CVE-2025-40929

Cpanel::JSON::XS before version 4.40 for Perl has an integer buffer overflow causing a segfault when parsing crafted JSON, enabling denial-of-service attacks or other unspecified impact

References

Affected packages

Alpine:v3.20 / perl-cpanel-json-xs

Package

Name: perl-cpanel-json-xs
Purl: pkg:apk/alpine/perl-cpanel-json-xs?arch=source

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

4.40-r0

Affected versions

3.*

3.0115-r0

3.0115-r1

3.0217-r0

3.0218-r0

3.0219-r0

3.0220-r0

3.0223-r0

3.0224-r0

3.0225-r0

3.0226-r0

3.0227-r0

3.0228-r0

3.0230-r0

3.0231-r0

3.0232-r0

3.0233-r0

3.0233-r1

3.0237-r0

3.0238-r0

3.0239-r0

4.*

4.00-r0

4.01-r0

4.02-r0

4.03-r0

4.04-r0

4.05-r0

4.06-r0

4.08-r0

4.09-r0

4.11-r0

4.11-r1

4.12-r0

4.12-r1

4.13-r0

4.14-r0

4.15-r0

4.17-r0

4.18-r0

4.19-r0

4.21-r0

4.22-r0

4.23-r0

4.23-r1

4.24-r0

4.25-r0

4.26-r0

4.26-r1

4.27-r0

4.28-r0

4.29-r0

4.29-r1

4.30-r0

4.32-r0

4.34-r0

4.35-r0

4.36-r0

4.36-r1

4.36-r2

4.37-r0

Alpine:v3.21 / perl-cpanel-json-xs

Package

Name: perl-cpanel-json-xs
Purl: pkg:apk/alpine/perl-cpanel-json-xs?arch=source

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

4.40-r0

Affected versions

4.*

4.38-r0

Alpine:v3.22 / perl-cpanel-json-xs

Package

Name: perl-cpanel-json-xs
Purl: pkg:apk/alpine/perl-cpanel-json-xs?arch=source

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

4.40-r0

Affected versions

4.*

4.38-r0

4.39-r0

Debian:11 / libcpanel-json-xs-perl

Package

Name: libcpanel-json-xs-perl
Purl: pkg:deb/debian/libcpanel-json-xs-perl?arch=source

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Affected versions

4.*

4.25-1

4.26-1

4.27-1

4.28-1

4.29-1

4.30-1

4.31-1

4.32-1

4.35-1

4.36-1

4.37-1

4.38-1

4.39-1

4.39-2~deb13u1

4.39-2

Ecosystem specific

{
    "urgency": "not yet assigned"
}

Debian:12 / libcpanel-json-xs-perl

Package

Name: libcpanel-json-xs-perl
Purl: pkg:deb/debian/libcpanel-json-xs-perl?arch=source

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

4.35-1+deb12u1

Affected versions

4.*

4.35-1

Ecosystem specific

{
    "urgency": "not yet assigned"
}

Debian:13 / libcpanel-json-xs-perl

Package

Name: libcpanel-json-xs-perl
Purl: pkg:deb/debian/libcpanel-json-xs-perl?arch=source

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

4.39-2~deb13u1

Affected versions

4.*

4.39-1

Ecosystem specific

{
    "urgency": "not yet assigned"
}

Debian:14 / libcpanel-json-xs-perl

Package

Name: libcpanel-json-xs-perl
Purl: pkg:deb/debian/libcpanel-json-xs-perl?arch=source

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

4.39-2

Affected versions

4.*

4.39-1

4.39-2~deb13u1

Ecosystem specific

{
    "urgency": "not yet assigned"
}

Git / github.com/rurban/cpanel-json-xs

Affected ranges

Type: GIT
Repo: https://github.com/rurban/cpanel-json-xs
Events: Introduced

0 Unknown introduced commit / All previous commits are affected

Fixed

378236219eaa35742c3962ecbdee364903b0a1f2

Affected versions

2.*

2.27

2.28

2.29

2.3

2.31

2.32

2.3305

2.3306

2.3307

2.3308

2.3309

2.3310

2.3311

2.3313

2.3314

2.33_02

2.33_03

2.33_04

2.3401

2.3402

2.3403

2.3404

3.*

3.0101

3.0102

3.0103

3.0104

3.0105

3.0106

3.0109

3.0110

3.0111

3.0112

3.0113

3.0114

3.0115

3.0201

3.0202

3.0204

3.0205

3.0206

3.0207

3.0208

3.0209

3.0210

3.0211

3.0212

3.0213

3.0213_01

3.0213_02

3.0214

3.0215

3.0216

3.0217

3.0217_01

3.0217_02

3.0217_03

3.0217_04

3.0217_05

3.0217_06

3.0218

3.0219

3.0220

3.0221

3.0222

3.0223

3.0224

3.0225

3.0226

3.0227

3.0229

3.0232

3.0233

3.0234

3.0235

3.0236

3.0237

3.0238

3.0239

3.0240

3.99_01

3.99_02

3.99_03

4.*

4.00

4.01

4.02

4.03

4.04

4.05

4.06

4.07

4.08

4.09

4.10

4.11

4.12

4.13

4.14

4.15

4.16

4.17

4.18

4.19

4.20

4.21

4.22

4.23

4.24

4.25

4.26

4.27

4.28

4.29

4.30

4.31

4.32

4.33

4.34

4.35

4.36

4.37

4.38

4.39