubuntu/jq?arch=source&distro=resolute

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Affected versions

1.*

1.8.1-3ubuntu1

1.8.1-4ubuntu1

1.8.1-4ubuntu2

Ecosystem specific

{
    "binaries": [
        {
            "binary_name": "jq",
            "binary_version": "1.8.1-4ubuntu2"
        },
        {
            "binary_name": "libjq1",
            "binary_version": "1.8.1-4ubuntu2"
        }
    ],
    "priority_reason": "affects test suite"
}

Database specific

source

"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2025/UBUNTU-CVE-2025-9403.json"

Ubuntu:Pro:14.04:LTS

Package

Name: jq
Purl: pkg:deb/ubuntu/jq?arch=source&distro=esm-infra-legacy%2Ftrusty

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Affected versions

1.*

1.2-8

1.3-1

1.3-1.1ubuntu1

1.3-1.1ubuntu1.1

1.3-1.1ubuntu1.1+esm3

1.3-1.1ubuntu1.1+esm4

Ecosystem specific

{
    "binaries": [
        {
            "binary_name": "jq",
            "binary_version": "1.3-1.1ubuntu1.1+esm4"
        }
    ],
    "priority_reason": "affects test suite"
}

Database specific

source

"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2025/UBUNTU-CVE-2025-9403.json"

Ubuntu:Pro:16.04:LTS

Package

Name: jq
Purl: pkg:deb/ubuntu/jq?arch=source&distro=esm-apps%2Fxenial

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Affected versions

1.*

1.4-2.1

1.5+dfsg-1

1.5+dfsg-1ubuntu0.1

1.5+dfsg-1ubuntu0.1+esm2

1.5+dfsg-1ubuntu0.1+esm3

1.5+dfsg-1ubuntu0.1+esm4

Ecosystem specific

{
    "binaries": [
        {
            "binary_name": "jq",
            "binary_version": "1.5+dfsg-1ubuntu0.1+esm4"
        }
    ],
    "priority_reason": "affects test suite"
}

Database specific

source

"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2025/UBUNTU-CVE-2025-9403.json"

Ubuntu:Pro:18.04:LTS

Package

Name: jq
Purl: pkg:deb/ubuntu/jq?arch=source&distro=esm-apps%2Fbionic

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Affected versions

1.*

1.5+dfsg-2

1.5+dfsg-2ubuntu0.1~esm1

1.5+dfsg-2ubuntu0.1~esm2

1.5+dfsg-2ubuntu0.1~esm3

Ecosystem specific

{
    "binaries": [
        {
            "binary_name": "jq",
            "binary_version": "1.5+dfsg-2ubuntu0.1~esm3"
        },
        {
            "binary_name": "libjq1",
            "binary_version": "1.5+dfsg-2ubuntu0.1~esm3"
        }
    ],
    "priority_reason": "affects test suite"
}

Database specific

source

"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2025/UBUNTU-CVE-2025-9403.json"

Ubuntu:Pro:20.04:LTS

Package

Name: jq
Purl: pkg:deb/ubuntu/jq?arch=source&distro=esm-infra%2Ffocal

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Affected versions

1.*

1.5+dfsg-2build1

1.6-1

1.6-1ubuntu0.20.04.1

1.6-1ubuntu0.20.04.1+esm1

1.6-1ubuntu0.20.04.1+esm2

1.6-1ubuntu0.20.04.1+esm3

Ecosystem specific

{
    "binaries": [
        {
            "binary_name": "jq",
            "binary_version": "1.6-1ubuntu0.20.04.1+esm3"
        },
        {
            "binary_name": "libjq1",
            "binary_version": "1.6-1ubuntu0.20.04.1+esm3"
        }
    ],
    "priority_reason": "affects test suite"
}

Database specific

source

"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2025/UBUNTU-CVE-2025-9403.json"