There's a memory leak in yajl 2.1.0 with use of yajl_tree_parse function. which will cause out-of-memory in server and cause crash.
CVSS Details
- CVSS 3.1 Base Score: 6.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade yajl-develUpgrade yajl | Nov 16, 2023 | Jun 6, 2023 |
| Alpine Linux | — | Upgrade yajl | Mar 21, 2024 | Jun 6, 2023 |
| Amazon Linux Ami 2 | — | Upgrade yajl-develUpgrade yajlUpgrade yajl-debuginfo | Aug 9, 2023 | Jun 6, 2023 |
| Amazon_linux_2023 | — | Upgrade yajl-develUpgrade yajlUpgrade yajl-debugsourceUpgrade yajl-debuginfo | Feb 17, 2025 | Jun 6, 2023 |
| Centos_linux | — | Upgrade yajlUpgrade yajl-debugsourceUpgrade yajl-debuginfo | Nov 8, 2023 | Jun 6, 2023 |
| Debian | — | Upgrade r-cran-jsonliteUpgrade yajl | Jul 10, 2023 | Jun 6, 2023 |
| Nutanix Ahv | — | Upgrade Nutanix AHV to the latest version | Jun 5, 2026 | Sep 10, 2024 |
| Oracle_linux | — | Upgrade yajl-develUpgrade yajl | Nov 16, 2023 | Jun 6, 2023 |
| Redhat_linux | — | Upgrade yajlUpgrade yajl-develUpgrade yajl-debuginfoNo solution existsUpgrade yajl-debugsource | Nov 8, 2023 | Jun 6, 2023 |
| Rocky_linux | — | Upgrade yajl-debugsourceUpgrade yajl-develUpgrade yajlUpgrade yajl-debuginfo | Mar 5, 2024 | Jun 6, 2023 |
| Suse | — | Upgrade libyajl-devel-32bitUpgrade libyajl2Upgrade libyajl2-32bitUpgrade libyajl-devel-staticUpgrade yajlUpgrade libyajl-devel | Aug 15, 2023 | Jun 6, 2023 |
| Ubuntu | — | Upgrade libyajl2Upgrade libyajl2 (Ubuntu Pro) | Jul 19, 2023 | Jun 6, 2023 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Jun 6, 2023 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub