Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
jq has heap-buffer-overflow vulnerability in the function decToString in decNumber.c
Vulnerability Description
jq is a command-line JSON processor. Version 1.7 is vulnerable to heap-based buffer overflow. Version 1.7.1 contains a patch for this issue.
CVSS Information
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Vulnerability Type
堆缓冲区溢出
Vulnerability Title
jq 安全漏洞
Vulnerability Description
jq是jqlang开源的一个轻量级且灵活的命令行 JSON 处理器。 jq 1.7版本存在安全漏洞，该漏洞源于decNumber.c 中的函数 decToString 容易受到基于堆的缓冲区溢出的影响。
CVSS Information
N/A
Vulnerability Type
N/A