CVE-2023-50471 - Vulnerability Details - OpenCVE

cJSON v1.7.16 was discovered to contain a segmentation violation via the function cJSON_InsertItemInArray at cJSON.c.

No CVSS v4.0

Attack Vector Network

Attack Complexity Low

Privileges Required None

Scope Unchanged

Confidentiality Impact None

Integrity Impact None

Availability Impact High

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

Key SSVC decision points have not yet been added.

Vendors	Products
Cjson Project	Cjson
Redhat	Satellite Satellite Capsule

Configuration 1 [-]

cpe:2.3:a:cjson_project:cjson:1.7.16:*:*:*:*:*:*:*

Package	CPE	Advisory	Released Date
Red Hat Satellite 6.15 for RHEL 8
cjson-0:1.7.18-1.el8sat	cpe:/a:redhat:satellite:6.15::el8	RHSA-2025:9838	2025-06-26T00:00:00Z
cjson-0:1.7.18-1.el8sat	cpe:/a:redhat:satellite_capsule:6.15::el8	RHSA-2025:9838	2025-06-26T00:00:00Z

References

Link	Providers
https://github.com/DaveGamble/cJSON/issues/802
https://lists.debian.org/debian-lts-announce/2023/12/msg00023.html
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/EO4XCUTY3ZMVW4YBG6DBYVS5NSMNP6JY/
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JSI3LL6ZNKYNM5JKPA5FKZTATL4MPF7V/
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/YQOQ7CAOYBNHGAMNOR7ELGLC22HV3ZQV/
https://nvd.nist.gov/vuln/detail/CVE-2023-50471
https://www.cve.org/CVERecord?id=CVE-2023-50471

History

Fri, 27 Jun 2025 02:15:00 +0000

Type	Values Removed	Values Added
First Time appeared		Redhat Redhat satellite Redhat satellite Capsule
CPEs		cpe:/a:redhat:satellite:6.15::el8 cpe:/a:redhat:satellite_capsule:6.15::el8
Vendors & Products		Redhat Redhat satellite Redhat satellite Capsule

MITRE

Status: PUBLISHED

Assigner: mitre

Published: 2023-12-14T00:00:00

Updated: 2024-08-02T22:16:46.854Z

Reserved: 2023-12-11T00:00:00

Link: CVE-2023-50471

Vulnrichment

No data.

