CVE-2021-32292

CRITICAL

Netapp Active IQ Unified Manager - Out-of-Bounds Write

Title source: rule
STIX 2.1

Description

An issue was discovered in json-c from 20200420 (post 0.14 unreleased code) through 0.15-20200726. A stack-buffer-overflow exists in the auxiliary sample program json_parse which is located in the function parseit.

References (3)

Core 3
Core References
Third Party Advisory vendor-advisory
https://www.debian.org/security/2023/dsa-5486

Scores

CVSS v3 9.8
EPSS 0.0017
EPSS Percentile 38.3%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

CISA SSVC

Vulnrichment
Exploitation poc
Automatable yes
Technical Impact total

Details

CWE
CWE-787
Status published
Products (2)
json-c/json-c 0.15-20200726
netapp/active_iq_unified_manager
Published Aug 22, 2023
Tracked Since Feb 18, 2026