Red Hat Security Advisory: jq security update
Red Hat has issued a security advisory for the jq command-line JSON processor addressing two vulnerabilities: a signed integer overflow (CVE-2024-23337) and a stack-buffer-overflow detected by AddressSanitizer (CVE-2025-48060). These issues affect multiple Red Hat Enterprise Linux 8 variants and related packages. The vulnerabilities have been rated with moderate severity by Red Hat Product Security. Updated packages are available to remediate these issues. No known exploits are reported in the wild at this time.
AI Analysis
Technical Summary
The jq utility, used for processing JSON data, contains two security flaws: a signed integer overflow in the jvp_array_write function (CVE-2024-23337) and a stack-buffer-overflow in jq_fuzz_execute (CVE-2025-48060). Both vulnerabilities could potentially lead to memory corruption. Red Hat has released updated jq packages for Red Hat Enterprise Linux 8 and associated CodeReady Linux Builder variants to address these issues. The advisory does not provide CVSS scores but classifies the impact as moderate.
Potential Impact
The vulnerabilities could allow an attacker to cause memory corruption via integer overflow or buffer overflow conditions when processing JSON data with jq. This may lead to application crashes or potentially other unintended behavior. However, no known exploits have been reported in the wild. The impact is rated moderate by Red Hat.
Mitigation Recommendations
Red Hat has released updated jq packages for Red Hat Enterprise Linux 8 and related distributions to fix these vulnerabilities. Users should apply the security update as described in the Red Hat advisory (RHSA-2025:10618) and the referenced article https://access.redhat.com/articles/11258. Since this is an on-premises product, remediation requires manual update by system administrators. No additional mitigation steps are indicated by the vendor.
Red Hat Security Advisory: jq security update
Description
Red Hat has issued a security advisory for the jq command-line JSON processor addressing two vulnerabilities: a signed integer overflow (CVE-2024-23337) and a stack-buffer-overflow detected by AddressSanitizer (CVE-2025-48060). These issues affect multiple Red Hat Enterprise Linux 8 variants and related packages. The vulnerabilities have been rated with moderate severity by Red Hat Product Security. Updated packages are available to remediate these issues. No known exploits are reported in the wild at this time.
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
The jq utility, used for processing JSON data, contains two security flaws: a signed integer overflow in the jvp_array_write function (CVE-2024-23337) and a stack-buffer-overflow in jq_fuzz_execute (CVE-2025-48060). Both vulnerabilities could potentially lead to memory corruption. Red Hat has released updated jq packages for Red Hat Enterprise Linux 8 and associated CodeReady Linux Builder variants to address these issues. The advisory does not provide CVSS scores but classifies the impact as moderate.
Potential Impact
The vulnerabilities could allow an attacker to cause memory corruption via integer overflow or buffer overflow conditions when processing JSON data with jq. This may lead to application crashes or potentially other unintended behavior. However, no known exploits have been reported in the wild. The impact is rated moderate by Red Hat.
Mitigation Recommendations
Red Hat has released updated jq packages for Red Hat Enterprise Linux 8 and related distributions to fix these vulnerabilities. Users should apply the security update as described in the Red Hat advisory (RHSA-2025:10618) and the referenced article https://access.redhat.com/articles/11258. Since this is an on-premises product, remediation requires manual update by system administrators. No additional mitigation steps are indicated by the vendor.
Technical Details
- Gcve Source
- db.gcve.eu
- Csaf Category
- csaf_security_advisory
- Csaf Version
- 2.0
- Publisher
- Red Hat Product Security
- Advisory Id
- RHSA-2025:10618
- Cve Count
- 2
- Additional Cves
- ["CVE-2025-48060"]
- Cvss Version
- null
Threat ID: 6a1f4e89e29bf47b50082be3
Added to database: 6/2/2026, 9:43:37 PM
Last enriched: 6/2/2026, 10:16:04 PM
Last updated: 6/3/2026, 4:58:53 AM
Views: 2
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.