CVE-2024-53427 SUSE CVE security@suse.de SUSE Security Team SUSE CVE-2024-53427 Interim 1 11 2026-03-05T01:46:55Z current 2025-03-01T00:15:09Z 2026-03-05T01:46:55Z cve-database/bin/generate-cvrf-cve.pl 2020-12-27T01:00:00Z CVE-2024-53427 decNumberCopy in decNumber.c in jq through 1.7.1 does not properly consider that NaN is interpreted as numeric, which has a resultant stack-based buffer overflow and out-of-bounds write, as demonstrated by use of --slurp with subtraction, such as a filter of .-. when the input has a certain form of digit string with NaN (e.g., "1 NaN123" immediately followed by many more digits). The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). https://lists.suse.com/pipermail/sle-security-updates/2025-August/022370.html E-Mail link for SUSE-SU-2025:20591-1 https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/JTB54BUKGI3PO5QEDVXN4XSDB2RSYZ7F/ E-Mail link for openSUSE-SU-2025:15161-1 https://www.suse.com/support/security/rating/ SUSE Security Ratings Container suse/sl-micro/6.1/baremetal-os-container:2.2.1-7.2 Image SUSE-Multi-Linux-Manager-Proxy-BYOS-Azure Image SUSE-Multi-Linux-Manager-Proxy-BYOS-EC2 Image SUSE-Multi-Linux-Manager-Proxy-BYOS-GCE Image SUSE-Multi-Linux-Manager-Server-Azure-llc Image SUSE-Multi-Linux-Manager-Server-Azure-ltd Image SUSE-Multi-Linux-Manager-Server-BYOS-Azure Image SUSE-Multi-Linux-Manager-Server-BYOS-EC2 Image SUSE-Multi-Linux-Manager-Server-BYOS-GCE Image SUSE-Multi-Linux-Manager-Server-EC2-llc Image SUSE-Multi-Linux-Manager-Server-EC2-ltd SLES-LTSS-TERADATA 15 SP2 SUSE Linux Enterprise Module for Basesystem 15 SP6 SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS SUSE Linux Enterprise Module for Basesystem 15 SP6 SUSE Linux Enterprise Micro 5.1 SUSE Linux Enterprise Micro 5.2 SUSE Linux Enterprise Micro 5.3 SUSE Linux Enterprise Micro 5.4 SUSE Linux Enterprise Micro 5.5 SUSE Linux Enterprise Server 15 SP1-LTSS SUSE Linux Enterprise Server 15 SP2-LTSS SUSE Linux Enterprise Server 15 SP3-LTSS SUSE Linux Enterprise Server 15 SP4-LTSS SUSE Linux Enterprise Server 15 SP5-LTSS SUSE Linux Enterprise Module for Basesystem 15 SP6 SUSE Linux Enterprise Server 16.0 SUSE Linux Enterprise Server Teradata 12 SP3 SUSE Linux Enterprise Server Teradata 15 SP4 SUSE Linux Enterprise Server for SAP Applications 15 SP3 SUSE Linux Enterprise Server for SAP Applications 15 SP4 SUSE Linux Enterprise Server for SAP Applications 15 SP5 SUSE Linux Enterprise Module for Basesystem 15 SP6 SUSE Linux Micro 6.0 SUSE Linux Micro 6.1 SUSE Manager Proxy 4.3 SUSE Manager Proxy LTS 4.3 SUSE Manager Retail Branch Server 4.3 SUSE Manager Retail Branch Server LTS 4.3 SUSE Manager Server 4.3 SUSE Manager Server LTS 4.3 openSUSE Leap 15.6 openSUSE Tumbleweed jq jq-1.7.1-160000.2.2 jq-1.7.1-3.1 jq-1.7.1-slfo.1.1_2.1 libjq-devel libjq-devel-1.7.1-160000.2.2 libjq-devel-1.7.1-3.1 libjq1 libjq1-1.7.1-160000.2.2 libjq1-1.7.1-3.1 libjq1-1.7.1-slfo.1.1_2.1 jq-1.7.1-slfo.1.1_2.1 as a component of Container suse/sl-micro/6.1/baremetal-os-container:2.2.1-7.2 libjq1-1.7.1-slfo.1.1_2.1 as a component of Container suse/sl-micro/6.1/baremetal-os-container:2.2.1-7.2 jq-1.7.1-slfo.1.1_2.1 as a component of Image SUSE-Multi-Linux-Manager-Proxy-BYOS-Azure