There's a memory leak in yajl 2.1.0 with use of yajl_tree_parse function. which will cause out-of-memory in server and cause crash.
CVSS Details
- CVSS 3.1 Base Score: 6.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | alma-upgrade-yajlalma-upgrade-yajl-devel | Nov 16, 2023 | Jun 6, 2023 | |
| Alpine Linux | alpine-linux-upgrade-yajl | Mar 21, 2024 | Jun 6, 2023 | |
| Amazon Linux Ami 2 | amazon-linux-ami-2-upgrade-yajlamazon-linux-ami-2-upgrade-yajl-debuginfoamazon-linux-ami-2-upgrade-yajl-devel | Aug 9, 2023 | Jun 6, 2023 | |
| Amazon_linux_2023 | amazon-linux-2023-upgrade-yajlamazon-linux-2023-upgrade-yajl-debuginfoamazon-linux-2023-upgrade-yajl-debugsourceamazon-linux-2023-upgrade-yajl-devel | Feb 17, 2025 | Jun 6, 2023 | |
| Centos_linux | — | centos-upgrade-yajlcentos-upgrade-yajl-debuginfocentos-upgrade-yajl-debugsource | Nov 8, 2023 | Jun 6, 2023 |
| Debian | debian-upgrade-yajl | Jul 10, 2023 | Jun 6, 2023 | |
| Nutanix Ahv | nutanix-ahv-upgrade-latest | Jun 5, 2026 | Sep 10, 2024 | |
| Oracle_linux | — | oracle-linux-upgrade-yajloracle-linux-upgrade-yajl-devel | Nov 16, 2023 | Jun 6, 2023 |
| Redhat_linux | redhat-upgrade-yajlredhat-upgrade-yajl-debuginforedhat-upgrade-yajl-debugsourceredhat-upgrade-yajl-devel | Nov 8, 2023 | Jun 6, 2023 | |
| Rocky_linux | rocky-upgrade-yajlrocky-upgrade-yajl-debuginforocky-upgrade-yajl-debugsourcerocky-upgrade-yajl-devel | Mar 5, 2024 | Jun 6, 2023 | |
| Suse | — | suse-upgrade-libyajl-develsuse-upgrade-libyajl-devel-32bitsuse-upgrade-libyajl-devel-staticsuse-upgrade-libyajl2suse-upgrade-libyajl2-32bitsuse-upgrade-yajl | Aug 15, 2023 | Jun 6, 2023 |
| Ubuntu | ubuntu-pro-upgrade-libyajl2ubuntu-upgrade-libyajl2 | Jul 19, 2023 | Jun 6, 2023 | |
| Vmware Photon_os | vmware-photon_os_update_tdnf | Jan 20, 2025 | Jun 6, 2023 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub