VDB

GCVE-110-MAGEIA-2024-66

GCVE-110-MAGEIA-2024-66
Advisory Published
Vulnetix · Advisory published March 15, 2024
The updated packages fix security vulnerabilities: In the yajl-ruby gem 1.3.0 for Ruby, when a crafted JSON file is supplied to Yajl::Parser.new.parse, the whole ruby process crashes with a SIGABRT in the yajl_string_decode function in yajl_encode.c. This results in the whole ruby process terminating and potentially a denial of service. (CVE-2017-16516) There's a memory leak in yajl 2.1.0 with use of yajl_tree_parse function. which will cause out-of-memory in server and cause crash. (CVE-2023-33460)

Affected Products

VendorProductVersionsPlatforms
Mageiayajl0 (affected), 0 (affected), 2.1.0-6.1.mga9 (unaffected), 2.1.0-6.1.mga9 (unaffected)
Mageiaphp8.2.16-1.mga9 (unaffected), 0 (affected)

Browse GCVE Records

73,834 records in the GCVE database · Updated July 19, 2026

No matching records found.

Explore Further

Investigate this vulnerability in the interactive console or download the raw GCVE record.

$ Console Community · 100/wk Open console ›