{"id":"CVE-2022-24795","aliases":["ALSA-2022:7524","ALSA-2022:8252","AZL-10552","AZL-35233","CLSA-2026-1791550583","DEBIAN-CVE-2022-24795","DLA-3492-1","DLA-3516-1","EUVD-2022-1773","GHSA-jj47-x69x-mxrm","OESA-2022-1752","OESA-2022-1912","RHSA-2022:7524","RHSA-2022:8252","RHSA-2024:2063","RLSA-2022:7524","RLSA-2022:8252","SUSE-SU-2022:1746-1","SUSE-SU-2022:1918-1","SUSE-SU-2022:3162-1","UBUNTU-CVE-2022-24795","USN-6233-1","USN-6233-2","openSUSE-SU-2024:12258-1"],"status":"published","title":"Buffer Overflow and Integer Overflow in yajl-ruby","description":"yajl-ruby is a C binding to the YAJL JSON parsing and generation library. The 1.x branch and the 2.x branch of `yajl` contain an integer overflow which leads to subsequent heap memory corruption when dealing with large (~2GB) inputs. The reallocation logic at `yajl_buf.c#L64` may result in the `need` 32bit integer wrapping to 0 when `need` approaches a value of 0x80000000 (i.e. ~2GB of data), which results in a reallocation of buf-\u003ealloc into a small heap chunk. These integers are declared as `size_t` in the 2.x branch of `yajl`, which practically prevents the issue from triggering on 64bit platforms, however this does not preclude this issue triggering on 32bit builds on which `size_t` is a 32bit integer. Subsequent population of this under-allocated heap chunk is based on the original buffer size, leading to heap memory corruption. This vulnerability mostly impacts process availability. Maintainers believe exploitation for arbitrary code execution is unlikely. A patch is available and anticipated to be part of yajl-ruby version 1.4.2. As a workaround, avoid passing large inputs to YAJL.","severity":{"version":"3.1","score":5.9,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"medium","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-11","score":0.03444,"percentile":0.89154,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-122","CWE-190"],"published":"2022-04-05T00:00:00Z","modified":"2026-11-03T08:02:16Z","fixes":[{"ecosystem":"RubyGems","package":"yajl-ruby","fixed_in":["1.4.3"],"sources":["ghsa","osv"]},{"ecosystem":"AlmaLinux:8","package":"yajl","fixed_in":["2.1.0-11.el8"],"sources":["osv"]},{"ecosystem":"AlmaLinux:8","package":"yajl-devel","fixed_in":["2.1.0-11.el8"],"sources":["osv"]},{"ecosystem":"AlmaLinux:9","package":"yajl","fixed_in":["2.1.0-21.el9"],"sources":["osv"]},{"ecosystem":"AlmaLinux:9","package":"yajl-devel","fixed_in":["2.1.0-21.el9"],"sources":["osv"]},{"ecosystem":"Azure Linux:2","package":"rubygem-yajl-ruby","fixed_in":["1.3.1-2"],"sources":["osv"]},{"ecosystem":"Azure Linux:3","package":"rubygem-yajl-ruby","fixed_in":["1.4.3-1"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:18.04","package":"libyajl-dev","fixed_in":["2.1.0-2build1+tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:18.04","package":"libyajl-doc","fixed_in":["2.1.0-2build1+tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:18.04","package":"libyajl2","fixed_in":["2.1.0-2build1+tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:18.04","package":"yajl-tools","fixed_in":["2.1.0-2build1+tuxcare.els1"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"burp","fixed_in":["3.1.4-2"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"r-cran-jsonlite","fixed_in":["1.8.8+dfsg-1"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"r-cran-jsonlite","fixed_in":["1.8.8+dfsg-1"],"sources":["osv"]},{"ecosystem":"Debian:12","package":"ruby-yajl","fixed_in":["1.4.3-1"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"ruby-yajl","fixed_in":["1.4.3-1"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"ruby-yajl","fixed_in":["1.4.3-1"],"sources":["osv"]},{"ecosystem":"Debian:12","package":"yajl","fixed_in":["2.1.0-3+deb12u2"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"yajl","fixed_in":["2.1.0-4"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"yajl","fixed_in":["2.1.0-4"],"sources":["osv"]},{"ecosystem":"openEuler:20.03-LTS-SP1","package":"rubygem-yajl-ruby","fixed_in":["1.4.3-1.oe1"],"sources":["osv"]},{"ecosystem":"openEuler:20.03-LTS-SP3","package":"rubygem-yajl-ruby","fixed_in":["1.4.3-1.oe1"],"sources":["osv"]},{"ecosystem":"openEuler:22.03-LTS","package":"rubygem-yajl-ruby","fixed_in":["1.4.3-1.oe2203"],"sources":["osv"]},{"ecosystem":"openEuler:20.03-LTS-SP1","package":"yajl","fixed_in":["2.1.0-16.oe1"],"sources":["osv"]},{"ecosystem":"openEuler:20.03-LTS-SP3","package":"yajl","fixed_in":["2.1.0-16.oe1"],"sources":["osv"]},{"ecosystem":"openEuler:22.03-LTS","package":"yajl","fixed_in":["2.1.0-18.oe2203"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"yajl","fixed_in":["0:2.1.0-11.el8"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"yajl-debuginfo","fixed_in":["0:2.1.0-11.el8"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"yajl-debugsource","fixed_in":["0:2.1.0-11.el8"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::crb","package":"yajl-debuginfo","fixed_in":["0:2.1.0-11.el8"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::crb","package":"yajl-debugsource","fixed_in":["0:2.1.0-11.el8"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::crb","package":"yajl-devel","fixed_in":["0:2.1.0-11.el8"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"yajl","fixed_in":["0:2.1.0-21.el9"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"yajl-debuginfo","fixed_in":["0:2.1.0-21.el9"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"yajl-debugsource","fixed_in":["0:2.1.0-21.el9"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::crb","package":"yajl-debuginfo","fixed_in":["0:2.1.0-21.el9"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::crb","package":"yajl-debugsource","fixed_in":["0:2.1.0-21.el9"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::crb","package":"yajl-devel","fixed_in":["0:2.1.0-21.el9"],"sources":["osv"]},{"ecosystem":"Rocky Linux:8","package":"yajl","fixed_in":["0:2.1.0-11.el8"],"sources":["osv"]},{"ecosystem":"Rocky Linux:9","package":"yajl","fixed_in":["0:2.1.0-21.el9","0:2.1.0-21.el9_0"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP5","package":"libyajl","fixed_in":["2.0.1-18.7.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 12 SP5","package":"libyajl","fixed_in":["2.0.1-18.7.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP5","package":"libyajl","fixed_in":["2.0.1-18.7.1"],"sources":["osv"]},{"ecosystem":"SUSE:OpenStack Cloud Crowbar 8","package":"rubygem-yajl-ruby","fixed_in":["1.3.1-4.6.1"],"sources":["osv"]},{"ecosystem":"SUSE:OpenStack Cloud Crowbar 9","package":"rubygem-yajl-ruby","fixed_in":["1.3.1-4.6.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP3","package":"libyajl","fixed_in":["2.1.0-150000.4.3.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP4","package":"libyajl","fixed_in":["2.1.0-150000.4.3.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Micro 5.1","package":"libyajl","fixed_in":["2.1.0-150000.4.3.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Micro 5.2","package":"libyajl","fixed_in":["2.1.0-150000.4.3.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Leap Micro 5.2","package":"libyajl","fixed_in":["2.1.0-150000.4.3.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Leap 15.3","package":"libyajl","fixed_in":["2.1.0-150000.4.3.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Leap 15.4","package":"libyajl","fixed_in":["2.1.0-150000.4.3.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:14.04:LTS","package":"yajl","fixed_in":["2.0.4-4ubuntu0.1~esm1"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:16.04:LTS","package":"yajl","fixed_in":["2.1.0-2ubuntu0.16.04.1~esm1"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:18.04:LTS","package":"yajl","fixed_in":["2.1.0-2ubuntu0.18.04.1~esm1"],"sources":["osv"]},{"ecosystem":"Ubuntu:20.04:LTS","package":"yajl","fixed_in":["2.1.0-3ubuntu0.20.04.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:22.04:LTS","package":"yajl","fixed_in":["2.1.0-3ubuntu0.22.04.1"],"sources":["osv"]}],"affected":[{"source":"ghsa","ecosystem":"RubyGems","package":"yajl-ruby","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"last_affected":"1.4.2"},{"fixed":"1.4.3"}]}]},{"source":"osv","ecosystem":"AlmaLinux:8","package":"yajl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.1.0-11.el8"}]}]},{"source":"osv","ecosystem":"AlmaLinux:8","package":"yajl-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.1.0-11.el8"}]}]},{"source":"osv","ecosystem":"AlmaLinux:9","package":"yajl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.1.0-21.el9"}]}]},{"source":"osv","ecosystem":"AlmaLinux:9","package":"yajl-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.1.0-21.el9"}]}]},{"source":"osv","ecosystem":"Azure Linux:2","package":"rubygem-yajl-ruby","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.3.1-2"}]}]},{"source":"osv","ecosystem":"Azure Linux:3","package":"rubygem-yajl-ruby","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.4.3-1"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:18.04","package":"libyajl-dev","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.1.0-2build1+tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:18.04","package":"libyajl-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.1.0-2build1+tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:18.04","package":"libyajl2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.1.0-2build1+tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:18.04","package":"yajl-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.1.0-2build1+tuxcare.els1"}]}]},{"source":"osv","ecosystem":"Debian:12","package":"burp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["3.1.4-1","3.1.4-3","3.1.4-3.1","3.1.4-4","3.1.4-5"]},{"source":"osv","ecosystem":"Debian:13","package":"burp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.1.4-2"}]}]},{"source":"osv","ecosystem":"Debian:12","package":"r-cran-jsonlite","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1.8.4+dfsg-1","1.8.5+dfsg-1","1.8.7+dfsg-1","1.8.8+dfsg-1","1.8.9+dfsg-1","1.9.1+dfsg-1","2.0.0+dfsg-1","2.0.0+dfsg-2"]},{"source":"osv","ecosystem":"Debian:13","package":"r-cran-jsonlite","