CVE-2023-50268

Summary

CVE-2023-50268 is a newly disclosed vulnerability affecting jq, a popular command-line JSON processor. The issue lies in the decNumber function used in builds before version 1.7, leading to a stack-based buffer overflow. This vulnerability could potentially be exploited by malicious actors to execute arbitrary code or cause a denial of service. Version 1.7.1 of jq includes a patch that addresses this vulnerability, ensuring the security of affected systems. Users are urged to update their installations as soon as possible to mitigate potential risks.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.