There's a memory leak in yajl 2.1.0 with use of yajl_tree_parse function. which will cause out-of-memory in server and cause crash.
CVSS Details
- CVSS 3.1 Base Score: 6.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade yajlUpgrade yajl-devel | Nov 16, 2023 | Jun 6, 2023 |
| Alpine Linux | — | Upgrade yajl | Mar 21, 2024 | Jun 6, 2023 |
| Amazon Linux Ami 2 | — | Upgrade yajl-develUpgrade yajlUpgrade yajl-debuginfo | Aug 9, 2023 | Jun 6, 2023 |
| Amazon_linux_2023 | — | Upgrade yajl-debuginfoUpgrade yajlUpgrade yajl-debugsourceUpgrade yajl-devel | Feb 17, 2025 | Jun 6, 2023 |
| Centos_linux | — | Upgrade yajl-debugsourceUpgrade yajl-debuginfoUpgrade yajl | Nov 8, 2023 | Jun 6, 2023 |
| Debian | — | Upgrade r-cran-jsonliteUpgrade yajl | Jul 10, 2023 | Jun 6, 2023 |
| Nutanix Ahv | — | Upgrade Nutanix AHV to the latest version | Jun 5, 2026 | Sep 10, 2024 |
| Oracle_linux | — | Upgrade yajl-develUpgrade yajl | Nov 16, 2023 | Jun 6, 2023 |
| Redhat_linux | — | Upgrade yajl-debugsourceUpgrade yajlUpgrade yajl-develNo solution existsUpgrade yajl-debuginfo | Nov 8, 2023 | Jun 6, 2023 |
| Rocky_linux | — | Upgrade yajl-debugsourceUpgrade yajl-develUpgrade yajl-debuginfoUpgrade yajl | Mar 5, 2024 | Jun 6, 2023 |
| Suse | — | Upgrade yajlUpgrade libyajl-devel-staticUpgrade libyajl2-32bitUpgrade libyajl-develUpgrade libyajl-devel-32bitUpgrade libyajl2 | Aug 15, 2023 | Jun 6, 2023 |
| Ubuntu | — | Upgrade libyajl2 (Ubuntu Pro)Upgrade libyajl2 | Jul 19, 2023 | Jun 6, 2023 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Jun 6, 2023 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub