CVE-2016-4074 PUBLISHED

The jv_dump_term function in jq 1.5 allows remote attackers to cause a denial of service (stack consumption and application crash) via a crafted JSON file. This issue has been fixed in jq 1.6_rc1-r0.

EPSS 2.00% · 83.5th percentile

Risk Scores

EPSS Score
2.00%
83.5th percentile

Affected Products

VendorProductVersions
Ubuntu:Pro:14.04:LTSjq0, 1.2-8, 1.3-1
Ubuntu:Pro:16.04:LTSjq0, 1.4-2.1, 1.5+dfsg-1

Timeline

References

Open in Interactive Console →