CVE-2017-16516

In the yajl-ruby gem 1.3.0 for Ruby, when a crafted JSON file is supplied to Yajl::Parser.new.parse, the whole ruby process crashes with a SIGABRT in the…

published November 3, 2017

CVSS
—
EPSS
4%
Percentile
90.0
In the wild
Unconfirmed
What it is

In the yajl-ruby gem 1.3.0 for Ruby, when a crafted JSON file is supplied to Yajl::Parser.new.parse, the whole ruby process crashes with a SIGABRT in the yajl_string_decode function in yajl_encode.c. This results in the whole ruby process terminating and potentially a denial of service.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.03798 · 90.0th percentile
Published
2017-11-03T00:00Z
EPSS history
Timeline
  • 03 NOV 00:00Z
    In the yajl-ruby gem 1.3.0 for Ruby, when a crafted JSON file is supplied to Yajl::Parser.new.parse, the whole ruby process crashes with a SIGABRT in the…
    cvelistv5