NVD

Status : Modified

Published: 2023-12-14T20:15:53.130

Modified: 2024-11-21T08:37:03.140

Link: CVE-2023-50471

Redhat

Severity : Low

Publid Date: 2023-12-14T00:00:00Z

Links: CVE-2023-50471 - Bugzilla

{"dataType": "CVE_RECORD", "dataVersion": "5.1", "cveMetadata": {"state": "PUBLISHED", "cveId": "CVE-2023-50471", "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "assignerShortName": "mitre", "dateUpdated": "2024-08-02T22:16:46.854Z", "dateReserved": "2023-12-11T00:00:00", "datePublished": "2023-12-14T00:00:00"}, "containers": {"cna": {"providerMetadata": {"orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "shortName": "mitre", "dateUpdated": "2024-04-23T03:05:58.832729"}, "descriptions": [{"lang": "en", "value": "cJSON v1.7.16 was discovered to contain a segmentation violation via the function cJSON_InsertItemInArray at cJSON.c."}], "affected": [{"vendor": "n/a", "product": "n/a", "versions": [{"version": "n/a", "status": "affected"}]}], "references": [{"url": "https://github.com/DaveGamble/cJSON/issues/802"}, {"name": "[debian-lts-announce] 20231230 [SECURITY] [DLA 3700-1] cjson security update", "tags": ["mailing-list"], "url": "https://lists.debian.org/debian-lts-announce/2023/12/msg00023.html"}, {"name": "FEDORA-2024-74563262c0", "tags": ["vendor-advisory"], "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/EO4XCUTY3ZMVW4YBG6DBYVS5NSMNP6JY/"}, {"name": "FEDORA-2024-b93a6b1325", "tags": ["vendor-advisory"], "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/YQOQ7CAOYBNHGAMNOR7ELGLC22HV3ZQV/"}, {"name": "FEDORA-2024-5b487ca10a", "tags": ["vendor-advisory"], "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JSI3LL6ZNKYNM5JKPA5FKZTATL4MPF7V/"}], "problemTypes": [{"descriptions": [{"type": "text", "lang": "en", "description": "n/a"}]}]}, "adp": [{"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-02T22:16:46.854Z"}, "title": "CVE Program Container", "references": [{"url": "https://github.com/DaveGamble/cJSON/issues/802", "tags": ["x_transferred"]}, {"name": "[debian-lts-announce] 20231230 [SECURITY] [DLA 3700-1] cjson security update", "tags": ["mailing-list", "x_transferred"], "url": "https://lists.debian.org/debian-lts-announce/2023/12/msg00023.html"}, {"name": "FEDORA-2024-74563262c0", "tags": ["vendor-advisory", "x_transferred"], "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/EO4XCUTY3ZMVW4YBG6DBYVS5NSMNP6JY/"}, {"name": "FEDORA-2024-b93a6b1325", "tags": ["vendor-advisory", "x_transferred"], "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/YQOQ7CAOYBNHGAMNOR7ELGLC22HV3ZQV/"}, {"name": "FEDORA-2024-5b487ca10a", "tags": ["vendor-advisory", "x_transferred"], "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JSI3LL6ZNKYNM5JKPA5FKZTATL4MPF7V/"}]}]}}

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:cjson_project:cjson:1.7.16:*:*:*:*:*:*:*", "matchCriteriaId": "F689CECB-A7D0-4802-9315-356204983428", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "descriptions": [{"lang": "en", "value": "cJSON v1.7.16 was discovered to contain a segmentation violation via the function cJSON_InsertItemInArray at cJSON.c."}, {"lang": "es", "value": "Se descubri\u00f3 que cJSON v1.7.16 conten\u00eda una infracci\u00f3n de segmentaci\u00f3n a trav\u00e9s de la funci\u00f3n cJSON_InsertItemInArray en cJSON.c."}], "id": "CVE-2023-50471", "lastModified": "2024-11-21T08:37:03.140", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 7.5, "baseSeverity": "HIGH", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "version": "3.1"}, "exploitabilityScore": 3.9, "impactScore": 3.6, "source": "[email protected]", "type": "Primary"}]}, "published": "2023-12-14T20:15:53.130", "references": [{"source": "[email protected]", "tags": ["Exploit", "Issue Tracking", "Patch", "Third Party Advisory"], "url": "https://github.com/DaveGamble/cJSON/issues/802"}, {"source": "[email protected]", "url": "https://lists.debian.org/debian-lts-announce/2023/12/msg00023.html"}, {"source": "[email protected]", "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/EO4XCUTY3ZMVW4YBG6DBYVS5NSMNP6JY/"}, {"source": "[email protected]", "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JSI3LL6ZNKYNM5JKPA5FKZTATL4MPF7V/"}, {"source": "[email protected]", "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/YQOQ7CAOYBNHGAMNOR7ELGLC22HV3ZQV/"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Exploit", "Issue Tracking", "Patch", "Third Party Advisory"], "url": "https://github.com/DaveGamble/cJSON/issues/802"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "https://lists.debian.org/debian-lts-announce/2023/12/msg00023.html"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/EO4XCUTY3ZMVW4YBG6DBYVS5NSMNP6JY/"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JSI3LL6ZNKYNM5JKPA5FKZTATL4MPF7V/"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/YQOQ7CAOYBNHGAMNOR7ELGLC22HV3ZQV/"}], "sourceIdentifier": "[email protected]", "vulnStatus": "Modified", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-476"}], "source": "[email protected]", "type": "Primary"}]}