libjq1-1.7.1-slfo.1.1_2.1 as a component of Image SUSE-Multi-Linux-Manager-Proxy-BYOS-Azure jq-1.7.1-slfo.1.1_2.1 as a component of Image SUSE-Multi-Linux-Manager-Proxy-BYOS-EC2 libjq1-1.7.1-slfo.1.1_2.1 as a component of Image SUSE-Multi-Linux-Manager-Proxy-BYOS-EC2 jq-1.7.1-slfo.1.1_2.1 as a component of Image SUSE-Multi-Linux-Manager-Proxy-BYOS-GCE libjq1-1.7.1-slfo.1.1_2.1 as a component of Image SUSE-Multi-Linux-Manager-Proxy-BYOS-GCE jq-1.7.1-slfo.1.1_2.1 as a component of Image SUSE-Multi-Linux-Manager-Server-Azure-llc libjq1-1.7.1-slfo.1.1_2.1 as a component of Image SUSE-Multi-Linux-Manager-Server-Azure-llc jq-1.7.1-slfo.1.1_2.1 as a component of Image SUSE-Multi-Linux-Manager-Server-Azure-ltd libjq1-1.7.1-slfo.1.1_2.1 as a component of Image SUSE-Multi-Linux-Manager-Server-Azure-ltd jq-1.7.1-slfo.1.1_2.1 as a component of Image SUSE-Multi-Linux-Manager-Server-BYOS-Azure libjq1-1.7.1-slfo.1.1_2.1 as a component of Image SUSE-Multi-Linux-Manager-Server-BYOS-Azure jq-1.7.1-slfo.1.1_2.1 as a component of Image SUSE-Multi-Linux-Manager-Server-BYOS-EC2 libjq1-1.7.1-slfo.1.1_2.1 as a component of Image SUSE-Multi-Linux-Manager-Server-BYOS-EC2 jq-1.7.1-slfo.1.1_2.1 as a component of Image SUSE-Multi-Linux-Manager-Server-BYOS-GCE libjq1-1.7.1-slfo.1.1_2.1 as a component of Image SUSE-Multi-Linux-Manager-Server-BYOS-GCE jq-1.7.1-slfo.1.1_2.1 as a component of Image SUSE-Multi-Linux-Manager-Server-EC2-llc libjq1-1.7.1-slfo.1.1_2.1 as a component of Image SUSE-Multi-Linux-Manager-Server-EC2-llc jq-1.7.1-slfo.1.1_2.1 as a component of Image SUSE-Multi-Linux-Manager-Server-EC2-ltd libjq1-1.7.1-slfo.1.1_2.1 as a component of Image SUSE-Multi-Linux-Manager-Server-EC2-ltd jq-1.7.1-160000.2.2 as a component of SUSE Linux Enterprise Server 16.0 libjq-devel-1.7.1-160000.2.2 as a component of SUSE Linux Enterprise Server 16.0 libjq1-1.7.1-160000.2.2 as a component of SUSE Linux Enterprise Server 16.0 jq-1.7.1-slfo.1.1_2.1 as a component of SUSE Linux Micro 6.1 libjq1-1.7.1-slfo.1.1_2.1 as a component of SUSE Linux Micro 6.1 jq-1.7.1-3.1 as a component of openSUSE Tumbleweed libjq-devel-1.7.1-3.1 as a component of openSUSE Tumbleweed libjq1-1.7.1-3.1 as a component of openSUSE Tumbleweed jq as a component of SLES-LTSS-TERADATA 15 SP2 jq as a component of SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS libjq-devel as a component of SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS libjq1 as a component of SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS jq as a component of SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS libjq-devel as a component of SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS libjq1 as a component of SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS jq as a component of SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS libjq-devel as a component of SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS libjq1 as a component of SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS jq as a component of SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS libjq-devel as a component of SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS libjq1 as a component of SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS jq as a component of SUSE Linux Enterprise Micro 5.1 libjq1 as a component of SUSE Linux Enterprise Micro 5.1 jq as a component of SUSE Linux Enterprise Micro 5.2 libjq1 as a component of SUSE Linux Enterprise Micro 5.2 jq as a component of SUSE Linux Enterprise Micro 5.3 libjq1 as a component of SUSE Linux Enterprise Micro 5.3 jq as a component of SUSE Linux Enterprise Micro 5.4 libjq1 as a component of SUSE Linux Enterprise Micro 5.4 jq as a component of SUSE Linux Enterprise Micro 5.5 libjq1 as a component of SUSE Linux Enterprise Micro 5.5 jq as a component of SUSE Linux Enterprise Module for Basesystem 15 SP6 libjq-devel as a component of SUSE Linux Enterprise Module for Basesystem 15 SP6 libjq1 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP6 jq as a component of SUSE Linux Enterprise Server 15 SP1-LTSS libjq-devel as a component of SUSE Linux Enterprise Server 15 SP1-LTSS libjq1 as a component of SUSE Linux Enterprise Server 15 SP1-LTSS jq as a component of SUSE Linux Enterprise Server 15 SP2-LTSS libjq-devel as a component of SUSE Linux Enterprise Server 15 SP2-LTSS libjq1 as a component of SUSE Linux Enterprise Server 15 SP2-LTSS jq as a component of SUSE Linux Enterprise Server 15 SP3-LTSS libjq-devel as a component of SUSE Linux Enterprise Server 15 SP3-LTSS libjq1 as a component of SUSE Linux Enterprise Server 15 SP3-LTSS jq as a component of SUSE Linux Enterprise Server 15 SP4-LTSS libjq-devel as a component of SUSE Linux Enterprise Server 15 SP4-LTSS libjq1 as a component of SUSE Linux Enterprise Server 15 SP4-LTSS jq as a component of SUSE Linux Enterprise Server 15 SP5-LTSS libjq-devel as a component of SUSE Linux Enterprise Server 15 SP5-LTSS libjq1 as a component of SUSE Linux Enterprise Server 15 SP5-LTSS jq as a component of SUSE Linux Enterprise Server Teradata 12 SP3 jq as a component of SUSE Linux Enterprise Server Teradata 15 SP4 jq as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP3 libjq-devel as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP3 libjq1 as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP3 jq as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP4 libjq-devel as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP4 libjq1 as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP4 jq as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP5 libjq-devel as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP5 libjq1 as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP5 jq as a component of SUSE Linux Micro 6.0 libjq1 as a component of SUSE Linux Micro 6.0 jq as a component of SUSE Manager Proxy 4.3 libjq-devel as a component of SUSE Manager Proxy 4.3 libjq1 as a component of SUSE Manager Proxy 4.3 jq as a component of SUSE Manager Proxy LTS 4.3 libjq-devel as a component of SUSE Manager Proxy LTS 4.3 libjq1 as a component of SUSE Manager Proxy LTS 4.3 jq as a component of SUSE Manager Retail Branch Server 4.3 libjq-devel as a component of SUSE Manager Retail Branch Server 4.3 libjq1 as a component of SUSE Manager Retail Branch Server 4.3 jq as a component of SUSE Manager Retail Branch Server LTS 4.3 libjq-devel as a component of SUSE Manager Retail Branch Server LTS 4.3 libjq1 as a