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.8+dfsg-1"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"r-cran-jsonlite","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.8+dfsg-1"}]}]},{"source":"osv","ecosystem":"Debian:12","package":"ruby-yajl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.4.3-1"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"ruby-yajl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.4.3-1"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"ruby-yajl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.4.3-1"}]}]},{"source":"osv","ecosystem":"Debian:12","package":"yajl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.1.0-3+deb12u2"}]}],"versions":["2.1.0-3","2.1.0-3+deb12u1"]},{"source":"osv","ecosystem":"Debian:13","package":"yajl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.1.0-4"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"yajl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.1.0-4"}]}]},{"source":"osv","ecosystem":"Debian:10","package":"yajl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.1.0-3+deb10u2"}]}],"versions":["2.1.0-3","2.1.0-3+deb10u1"],"bundled":3},{"source":"osv","ecosystem":"Debian:10","package":"burp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.1.32-2+deb10u1"}]}],"versions":["2.1.32-2"],"bundled":2},{"source":"osv","ecosystem":"RubyGems","package":"yajl-ruby","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.4.3"}]}],"versions":["0.5.10","0.5.11","0.5.12","0.5.5","0.5.6","0.5.7","0.5.8","0.5.9","0.6.0","0.6.1","0.6.2","0.6.3","0.6.4","0.6.5","0.6.6","0.6.7","0.6.8","0.6.9","0.7.0","0.7.1","0.7.2","0.7.3","0.7.4","0.7.5","0.7.6","0.7.7","0.7.8","0.7.9","0.8.0","0.8.1","0.8.2","0.8.3","1.0.0","1.1.0","1.2.0","1.2.1","1.2.2","1.2.3","1.3.0","1.3.1","1.4.0","1.4.1","1.4.2"]},{"source":"osv","ecosystem":"openEuler:20.03-LTS-SP1","package":"rubygem-yajl-ruby","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.4.3-1.oe1"}]}]},{"source":"osv","ecosystem":"openEuler:20.03-LTS-SP3","package":"rubygem-yajl-ruby","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.4.3-1.oe1"}]}]},{"source":"osv","ecosystem":"openEuler:22.03-LTS","package":"rubygem-yajl-ruby","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.4.3-1.oe2203"}]}]},{"source":"osv","ecosystem":"openEuler:20.03-LTS-SP1","package":"yajl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.1.0-16.oe1"}]}]},{"source":"osv","ecosystem":"openEuler:20.03-LTS-SP3","package":"yajl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.1.0-16.oe1"}]}]},{"source":"osv","ecosystem":"openEuler:22.03-LTS","package":"yajl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.1.0-18.oe2203"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"yajl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.1.0-11.el8"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"yajl-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.1.0-11.el8"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"yajl-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.1.0-11.el8"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"yajl-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.1.0-11.el8"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"yajl-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.1.0-11.el8"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"yajl-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.1.0-11.el8"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"yajl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.1.0-21.el9"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"yajl-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.1.0-21.el9"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"yajl-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.1.0-21.el9"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"yajl-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.1.0-21.el9"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"yajl-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.1.0-21.el9"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"yajl-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.1.0-21.el9"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.6::appstream","package":"yajl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.1.0-13.el8_6"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.6::appstream","package":"yajl-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.1.0-13.el8_6"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.6::appstream","package":"yajl-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.1.0-13.el8_6"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.6::crb","package":"yajl-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.1.0-13.el8_6"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.6::crb","package":"yajl-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.1.0-13.el8_6"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.6::crb","package":"yajl-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.1.0-13.el8_6"}]}],"bundled":2},{"source":"osv","ecosystem":"Rocky Linux:8","package":"yajl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.1.0-11.el8"}]}]},{"source":"osv","ecosystem":"Rocky Linux:9","package":"yajl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.1.0-21.el9"}]}]},{"source":"osv","ecosystem":"Rocky Linux:9","package":"yajl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.1.0-21.el9_0"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP5","package":"libyajl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.0.1-18.7.