Ox Project

Records2All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high1CVSS 7.0–8.9

Exploited now

Ox Project records in CISA KEV

No Ox Project vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Ox 2 records LOW

Records

2 records in Ox · all components

TI-2017-11660 CVE-2017-15928 · GHSA-pjj4-w39g-pw54

In the Ox gem 2.8.0 for Ruby, the process crashes with a segmentation fault when a…

LOW 36

In the Ox gem 2.8.0 for Ruby, the process crashes with a segmentation fault when a crafted input is supplied to parse_obj.

CVSS 3.0HIGH 7.5 Network No auth No interaction EPSS 0.01713 Published 2017-10-27 Fixed in 2.8.1 CWE-20

TI-2017-11948 CVE-2017-16229 · GHSA-wfwm-chj7-w59r

In the Ox gem 2.8.1 for Ruby, the process crashes with a stack-based buffer over-read in…

LOW 27

In the Ox gem 2.8.1 for Ruby, the process crashes with a stack-based buffer over-read in the read_from_str function in sax_buf.c when a crafted input is supplied to sax_parse.

CVSS 3.0MEDIUM 5.5 Local No auth User interaction EPSS 0.00965 Published 2018-02-26 Fixed in 2.8.2 CWE-125

Open these records in search →

Critical	0
High	1
Medium	1
Low	0
No CVSS	0