NVD

Id
25980  
Name
CVE-2015-4590  
Description
The extractFrom function in Internals/QuotedString.cpp in Arduino JSON before 4.5 allows remote attackers to cause a denial of service (crash) via a JSON string with a (backslash) followed by a terminator, as demonstrated by "\", which triggers a buffer overflow and over-read.  
Reject
 
CVSS Version
2  
CVSS Score
5  
Severity
Medium  
CVSS Base Score
5  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:N/I:N/A:P)  
Pub Date
2017-01-19  
Published
2015-06-22  
Modified Date
2015-06-23  
Seq
2015-4590  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
137332 25980 CVE-2015-4590 [oss-security] 20150616 Re: CVE ID Request: Buffer overflow in ArduinoJson when parsing crafted JSON strings  View
137333 25980 CVE-2015-4590 75150  View
137334 25980 CVE-2015-4590 https://github.com/bblanchon/ArduinoJson/blob/master/CHANGELOG.md  View
137335 25980 CVE-2015-4590 https://github.com/bblanchon/ArduinoJson/commit/5e7b9ec688d79e7b16ec7064e1d37e8481a31e72  View
137336 25980 CVE-2015-4590 https://github.com/bblanchon/ArduinoJson/pull/81  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
7914 JVNDB-2015-003234 Arduino JSON の Internals/QuotedString.cpp の extractFrom 関数におけるサービス運用妨害 (DoS) の脆弱性 Arduino JSON の Internals/QuotedString.cpp の extractFrom 関数には、サービス運用妨害 (クラッシュ) 状態にされる脆弱性が存在します。 CVE-2015-4590 81815 CVE-2015-4590 25980 5 http://jvndb.jvn.jp/ja/contents/2015/JVNDB-2015-003234.html 2015-06-11 2015-06-24 View