There's a memory leak in yajl 2.1.0 with use of yajl_tree_parse function. which will cause out-of-memory in server and cause crash.
CVSS Details
- CVSS 3.1 Base Score: 6.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade yajl-develUpgrade yajl | Nov 16, 2023 | Jun 6, 2023 |
| Alpine Linux | — | Upgrade yajl | Mar 21, 2024 | Jun 6, 2023 |
| Amazon Linux Ami 2 | — | Upgrade yajl-develUpgrade yajlUpgrade yajl-debuginfo | Aug 9, 2023 | Jun 6, 2023 |
| Amazon_linux_2023 | — | Upgrade yajl-develUpgrade yajl-debuginfoUpgrade yajlUpgrade yajl-debugsource | Feb 17, 2025 | Jun 6, 2023 |
| Centos_linux | — | Upgrade yajl-debuginfoUpgrade yajl-debugsourceUpgrade yajl | Nov 8, 2023 | Jun 6, 2023 |
| Debian | — | Upgrade yajlUpgrade r-cran-jsonlite | Jul 10, 2023 | Jun 6, 2023 |
| Nutanix Ahv | — | Upgrade Nutanix AHV to the latest version | Jun 5, 2026 | Sep 10, 2024 |
| Oracle_linux | — | Upgrade yajlUpgrade yajl-devel | Nov 16, 2023 | Jun 6, 2023 |
| Redhat_linux | — | Upgrade yajlUpgrade yajl-debuginfoUpgrade yajl-develNo solution existsUpgrade yajl-debugsource | Nov 8, 2023 | Jun 6, 2023 |
| Rocky_linux | — | Upgrade yajl-debugsourceUpgrade yajl-debuginfoUpgrade yajl-develUpgrade yajl | Mar 5, 2024 | Jun 6, 2023 |
| Suse | — | Upgrade libyajl2Upgrade libyajl-devel-32bitUpgrade libyajl-develUpgrade yajlUpgrade libyajl2-32bitUpgrade libyajl-devel-static | Aug 15, 2023 | Jun 6, 2023 |
| Ubuntu | — | Upgrade libyajl2 (Ubuntu Pro)Upgrade libyajl2 | Jul 19, 2023 | Jun 6, 2023 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Jun 6, 2023 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub