Threats Tagged 'cve-2024-23337'

Red Hat has issued a security advisory for jq, a command-line JSON processor, addressing two vulnerabilities: a signed integer overflow (CVE-2024-23337) and a stack-buffer-overflow detected by AddressSanitizer (CVE-2025-48060). These vulnerabilities affect Red Hat Enterprise Linux 10 and related CodeReady Linux Builder products. The update is rated as having moderate security impact. Red Hat provides updated packages to remediate these issues.

Red Hat has issued a security advisory for jq, a command-line JSON processor, addressing two vulnerabilities: a signed integer overflow (CVE-2024-23337) and a stack-buffer-overflow detected by AddressSanitizer (CVE-2025-48060). These vulnerabilities affect Red Hat Enterprise Linux 8 and related CodeReady Linux Builder packages. The update is rated as having a moderate security impact. The advisory provides updated package versions to remediate these issues.

Red Hat has issued a security advisory for jq, a command-line JSON processor, addressing two vulnerabilities: a signed integer overflow (CVE-2024-23337) and a stack-buffer-overflow detected by AddressSanitizer (CVE-2025-48060). These issues affect Red Hat Enterprise Linux 8.6 variants. The vulnerabilities have been rated with moderate severity by Red Hat. The advisory provides updated packages to remediate these issues.

Two security vulnerabilities have been identified in jq, a command-line JSON processor used in Red Hat Enterprise Linux 8.2 AUS. The first is a signed integer overflow in the jvp_array_write function (CVE-2024-23337), and the second is a stack-buffer-overflow detected by AddressSanitizer in jq_fuzz_execute (CVE-2025-48060). Red Hat has issued a security advisory rating these issues as moderate impact and has released updated packages to address them.

Red Hat has issued a security advisory for jq, a command-line JSON processor, addressing two vulnerabilities: a signed integer overflow (CVE-2024-23337) and a stack-buffer-overflow detected by AddressSanitizer (CVE-2025-48060). These vulnerabilities affect jq version 1.5-12.el8_4.4 in Red Hat Enterprise Linux 8.4 AUS. The update is rated as having a moderate security impact. No CVSS scores are provided in the advisory. Red Hat provides updated packages to remediate these issues.

Red Hat has issued a security advisory for jq, a command-line JSON processor, addressing two vulnerabilities: a signed integer overflow (CVE-2024-23337) and a stack-buffer-overflow detected by AddressSanitizer (CVE-2025-48060). These issues affect jq in Red Hat Enterprise Linux 8.8 prior to version 8.8.1. The vulnerabilities have been rated with moderate severity by Red Hat. Updated packages fixing these issues are available for affected Red Hat Enterprise Linux 8.8 variants.

Red Hat has issued a security advisory for jq, a command-line JSON processor, addressing two vulnerabilities: a signed integer overflow (CVE-2024-23337) and a stack-buffer-overflow detected by AddressSanitizer (CVE-2025-48060). These vulnerabilities affect jq as packaged in Red Hat Enterprise Linux 9.2 and related distributions. The security impact is rated as moderate by Red Hat. Updates are available to fix these issues in the jq package version 1.6-15.el9_2.2. Users of affected Red Hat Enterprise Linux 9.2 systems should apply the provided update to mitigate these vulnerabilities.

Two security vulnerabilities have been identified in jq, a command-line JSON processor included in Red Hat Enterprise Linux 9.0 Update Services for SAP Solutions. The first is a signed integer overflow in the function jvp_array_write (CVE-2024-23337), and the second is a stack-buffer-overflow detected by AddressSanitizer in jq_fuzz_execute (jv_string_vfmt) (CVE-2025-48060). These issues have been rated with moderate severity by Red Hat. Updates addressing these vulnerabilities are available for Red Hat Enterprise Linux 9.0 on multiple architectures including x86_64, ppc64le, aarch64, and s390x. For detailed patching instructions, refer to the Red Hat advisory.

Two security vulnerabilities have been identified in jq, a command-line JSON processor, affecting Red Hat Enterprise Linux 9.4 Extended Update Support and related products. The first is a signed integer overflow in the jvp_array_write function (CVE-2024-23337), and the second is a stack-buffer-overflow detected by AddressSanitizer in jq_fuzz_execute (CVE-2025-48060). Red Hat has issued a security advisory rating these issues as moderate severity and has released updated packages to address these vulnerabilities.

Two security vulnerabilities have been identified in the jq JSON processor used in Red Hat Enterprise Linux 9. These include a signed integer overflow (CVE-2024-23337) and a stack-buffer-overflow detected by AddressSanitizer (CVE-2025-48060). The issues affect multiple architectures and variants of Red Hat Enterprise Linux 9 and related CodeReady Linux Builder packages. Red Hat has released an update to address these vulnerabilities, rated with moderate security impact. Users should apply the available update to remediate these issues.