Vulnerabilities > CVE-2020-36067 - Improper Validation of Array Index vulnerability in Gjson Project Gjson

Attack vector

NETWORK

Attack complexity

LOW

Privileges required

NONE

Confidentiality impact

NONE

Integrity impact

NONE

Availability impact

HIGH

network

low complexity

NVD

Published: 2021-01-05

Updated: 2021-01-07

Summary

GJSON <=v1.6.5 allows attackers to cause a denial of service (panic: runtime error: slice bounds out of range) via a crafted GET call.

Part	Description	Count
Application	Gjson_Project Gjson Project Gjson 1.0.0 Gjson Project Gjson 1.0.1 Gjson Project Gjson 1.0.2 Gjson Project Gjson 1.0.3 Gjson Project Gjson 1.0.4 Gjson Project Gjson 1.0.5 Gjson Project Gjson 1.0.6 Gjson Project Gjson 1.1.0 Gjson Project Gjson 1.1.1 Gjson Project Gjson 1.1.2 Gjson Project Gjson 1.1.3 Gjson Project Gjson 1.1.4 Gjson Project Gjson 1.1.5 Gjson Project Gjson 1.1.6 Gjson Project Gjson 1.2.0 Gjson Project Gjson 1.2.1 Gjson Project Gjson 1.2.2 Gjson Project Gjson 1.3.0 Gjson Project Gjson 1.3.1 Gjson Project Gjson 1.3.2 Gjson Project Gjson 1.3.3 Gjson Project Gjson 1.3.4 Gjson Project Gjson 1.3.5 Gjson Project Gjson 1.3.6 Gjson Project Gjson 1.4.0 Gjson Project Gjson 1.5.0 Gjson Project Gjson 1.6.0 Gjson Project Gjson 1.6.1 Gjson Project Gjson 1.6.2 Gjson Project Gjson 1.6.3 Gjson Project Gjson 1.6.4	31

Overflow Buffers
Buffer Overflow attacks target improper or missing bounds checking on buffer operations, typically triggered by input injected by an attacker. As a consequence, an attacker is able to write past the boundaries of allocated buffer regions in memory, causing a program crash or potentially redirection of execution as per the attackers' choice.