JSONPath Infinite Loop in json-glib

Executive Summary

This vulnerability is in json-glib, a JSON library for C applications. It involves an infinite loop in the JSONPath slice evaluator used by the json_path_query() function when processing slice expressions with a negative step, such as $[:5:-1]. This can cause a denial of service if an attacker supplies a crafted JSONPath expression to an application using the vulnerable function.

Useful 0 Not Useful 0

Detection Guidance

To detect this vulnerability, check if your system uses json-glib and if applications process untrusted JSONPath expressions. Inspect logs for processes hanging during JSONPath evaluation. Use commands like 'rpm -q json-glib' or 'dpkg -l libjson-glib' to verify package installation.

Useful 0 Not Useful 0

Impact Analysis

An application that evaluates attacker-controlled JSONPath expressions can be forced into a hang, leading to a denial of service. This means the application may become unresponsive or crash, disrupting normal operations.

Useful 0 Not Useful 0

Compliance Impact

This vulnerability primarily causes a denial of service by hanging the application, which could disrupt services handling personal or sensitive data. While it does not directly expose or alter data, prolonged downtime may impact compliance with GDPR (availability requirements) or HIPAA (service continuity). Mitigation involves avoiding untrusted JSONPath expressions, which could indirectly support compliance by reducing attack surfaces.

Useful 0 Not Useful 0

Mitigation Strategies

Avoid using untrusted JSONPath expressions. Prefer fixed application-defined paths and reject slice expressions with negative steps. Monitor for affected applications and apply vendor patches once available. Disable or restrict JSONPath processing in vulnerable applications if possible.

Useful 0 Not Useful 0