component of SUSE Manager Retail Branch Server LTS 4.3 jq as a component of SUSE Manager Server 4.3 libjq-devel as a component of SUSE Manager Server 4.3 libjq1 as a component of SUSE Manager Server 4.3 jq as a component of SUSE Manager Server LTS 4.3 libjq-devel as a component of SUSE Manager Server LTS 4.3 libjq1 as a component of SUSE Manager Server LTS 4.3 jq as a component of openSUSE Leap 15.6 libjq-devel as a component of openSUSE Leap 15.6 libjq1 as a component of openSUSE Leap 15.6 decNumberCopy in decNumber.c in jq through 1.7.1 does not properly consider that NaN is interpreted as numeric, which has a resultant stack-based buffer overflow and out-of-bounds write, as demonstrated by use of --slurp with subtraction, such as a filter of .-. when the input has a certain form of digit string with NaN (e.g., "1 NaN123" immediately followed by many more digits). CVE-2024-53427 Container suse/sl-micro/6.1/baremetal-os-container:2.2.1-7.2:jq-1.7.1-slfo.1.1_2.1 Container suse/sl-micro/6.1/baremetal-os-container:2.2.1-7.2:libjq1-1.7.1-slfo.1.1_2.1 Image SUSE-Multi-Linux-Manager-Proxy-BYOS-Azure:jq-1.7.1-slfo.1.1_2.1 Image SUSE-Multi-Linux-Manager-Proxy-BYOS-Azure:libjq1-1.7.1-slfo.1.1_2.1 Image SUSE-Multi-Linux-Manager-Proxy-BYOS-EC2:jq-1.7.1-slfo.1.1_2.1 Image SUSE-Multi-Linux-Manager-Proxy-BYOS-EC2:libjq1-1.7.1-slfo.1.1_2.1 Image SUSE-Multi-Linux-Manager-Proxy-BYOS-GCE:jq-1.7.1-slfo.1.1_2.1 Image SUSE-Multi-Linux-Manager-Proxy-BYOS-GCE:libjq1-1.7.1-slfo.1.1_2.1 Image SUSE-Multi-Linux-Manager-Server-Azure-llc:jq-1.7.1-slfo.1.1_2.1 Image SUSE-Multi-Linux-Manager-Server-Azure-llc:libjq1-1.7.1-slfo.1.1_2.1 Image SUSE-Multi-Linux-Manager-Server-Azure-ltd:jq-1.7.1-slfo.1.1_2.1 Image SUSE-Multi-Linux-Manager-Server-Azure-ltd:libjq1-1.7.1-slfo.1.1_2.1 Image SUSE-Multi-Linux-Manager-Server-BYOS-Azure:jq-1.7.1-slfo.1.1_2.1 Image SUSE-Multi-Linux-Manager-Server-BYOS-Azure:libjq1-1.7.1-slfo.1.1_2.1 Image SUSE-Multi-Linux-Manager-Server-BYOS-EC2:jq-1.7.1-slfo.1.1_2.1 Image SUSE-Multi-Linux-Manager-Server-BYOS-EC2:libjq1-1.7.1-slfo.1.1_2.1 Image SUSE-Multi-Linux-Manager-Server-BYOS-GCE:jq-1.7.1-slfo.1.1_2.1 Image SUSE-Multi-Linux-Manager-Server-BYOS-GCE:libjq1-1.7.1-slfo.1.1_2.1 Image SUSE-Multi-Linux-Manager-Server-EC2-llc:jq-1.7.1-slfo.1.1_2.1 Image SUSE-Multi-Linux-Manager-Server-EC2-llc:libjq1-1.7.1-slfo.1.1_2.1 Image SUSE-Multi-Linux-Manager-Server-EC2-ltd:jq-1.7.1-slfo.1.1_2.1 Image SUSE-Multi-Linux-Manager-Server-EC2-ltd:libjq1-1.7.1-slfo.1.1_2.1 SUSE Linux Enterprise Server 16.0:jq-1.7.1-160000.2.2 SUSE Linux Enterprise Server 16.0:libjq-devel-1.7.1-160000.2.2 SUSE Linux Enterprise Server 16.0:libjq1-1.7.1-160000.2.2 SUSE Linux Micro 6.1:jq-1.7.1-slfo.1.1_2.1 SUSE Linux Micro 6.1:libjq1-1.7.1-slfo.1.1_2.1 openSUSE Tumbleweed:jq-1.7.1-3.1 openSUSE Tumbleweed:libjq-devel-1.7.1-3.1 openSUSE Tumbleweed:libjq1-1.7.1-3.1 SLES-LTSS-TERADATA 15 SP2:jq SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:jq SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libjq-devel SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libjq1 SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:jq SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:libjq-devel SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:libjq1 SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:jq SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:libjq-devel SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:libjq1 SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:jq SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:libjq-devel SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:libjq1 SUSE Linux Enterprise Micro 5.1:jq SUSE Linux Enterprise Micro 5.1:libjq1 SUSE Linux Enterprise Micro 5.2:jq SUSE Linux Enterprise Micro 5.2:libjq1 SUSE Linux Enterprise Micro 5.3:jq SUSE Linux Enterprise Micro 5.3:libjq1 SUSE Linux Enterprise Micro 5.4:jq SUSE Linux Enterprise Micro 5.4:libjq1 SUSE Linux Enterprise Micro 5.5:jq SUSE Linux Enterprise Micro 5.5:libjq1 SUSE Linux Enterprise Module for Basesystem 15 SP6:jq SUSE Linux Enterprise Module for Basesystem 15 SP6:libjq-devel SUSE Linux Enterprise Module for Basesystem 15 SP6:libjq1 SUSE Linux Enterprise Server 15 SP1-LTSS:jq SUSE Linux Enterprise Server 15 SP1-LTSS:libjq-devel SUSE Linux Enterprise Server 15 SP1-LTSS:libjq1 SUSE Linux Enterprise Server 15 SP2-LTSS:jq SUSE Linux Enterprise Server 15 SP2-LTSS:libjq-devel SUSE Linux Enterprise Server 15 SP2-LTSS:libjq1 SUSE Linux Enterprise Server 15 SP3-LTSS:jq SUSE Linux Enterprise Server 15 SP3-LTSS:libjq-devel SUSE Linux Enterprise Server 15 SP3-LTSS:libjq1 SUSE Linux Enterprise Server 15 SP4-LTSS:jq SUSE Linux Enterprise Server 15 SP4-LTSS:libjq-devel SUSE Linux Enterprise Server 15 SP4-LTSS:libjq1 SUSE Linux Enterprise Server 15 SP5-LTSS:jq SUSE Linux Enterprise Server 15 SP5-LTSS:libjq-devel SUSE Linux Enterprise Server 15 SP5-LTSS:libjq1 SUSE Linux Enterprise Server Teradata 12 SP3:jq SUSE Linux Enterprise Server Teradata 15 SP4:jq SUSE Linux Enterprise Server for SAP Applications 15 SP3:jq SUSE Linux Enterprise Server for SAP Applications 15 SP3:libjq-devel SUSE Linux Enterprise Server for SAP Applications 15 SP3:libjq1 SUSE Linux Enterprise Server for SAP Applications 15 SP4:jq SUSE Linux Enterprise Server for SAP Applications 15 SP4:libjq-devel SUSE Linux Enterprise Server for SAP Applications 15 SP4:libjq1 SUSE Linux Enterprise Server for SAP Applications 15 SP5:jq SUSE Linux Enterprise Server for SAP Applications 15 SP5:libjq-devel SUSE Linux Enterprise Server for SAP Applications 15 SP5:libjq1 SUSE Linux Micro 6.0:jq SUSE Linux Micro 6.0:libjq1 SUSE Manager Proxy 4.3:jq SUSE Manager Proxy 4.3:libjq-devel SUSE Manager Proxy 4.3:libjq1 SUSE Manager Proxy LTS 4.3:jq SUSE Manager Proxy LTS 4.3:libjq-devel SUSE Manager Proxy LTS 4.3:libjq1 SUSE Manager Retail Branch Server 4.3:jq SUSE Manager Retail Branch Server 4.3:libjq-devel SUSE Manager Retail Branch Server 4.3:libjq1 SUSE Manager Retail Branch Server LTS 4.3:jq SUSE Manager Retail Branch Server LTS 4.3:libjq-devel SUSE Manager Retail Branch Server LTS 4.3:libjq1 SUSE Manager Server 4.3:jq SUSE Manager Server 4.3:libjq-devel SUSE Manager Server 4.3:libjq1 SUSE Manager Server LTS 4.3:jq SUSE Manager Server LTS 4.3:libjq-devel SUSE Manager Server LTS 4.3:libjq1 openSUSE Leap 15.6:jq openSUSE Leap 15.6:libjq-devel openSUSE Leap 15.6:libjq1 moderate 5.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L