Most recent entries from all

ALSA-2023:6551 — Moderate: yajl security update

Affected: AlmaLinux:9: yajl, AlmaLinux:9: yajl-devel

Yet Another JSON Library (YAJL) is a small event-driven (SAX-style) JSON parser written in ANSI C, and a small validating JSON generator.

Security Fix(es):

* yajl: Memory leak in yajl_tree_parse function (CVE-2023-33460)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.

bdu:2023-07652

BELL-CVE-2023-33460

Affected: Alpaquita:23: yajl, Alpaquita:stream: yajl

BREW-yajl-CVE-2023-33460

Affected: Homebrew: yajl

There's a memory leak in yajl 2.1.0 with use of yajl_tree_parse function. which will cause out-of-memory in server and cause crash.

EUVD-2026-209568

fkie_cve-2023-33460

There's a memory leak in yajl 2.1.0 with use of yajl_tree_parse function. which will cause out-of-memory in server and cause crash.

GHSA-cqgm-m7h3-xgwm

There's a memory leak in yajl 2.1.0 with use of yajl_tree_parse function. which will cause out-of-memory in server and cause crash.

gsd-2023-33460

msrc_CVE-2023-33460 — There's a memory leak in yajl 2.1.0 with use of yajl_tree_parse function. which will cause out-of-memory in server and…

msrc_CVE-2023-33460

openSUSE-SU-2024:13057-1 — libyajl-devel-2.1.0-8.1 on GA media

libyajl-devel-2.1.0-8.1 on GA media

RHSA-2024:2063 — Red Hat Security Advisory: yajl security update

yajl: heap-based buffer overflow when handling large inputs due to an integer overflow yajl: Memory leak in yajl_tree_parse function

UBUNTU-CVE-2023-33460

Affected: Ubuntu:Pro:14.04:LTS: yajl, Ubuntu:Pro:16.04:LTS: yajl, Ubuntu:16.04:LTS: argyll, Ubuntu:16.04:LTS: r-cran-jsonlite, Ubuntu:Pro:18.04:LTS: yajl, Ubuntu:18.04:LTS: argyll, Ubuntu:18.04:LTS: r-cran-jsonlite, Ubuntu:20.04:LTS: yajl, Ubuntu:20.04:LTS: argyll, Ubuntu:20.04:LTS: r-cran-jsonlite and 9 more

There's a memory leak in yajl 2.1.0 with use of yajl_tree_parse function. which will cause out-of-memory in server and cause crash.

WID-SEC-W-2023-2853 — Red Hat Enterprise Linux: Mehrere Schwachstellen

Ein Angreifer kann mehrere Schwachstellen in Red Hat Enterprise Linux ausnutzen, um einen Denial-of-Service-Zustand herbeizuführen, Sicherheitsmaßnahmen zu umgehen, seine Privilegien zu erweitern, vertrauliche Informationen offenzulegen oder beliebigen Code auszuführen.