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP5","package":"libyajl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.0.1-18.7.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP5","package":"libyajl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.0.1-18.7.1"}]}]},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud Crowbar 8","package":"rubygem-yajl-ruby","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.3.1-4.6.1"}]}]},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud Crowbar 9","package":"rubygem-yajl-ruby","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.3.1-4.6.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP3","package":"libyajl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.1.0-150000.4.3.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP4","package":"libyajl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.1.0-150000.4.3.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.1","package":"libyajl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.1.0-150000.4.3.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.2","package":"libyajl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.1.0-150000.4.3.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Leap Micro 5.2","package":"libyajl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.1.0-150000.4.3.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Leap 15.3","package":"libyajl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.1.0-150000.4.3.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Leap 15.4","package":"libyajl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.1.0-150000.4.3.1"}]}]},{"source":"osv","ecosystem":"Ubuntu:Pro:14.04:LTS","package":"yajl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.0.4-4ubuntu0.1~esm1"}]}],"versions":["2.0.4-4"]},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"yajl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.1.0-2ubuntu0.16.04.1~esm1"}]}],"versions":["2.1.0-2"]},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"argyll","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1.7.0+repack-4","1.8.2+repack-1","1.8.3+repack-1","1.8.3+repack-2"]},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"burp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1.3.48-4.1","1.3.48-4.1build1"]},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"collada2gltf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["20140924-3"]},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"icinga2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2.3.8-1build1","2.3.11-1","2.4.0-1","2.4.1-1","2.4.1-2","2.4.1-2ubuntu1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"libbson","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1.3.1-1","1.3.1-1ubuntu0.1~esm1"]},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"lnav","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["0.7.0-3build1"]},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"php-mongodb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1.1.2-2~ubuntu1","1.1.5-1~build1"]},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"r-cran-jsonlite","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["0.9.19-1"]},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"ruby-yajl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1.2.0-3build1","1.2.0-3build2","1.2.0-3build3","1.2.0-3build4"]},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"tulip","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["4.7.0dfsg-1ubuntu1","4.7.0dfsg-1ubuntu2","4.7.0dfsg-2ubuntu1","4.7.0dfsg-2ubuntu2","4.8.0dfsg-1","4.8.0dfsg-1build1","4.8.0dfsg-2","4.8.0dfsg-2build1","4.8.0dfsg-2build2"]},{"source":"osv","ecosystem":"Ubuntu:Pro:18.04:LTS","package":"yajl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.1.0-2ubuntu0.18.04.1~esm1"}]}],"versions":["2.1.0-2","2.1.0-2build1"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"argyll","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1.9.2+repack-1","1.9.2+repack-2","2.0.0+repack-1build1"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"burp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2.0.54-1","2.0.54-4build1"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"collada2gltf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["20140924-4"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"icinga2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2.7.0-1","2.8.1-0ubuntu2"]},{"source":"osv","ecosystem":"Ubuntu:Pro:18.04:LTS","package":"libbson","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