Lucene search
K

26 matches found

AstraLinux
AstraLinux
added 2026/05/03 11:59 p.m.11 views

Astra Linux - уязвимость в yajl

There is a memory leak in yajl 2.1.0 when using the yajltreeparse function. This can lead to out-of-memory issues on the server and cause crashes...

6.5CVSS6.6AI score0.00204EPSS
Exploits1References2
OSV
OSV
added 2026/04/01 1:43 p.m.1 views

JLSEC-2026-19 There's a memory leak in yajl 2.1.0 with use of yajl_tree_parse function

There's a memory leak in yajl 2.1.0 with use of yajltreeparse function. which will cause out-of-memory in server and cause crash...

6.5CVSS5.8AI score0.00204EPSS
Exploits1References14
CVE
CVE
added 2026/01/27 9:2 a.m.8 views

CVE-2026-24825

CVE-2026-24825 describes a memory-leak issue in the ydb-platform/ydb stack, linked to the contrib/libs/yajl modules (yail_tree.C). Affected are ydb versions up to 24.4.4.2. The vulnerability is characterized as Missing Release of Memory after Effective Lifetime, with impact described as potential...

6.9CVSS5.9AI score0.00082EPSS
Exploits0References1
EUVD
EUVD
added 2025/10/03 8:7 p.m.1 views

EUVD-2023-37623

Malicious code in bioql PyPI...

6.5CVSS6.2AI score0.00204EPSS
Exploits1References10
OSV
OSV
added 2025/09/15 6:57 p.m.2 views

CLSA-2025-1757962664 yajl: Fix of CVE-2023-33460

CVE-2023-33460: fix memory leak in yajltreeparse function...

6.5CVSS6.6AI score0.00204EPSS
Exploits1References1
Redos
Redos
added 2024/06/06 12:0 a.m.18 views

ROS-20240606-06

A vulnerability in the yajltreeparse function of the YAJL-ruby JSON library is related to improper memory freeing before deleting the last reference. Exploitation of the vulnerability could allow an attacker acting remotely to cause a denial of service. remotely to cause a denial of service...

6.5CVSS6.6AI score0.00204EPSS
Exploits1
RedHat Linux
RedHat Linux
added 2024/04/30 3:11 p.m.2 views

yajl: Memory leak in yajl_tree_parse function

A flaw was found in the yajl library, which exists due to a memory leak within the yajltreeparse function. This flaw allows a remote attacker to parse malicious JSON input to cause out-of-memory in the server, causing a crash, resulting in a denial of service attack...

6.5CVSS6.1AI score0.00204EPSS
Exploits1References4
Mageia
Mageia
added 2024/03/15 10:51 p.m.50 views

Updated yajl packages fix security vulnerabilities

The updated packages fix security vulnerabilities: In the yajl-ruby gem 1.3.0 for Ruby, when a crafted JSON file is supplied to Yajl::Parser.new.parse, the whole ruby process crashes with a SIGABRT in the yajlstringdecode function in yajlencode.c. This results in the whole ruby process terminatin...

7.5CVSS6.8AI score0.01684EPSS
Exploits2References3
Tenable Nessus
Tenable Nessus
added 2023/11/16 12:0 a.m.25 views

Oracle Linux 9 : yajl (ELSA-2023-6551)

The remote Oracle Linux 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2023-6551 advisory. - fix CVE-2023-33460 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note that Nessus has not tested for...

6.5CVSS6.3AI score0.00204EPSS
Exploits1References2
Tenable Nessus
Tenable Nessus
added 2023/11/07 12:0 a.m.19 views

RHEL 9 : yajl (RHSA-2023:6551)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2023:6551 advisory. Yet Another JSON Library YAJL is a small event-driven SAX-style JSON parser written in ANSI C, and a small validating JSON generator. Security Fixes:...

