PT-2023-8957

CVE-2023-50246

·

Published

2023-12-13

·

Updated

2026-09-21

Description by

CVSS 3.1
6.2
Medium
MetricsAV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Name of the Vulnerable Software and Affected Versions jq version 1.7
Description The issue is related to a heap-based buffer overflow in the jq command-line JSON processor. This can potentially allow an attacker to cause a denial of service.
Recommendations For version 1.7, update to version 1.7.1 to resolve the issue.
Exploitability
Exploit
Fix
Impacts
Researchers
Vendors
Affected products
Related identifiers
GHSA-686W-5M7M-54VC
ALT-PU-2023-8506
OPENSUSE-SU-2024:13521-1
SUSE-SU-2026:23873-1
SUSE-SU-2026:4275-1
Found an issue in the description? Have something to add? Feel free to write us 👾