1.8.0-1","1.8.1-1","1.9.0-1","1.9.2-1","1.9.2-1ubuntu0.1~esm2"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"lnav","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["0.8.2-3"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"php-mongodb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1.2.3-1build1","1.3.4-1build1"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"r-cran-jsonlite","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1.2-1build1","1.5-2"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"ruby-yajl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1.2.0-3build4","1.2.0-3.1","1.3.1-1","1.3.1-1build1"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"yajl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.1.0-3ubuntu0.20.04.1"}]}],"versions":["2.1.0-3"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"argyll","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2.0.1+repack-1"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"burp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2.2.18-2"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"icinga2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2.10.5-1build1","2.11.2-1","2.11.2-1ubuntu1","2.11.2-1ubuntu2","2.11.2-1ubuntu3"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"lnav","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["0.8.4-5build1","0.8.5-2","0.8.5-2build1"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"php-mongodb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1.5.5-1build1","1.6.1-4","1.6.1-4build1"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"r-cran-jsonlite","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1.6+dfsg-1","1.6.1+dfsg-1"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"ruby-yajl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1.3.1-1build1","1.3.1-1build2"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"argyll","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2.0.1+repack-2","2.2.0+repack-1","2.2.0+repack-1build1"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"burp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2.2.18-8ubuntu2","2.4.0-3ubuntu1"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"collada2gltf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["20140924-7build1","20140924-8"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"icinga2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2.12.3-1","2.13.1-1","2.13.2-1","2.13.2-1build1","2.13.2-1build2"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"lnav","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["0.9.0-1","0.9.0-2ubuntu1"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"php-mongodb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1.9.0+1.7.5-2build2","1.11.1+1.9.2+1.7.5-4","1.12.0+1.9.2+1.7.5-3","1.12.0+1.9.2+1.7.5-4"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"r-cran-jsonlite","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1.7.2+dfsg-1","1.7.3+dfsg-1"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"ruby-yajl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1.4.1-1","1.4.1-1build1","1.4.1-1build2"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"tulip","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.4.0+dfsg-3","5.4.0+dfsg-3build1","5.4.0+dfsg-3build2"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"yajl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.1.0-3ubuntu0.22.04.1"}]}],"versions":["2.1.0-3","2.1.0-3build1","2.1.0-3build2"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"argyll","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2.3.1+repack-1ubuntu2","3.1.0+repack-1","3.1.0+repack-1build2","3.1.0+repack-1build3","3.1.0+repack-1build4"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"burp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["3.1.4-1","3.1.4-3","3.1.4-3ubuntu1","3.1.4-3.1","3.1.4-3.1build1","3.1.4-3.1build2","3.1.4-3.1build3"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"icinga2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2.13.8-1","2.14.1-1","2.14.2-1","2.14.2-1build1","2.14.2-1build2"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"lnav","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["0.11.2-1","0.11.2-1build2","0.11.2-1build3"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"php-mongodb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1.15.0+1.11.1+1.9.2+1.7.5-1build1","1.15.0+1.11.1+1.9.2+1.7.5-1ubuntu1","1.15.0+1.11.1+1.9.2+1.7.5-1ubuntu2","1.15.0+1.11.1+1.9.2+1.7.5-1ubuntu3"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"r-cran-jsonlite","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1.8.5+dfsg-1","1.8.7+dfsg-1","1.8.8+dfsg-1"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"ruby-yajl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1.4.3-1build2","1.4.3-1build3","1.4.3-1build4"]},{"source":"osv","ecosystem":"Ubuntu:25.10","package":"argyll","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["3.1.0+repack-1.1","3.3.0+repack-1"]},{"source":"osv","ecosystem":"Ubuntu:25.10","package":"burp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["3.1.4-4"]},{"source":"osv","ecosystem":"Ubuntu:25.10","package":"icinga2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2.14.5-1","2.14.6-1","2.15.0-1"]},{"source":"osv","ecosystem":"Ubuntu:25.10","package":"lnav","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["0.12.3-2","0.12.4-1"]},{"source":"osv","ecosystem":"Ubuntu:25.10","package":"php-mongodb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1.21.0-1","2.0.0-1","2.1.0-1"]},{"source":"osv","ecosystem":"Ubuntu:25.10","package":"r-cran-jsonlite","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1.9.1+dfsg-1"]},{"source":"osv","ecosystem":"Ubuntu:25.10","package":"ruby-yajl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1.4.3-1build5"]},{"source":"osv","ecosystem":"Ubuntu:25.10","package":"tulip","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["6.0.1+dfsg-2"]},{"source":"osv","ecosystem":"Ubuntu:26.10","package":"argyll","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["3.3.0+repack-1.1","3.5.0+repack-1","3.5.0+repack-1build1"]},{"source":"osv","ecosystem":"Ubuntu:26.10","package":"icinga2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2.15.1-1","2.16.1-1","2.16.3-1","2.16.4-1build1","2.16.5-1"]},{"source":"osv","ecosystem":"Ubuntu:26.10","package":"lnav","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["0.13.2-1"]},{"source":"osv","ecosystem":"Ubuntu:26.10","package":"php-mongodb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2.1.7-0ubuntu1","2.1.7-0ubuntu2"]},{"source":"osv","ecosystem":"Ubuntu:26.10","package":"r-cran-jsonlite","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2.0.0+dfsg-2"]},{"source":"osv","ecosystem":"Ubuntu:26.10","package":"ruby-yajl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1.4.3-1build5","1.4.3-2"]},{"source":"osv","ecosystem":"Ubuntu:26.10","package":"tulip","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["6.0.1+dfsg-2ubuntu1","6.0.1+dfsg-2ubuntu2","6.0.1+dfsg-3.1"]},{"source":"osv","ecosystem":"Ubuntu:26.04:LTS","package":"argyll","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["3.3.0+repack-1","3.3.0+repack-1.1"]},{"source":"osv","ecosystem":"Ubuntu:26.04:LTS","package":"burp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["3.1.4-4","3.1.4-5"]},{"source":"osv","ecosystem":"Ubuntu:26.04:LTS","package":"icinga2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2.15.0-1","2.15.1-1"]},{"source":"osv","ecosystem":"Ubuntu:26.04:LTS","package":"lnav","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["0.12.4-1","0.12.4-2","0.13.2-1"]},{"source":"osv","ecosystem":"Ubuntu:26.04:LTS","package":"php-mongodb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2.1.0-1","2.1.7-0ubuntu1"]},{"source":"osv","ecosystem":"Ubuntu:26.04:LTS","package":"r-cran-jsonlite","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1.9.1+dfsg-1","2.0.0+dfsg-2"]},{"source":"osv","ecosystem":"Ubuntu:26.04:LTS","package":"ruby-yajl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1.4.3-1build5"]},{"source":"osv","ecosystem":"Ubuntu:26.04:LTS","package":"tulip","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["6.0.1+dfsg-2","6.0.1+dfsg-2ubuntu1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:14.04:LTS","package":"yajl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.0.4-4ubuntu0.1~esm1"}]}],"versions":["2.0.4-4"],"bundled":3},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"yajl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.1.0-2ubuntu0.16.04.1~esm1"}]}],"versions":["2.1.0-2"],"bundled":3},{"source":"osv","ecosystem":"Ubuntu:Pro:18.04:LTS","package":"yajl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.1.0-2ubuntu0.18.04.1~esm1"}]}],"versions":["2.1.0-2","2.1.0-2build1"],"bundled":3},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"yajl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.1.0-3ubuntu0.20.04.1"}]}],"versions":["2.1.0-3"],"bundled":3},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"yajl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.1.0-3ubuntu0.22.04.1"}]}],"versions":["2.1.0-3","2.1.0-3build1","2.1.0-3build2"],"bundled":3}],"products":[{"vendor":"brianmario","product":"yajl-ruby"},{"vendor":"yajl-ruby_project","product":"yajl-ruby"}],"references":[{"url":"https://github.com/brianmario/yajl-ruby/security/advisories/GHSA-jj47-x69x-mxrm","tags":["x_transferred","Exploit","Third Party Advisory","advisory","web","report"]},{"url":"https://github.com/brianmario/yajl-ruby/commit/7168bd79b888900aa94523301126f968a93eb3a6","tags":["x_transferred","Patch","Third Party Advisory","fix","web"]},{"url":"https://github.com/brianmario/yajl-ruby/blob/7168bd79b888900aa94523301126f968a93eb3a6/ext/yajl/yajl_buf.c#L64","tags":["x_transferred","Exploit","Third Party Advisory","web"]},{"url":"https://lists.debian.org/debian-lts-announce/2023/07/msg00013.html","tags":["mailing-list","x_transferred","article","web"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/KLE3C4CECEJ4EUYI56KXI6OWACWXX7WN/","tags":["vendor-advisory","x_transferred","advisory"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/YO32YDJ74DADC7CMJNLSLBVWN5EXGF5J/","tags":["vendor-advisory","x_transferred","advisory"]},{"url":"https://lists.debian.org/debian-lts-announce/2023/08/msg00003.html","tags":["mailing-list","x_transferred","article","web"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-24795","tags":["web","advisory"]},{"url":"https://github.com/rubysec/ruby-advisory-db/blob/master/gems/yajl-ruby/CVE-2022-24795.yml","tags":["web"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/KLE3C4CECEJ4EUYI56KXI6OWACWXX7WN/"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/YO32YDJ74DADC7CMJNLSLBVWN5EXGF5J/"},{"url":"https://github.com/advisories/GHSA-jj47-x69x-mxrm"},{"url":"https://access.redhat.com/errata/RHSA-2022:7524","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2022-24795","tags":["report"]},{"url":"https://bugzilla.redhat.com/2072912","tags":["report"]},{"url":"https://errata.almalinux.org/8/ALSA-2022-7524.html","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2022:8252","tags":["advisory"]},{"url":"https://errata.almalinux.org/9/ALSA-2022-8252.html","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/ubuntu18.04els/CLSA-2026-1791550583.html","tags":["advisory"]},{"url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/24xxx/CVE-2022-24795.json","tags":["advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2022-24795","tags":["advisory"]},{"url":"https://github.com/brianmario/yajl-ruby","tags":["package"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/KLE3C4CECEJ4EUYI56KXI6OWACWXX7WN","tags":["web"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/YO32YDJ74DADC7CMJNLSLBVWN5EXGF5J","tags":["web"]},{"url":"https://www.openeuler.org/en/security/safety-bulletin/detail.html?id=openEuler-SA-2022-1752","tags":["advisory"]},{"url":"https://www.openeuler.org/en/security/safety-bulletin/detail.html?id=openEuler-SA-2022-1912","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#moderate","tags":["article"]},{"url":"https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/8/html/8.7_release_notes/index","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2072912","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2022/rhsa-2022_7524.json","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-24795","tags":["advisory","report"]},{"url":"https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/9/html/9.1_release_notes/index","tags":["article"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2022/rhsa-2022_8252.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2024:2063","tags":["advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2221249","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_2063.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2023-33460","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-33460","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-33460","tags":["advisory"]},{"url":"https://errata.rockylinux.org/RLSA-2022:7524","tags":["advisory"]},{"url":"https://errata.rockylinux.org/RLSA-2022:8252","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2022/suse-su-20221746-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1198405","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2022-24795","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2022/suse-su-20221918-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2022/suse-su-20223162-1/","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2022-24795","tags":["report"]},{"url":"https://github.com/brianmario/yajl-ruby/pull/211","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-6233-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/notices/USN-6233-2","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2017-16516","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2023-33460","tags":["report"]},{"url":"","tags":["advisory"]}],"sources":{"cve":[{"id":"CVE-2022-24795","title":"Buffer Overflow and Integer Overflow in yajl-ruby","description":"yajl-ruby is a C binding to the YAJL JSON parsing and generation library. The 1.x branch and the 2.x branch of `yajl` contain an integer overflow which leads to subsequent heap memory corruption when dealing with large (~2GB) inputs. The reallocation logic at `yajl_buf.c#L64` may result in the `need` 32bit integer wrapping to 0 when `need` approaches a value of 0x80000000 (i.e. ~2GB of data), which results in a reallocation of buf-\u003ealloc into a small heap chunk. These integers are declared as `size_t` in the 2.x branch of `yajl`, which practically prevents the issue from triggering on 64bit platforms, however this does not preclude this issue triggering on 32bit builds on which `size_t` is a 32bit integer. Subsequent population of this under-allocated heap chunk is based on the original buffer size, leading to heap memory corruption. This vulnerability mostly impacts process availability. Maintainers believe exploitation for arbitrary code execution is unlikely. A patch is available and anticipated to be part of yajl-ruby version 1.4.2. As