CVE-2017-16229

CVE-2017-16229 affects the Ox gem for Ruby (version 2.8.1). The vulnerability is a stack-based buffer over-read in sax_buf.c, in read_from_str, triggered by crafted input to sax_parse, which can cause the process to crash (denial of service). The available connected documents confirm the vulnerab...