6.5CVSS6.5AI score0.00204EPSS
Exploits1References6
AlmaLinux
AlmaLinux
added 2023/11/07 12:0 a.m.23 views

Moderate: yajl security update

Yet Another JSON Library YAJL is a small event-driven SAX-style JSON parser written in ANSI C, and a small validating JSON generator. Security Fixes: yajl: Memory leak in yajltreeparse function CVE-2023-33460 For more details about the security issues, including the impact, a CVSS score,...

6.5CVSS7.1AI score0.00204EPSS
Exploits1References4
Veracode
Veracode
added 2023/09/13 11:16 a.m.22 views

Memory Leak

libyajl.so is vulnerable to a Memory Leak. The vulnerability is due to the yajltreeparse function in yajltree.c which allows a remote attacker to parse malicious JSON input to cause an out-of-memory error and crash...

6.5CVSS6.8AI score0.00204EPSS
Exploits1References9Affected Software1
Amazon
Amazon
added 2023/08/07 12:0 a.m.29 views

Medium: yajl

Issue Overview: There's a memory leak in yajl 2.1.0 with use of yajltreeparse function. which will cause out-of-memory in server and cause crash. CVE-2023-33460 Affected Packages: yajl Note: This advisory is applicable to Amazon Linux 2 AL2 Core repository. Visit this FAQ section for the differen...

6.5CVSS6.5AI score0.00204EPSS
Exploits1
RedhatCVE
RedhatCVE
added 2023/07/12 12:36 p.m.20 views

CVE-2023-33460

A flaw was found in the yajl library, which exists due to a memory leak within the yajltreeparse function. This flaw allows a remote attacker to parse malicious JSON input to cause out-of-memory in the server, causing a crash, resulting in a denial of service attack...

6.5CVSS6.1AI score0.00204EPSS
Exploits1References3
SUSE CVE
SUSE CVE
added 2023/07/04 2:10 a.m.0 views

SUSE CVE-2023-33460

There's a memory leak in yajl 2.1.0 with use of yajltreeparse function. which will cause out-of-memory in server and cause crash...

6.5CVSS5.7AI score0.00204EPSS
Exploits1References10
Tenable Nessus
Tenable Nessus
added 2023/07/02 12:0 a.m.24 views

Debian dla-3478 : libyajl-dev - security update

The remote Debian 10 host has packages installed that are affected by a vulnerability as referenced in the dla-3478 advisory. ------------------------------------------------------------------------- Debian LTS Advisory DLA-3478-1 [email protected] https://www.debian.org/lts/security/...

6.5CVSS6.4AI score0.00204EPSS
Exploits1References4
Veracode
Veracode
added 2023/06/18 6:39 a.m.19 views

Memory Leak

libyajl.so is vulnerable to Memory Leak. The vulnerability exists because memory is not released properly in the yajlval yajltreeparse function of yajltree.c, which allows an attacker to cause an out-of-memory error resulting in an application crash...

6.5CVSS6.7AI score0.00204EPSS
Exploits1References13Affected Software3
Microsoft CVE
Microsoft CVE
added 2023/06/13 7:0 a.m.1 views

There's a memory leak in yajl 2.1.0 with use of yajl_tree_parse function. which will cause out-of-memory in server and cause crash.

...

6.5CVSS6.2AI score0.00204EPSS
Exploits1
OSV
OSV
added 2023/06/06 12:15 p.m.2 views

AZL-27143 CVE-2023-33460 affecting package yajl for versions less than 2.1.0-19

There's a memory leak in yajl 2.1.0 with use of yajltreeparse function. which will cause out-of-memory in server and cause crash...

6.5CVSS6.2AI score0.00204EPSS
Exploits1References1
NVD
NVD
added 2023/06/06 12:15 p.m.18 views

CVE-2023-33460

There's a memory leak in yajl 2.1.0 with use of yajltreeparse function. which will cause out-of-memory in server and cause crash...

6.5CVSS6.6AI score0.00204EPSS
Exploits1References7
Rows per page
Query Builder