VYPR
← All advisories
Unrated severityNVD Advisory· Published Mar 21, 2014· Updated May 6, 2026

CVE-2013-6401

CVE-2013-6401

Description

Jansson, possibly 2.4 and earlier, does not restrict the ability to trigger hash collisions predictably, which allows context-dependent attackers to cause a denial of service (CPU consumption) via a crafted JSON document.

Affected products

8
  • Jansson Project/Jansson8 versions
    cpe:2.3:a:jansson_project:jansson:*:*:*:*:*:*:*:*+ 7 more
    • cpe:2.3:a:jansson_project:jansson:*:*:*:*:*:*:*:*range: <=2.4
    • cpe:2.3:a:jansson_project:jansson:2.0:*:*:*:*:*:*:*
    • cpe:2.3:a:jansson_project:jansson:2.0.1:*:*:*:*:*:*:*
    • cpe:2.3:a:jansson_project:jansson:2.1:*:*:*:*:*:*:*
    • cpe:2.3:a:jansson_project:jansson:2.2:*:*:*:*:*:*:*
    • cpe:2.3:a:jansson_project:jansson:2.2.1:*:*:*:*:*:*:*
    • cpe:2.3:a:jansson_project:jansson:2.3:*:*:*:*:*:*:*
    • cpe:2.3:a:jansson_project:jansson:2.3.1:*:*:*:*:*:*:*

Patches

0

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

4

News mentions

0

No linked articles in our index yet.