[ZBX-22587] JSONPath uses uninitialised buffer if JSON string contains invalid unicode character (CVE-2023-29451) Created: 2023 Mar 10  Updated: 2024 Apr 30  Resolved: 2023 Apr 02

Status: Closed
Project: ZABBIX BUGS AND ISSUES
Component/s: Proxy (P), Server (S)
Affects Version/s: 6.0.14, 6.2.8, 6.4.0
Fix Version/s: 6.0.15rc1, 6.2.9rc2, 6.4.1rc1, 7.0.0alpha1, 7.0 (plan)

Type: Defect (Security) Priority: Trivial
Reporter: Vladislavs Sokurenko Assignee: Vladislavs Sokurenko
Resolution: Fixed Votes: 0
Labels: None
Remaining Estimate: Not Specified
Time Spent: Not Specified
Original Estimate: Not Specified

Attachments: File jsonparser.diff    
Team: Team A
Sprint: Sprint 98 (Mar 2023)
Story Points: 0.5

 Comments   
Comment by Vladislavs Sokurenko [ 2023 Mar 21 ]

Fixed in:

Generated at Tue Apr 01 01:53:25 EEST 2025 using Jira 9.12.4#9120004-sha1:625303b708afdb767e17cb2838290c41888e9ff0.