Launchpad.net

CVE 2013-6371

The hash functionality in json-c before 0.12 allows context-dependent attackers to cause a denial of service (CPU consumption) via crafted JSON data, involving collisions.

See the CVE page on Mitre.org for more details.