Lucene search

K

ROSA LABROSA-SA-2024-2478

HistorySep 25, 2024 - 9:38 a.m.

Advisory ROSA-SA-2024-2478

2024-09-2509:38:35

ROSA LAB

abf.rosalinux.ru

CVSS3

6.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

AI Score

6.7

Confidence

Low

software: yajl 2.1.0
WASP: ROSA-CHROME

package_evr_string: yajl-2.1.0-2

CVE-ID: CVE-2023-33460
BDU-ID: 2023-07652
CVE-Crit: HIGH
CVE-DESC.: A vulnerability in the yajl_tree_parse function of the YAJL-ruby JSON library is related to improper memory freeing before deleting the last reference. Exploitation of the vulnerability could allow an attacker acting remotely to cause a denial of service
CVE-STATUS: Fixed
CVE-REV: To close, run the command: sudo dnf update yajl

OSVersionArchitecturePackageVersionFilename
ROSAanynoarchyajl< 2.1.0UNKNOWN

CVSS3

6.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

AI Score

6.7

Confidence

Low

Related for ROSA-SA-2024-2478