Lucene search

K
osvGoogleOSV:GHSA-PJJ4-W39G-PW54
HistoryNov 21, 2017 - 6:26 p.m.

Ox gem crashes due to a crafted input

2017-11-2118:26:40
Google
osv.dev
15

0.001 Low

EPSS

Percentile

40.7%

In the Ox gem 2.8.0 for Ruby, the process crashes with a segmentation fault when a crafted input is supplied to parse_obj. NOTE: the vendor has stated “Ox should handle the error more gracefully” but has not confirmed a security implication.

Rows per page:
1-10 of 1161