CVE:CVE-2016-4303
CNNVD:CNNVD-201606-540
cJSON是一款使用C语言编写的JSON解析器。
cJSON库中的cjson.c文件中的‘parse_string’函数存在安全漏洞，该漏洞源于程序没有正确处理UTF8/16字符串。远程攻击者可借助JSON字符串中的non-hex字符利用该漏洞造成拒绝服务（崩溃）或执行任意代码。
solution:Upgrade iperf3_project iperf3 to a higher version than 3.0.12,3.1.3,and avoid the version [3.0,3.0.12),[3.1,3.1.3); Upgrade novell suse_package_hub_for_suse_linux_enterprise to a higher version than 12,and avoid the version 12; Upgrade opensuse leap to a higher version than 42.1,and avoid the version 42.1; Upgrade opensuse opensuse to a higher version than 13.2,and avoid the version 13.2; Upgrade debian debian_linux to a higher version than 8.0,and avoid the version 8.0