TI-2022-08608 CVE-2022-24795 · GHSA-jj47-x69x-mxrm
Buffer Overflow and Integer Overflow in yajl-ruby
Priority HIGH 66
yajl-ruby is a C binding to the YAJL JSON parsing and generation library.
Yajl-ruby Project
Records2All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high2CVSS 7.0–8.9
Exploited now
Yajl-ruby Project records in CISA KEVNo Yajl-ruby Project vulnerabilities are listed in CISA KEV.
Components
Products in the NVD configurations · select one to filter the recordsRecords
2 records
TI-2017-12131 CVE-2017-16516 · GHSA-wwh7-4jw9-33x6
In the yajl-ruby gem 1.3.0 for Ruby, when a crafted JSON file is supplied to…
Priority LOW 39
In the yajl-ruby gem 1.3.0 for Ruby, when a crafted JSON file is supplied to Yajl::Parser.new.parse, the whole ruby process crashes with a SIGABRT in the yajl_string_decode function in yajl_encode.c.