CVE-2023-33460
There's a memory leak in yajl 2.1.0 with use of yajl_tree_parse function. which will cause out-of-memory in server and cause crash.
Original description
The description as published by the source.
There's a memory leak in yajl 2.1.0 with use of yajl_tree_parse function. which will cause out-of-memory in server and cause crash.
Fix status by distribution
Fixed packages published by each distribution for this CVE
- Alpine Linux ALPINE-CVE-2023-33460 yajl Fixed in: 2.1.0-r9
- Debian DEBIAN-CVE-2023-33460 r-cran-jsonlite
- Ubuntu UBUNTU-CVE-2023-33460 yajl Fixed in: 2.0.4-4ubuntu0.1~esm1
References
- advisory github.com
- advisory lists.fedoraproject.org
- advisory lists.fedoraproject.org
- advisory lists.fedoraproject.org
- advisory nvd.nist.gov
- report github.com
- web lists.debian.org
- web lists.debian.org
- web lists.debian.org