CVE-2016-4425

· MEDIUMModified

← All CVEs

CVSS v3.1

6.5

EPSS

1.89%

Published

May 17, 2016

Modified

May 6, 2026

Public PoC / Exploit (1)

All weaponized →

TrickestTrickest PoC index

Links to public security research (Exploit-DB, Nuclei, Trickest, GitHub) for defensive use only.

Description

Jansson 2.7 and earlier allows context-dependent attackers to cause a denial of service (deep recursion, stack consumption, and crash) via crafted JSON data.

CVSS Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

Weaknesses (CWE)

CWE-20CWE-674

Affected Products (1)

jansson_project · janssonvulnerable

References (14)

http://www.debian.org/security/2015/dsa-3577

http://www.openwall.com/lists/oss-security/2016/05/01/5

http://www.openwall.com/lists/oss-security/2016/05/02/1

http://www.openwall.com/lists/oss-security/2016/05/03/3

https://github.com/akheron/jansson/issues/282

Patch

https://github.com/akheron/jansson/pull/284

Patch

https://github.com/akheron/jansson/pull/284/commits/64ce0ad3731ebd77e02897b07920eadd0e2cc318

http://www.debian.org/security/2015/dsa-3577

http://www.openwall.com/lists/oss-security/2016/05/01/5

http://www.openwall.com/lists/oss-security/2016/05/02/1

http://www.openwall.com/lists/oss-security/2016/05/03/3

https://github.com/akheron/jansson/issues/282

Patch

https://github.com/akheron/jansson/pull/284

Patch

https://github.com/akheron/jansson/pull/284/commits/64ce0ad3731ebd77e02897b07920eadd0e2cc318

KEV Catalog EPSS Scores Vendors All CVEs