a workaround, avoid passing large inputs to YAJL.","status":"published","published":"2022-04-05T00:00:00Z","modified":"2025-04-22T18:17:37.564Z","cvss":[{"version":"3.1","score":5.9,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"medium","assessor":"cna"}],"cwes":["CWE-122","CWE-190"],"updated_at":"2026-11-02T14:34:34.576287Z"}],"euvd":[{"id":"EUVD-2022-1773","description":"yajl-ruby is a C binding to the YAJL JSON parsing and generation library. The 1.x branch and the 2.x branch of `yajl` contain an integer overflow which leads to subsequent heap memory corruption when dealing with large (~2GB) inputs. The reallocation logic at `yajl_buf.c#L64` may result in the `need` 32bit integer wrapping to 0 when `need` approaches a value of 0x80000000 (i.e. ~2GB of data), which results in a reallocation of buf-\u003ealloc into a small heap chunk. These integers are declared as `size_t` in the 2.x branch of `yajl`, which practically prevents the issue from triggering on 64bit platforms, however this does not preclude this issue triggering on 32bit builds on which `size_t` is a 32bit integer. Subsequent population of this under-allocated heap chunk is based on the original buffer size, leading to heap memory corruption. This vulnerability mostly impacts process availability. Maintainers believe exploitation for arbitrary code execution is unlikely. A patch is available and anticipated to be part of yajl-ruby version 1.4.2. As a workaround, avoid passing large inputs to YAJL.","status":"published","published":"2022-04-05T00:00:00Z","modified":"2025-04-22T18:17:37Z","cvss":[{"version":"3.1","score":5.9,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T20:52:15.026784Z"}],"ghsa":[{"id":"GHSA-jj47-x69x-mxrm","title":"Buffer Overflow in yajl-ruby","description":"_NOTE: A previous patch, 1.4.2, fixed the heap memory issue, but could still lead to a DoS infinite loop. Please update to version 1.4.3_\n\nThe 1.x branch and the 2.x branch of [yajl](https://github.com/lloyd/yajl) contain an integer overflow which leads to subsequent heap memory corruption when dealing with large (~2GB) inputs.\n\n### Details\n\nThe [reallocation logic at yajl_buf.c#L64](https://github.com/brianmario/yajl-ruby/blob/7168bd79b888900aa94523301126f968a93eb3a6/ext/yajl/yajl_buf.c#L64) may result in the `need` 32bit integer wrapping to 0 when `need` approaches a value of 0x80000000 (i.e. ~2GB of data), which results in a reallocation of buf-\u003ealloc into a small heap chunk.\n\nThese integers are declared as `size_t` in the 2.x branch of `yajl`, which practically prevents the issue from triggering on 64bit platforms, however this does not preclude this issue triggering on 32bit builds on which `size_t` is a 32bit integer.\n\nSubsequent population of this under-allocated heap chunk is based on the original buffer size, leading to heap memory corruption.\n\n### Impact\n\nWe rate this as a moderate severity vulnerability which mostly impacts process availability as we believe exploitation for arbitrary code execution to be unlikely.\n\n### Patches\n\nPatched in yajl-ruby 1.4.3\n\n### Workarounds\n\nAvoid passing large inputs to YAJL\n\n### References\nhttps://github.com/brianmario/yajl-ruby/blob/7168bd79b888900aa94523301126f968a93eb3a6/ext/yajl/yajl_buf.c#L64\n\n### For more information\nIf you have any questions or comments about this advisory:\n* Open an issue in [yajl-ruby](https://github.com/brianmario/yajl-ruby/issues)\n","status":"published","published":"2022-04-05T15:55:51Z","modified":"2023-08-08T18:34:55Z","cvss":[{"version":"3.1","score":5.9,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"medium"}],"cwes":["CWE-122","CWE-190"],"updated_at":"2026-11-02T14:36:59.456342Z"}],"nvd":[{"id":"CVE-2022-24795","description":"yajl-ruby is a C binding to the YAJL JSON parsing and generation library. The 1.x branch and the 2.x branch of `yajl` contain an integer overflow which leads to subsequent heap memory corruption when dealing with large (~2GB) inputs. The reallocation logic at `yajl_buf.c#L64` may result in the `need` 32bit integer wrapping to 0 when `need` approaches a value of 0x80000000 (i.e. ~2GB of data), which results in a reallocation of buf-\u003ealloc into a small heap chunk. These integers are declared as `size_t` in the 2.x branch of `yajl`, which practically prevents the issue from triggering on 64bit platforms, however this does not preclude this issue triggering on 32bit builds on which `size_t` is a 32bit integer. Subsequent population of this under-allocated heap chunk is based on the original buffer size, leading to heap memory corruption. This vulnerability mostly impacts process availability. Maintainers believe exploitation for arbitrary code execution is unlikely. A patch is available and anticipated to be part of yajl-ruby version 1.4.2. As a workaround, avoid passing large inputs to YAJL.","status":"published","published":"2022-04-05T16:15:14.05Z","modified":"2026-06-17T04:32:32.17Z","cvss":[{"version":"3.1","score":5.9,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"medium","assessor":"secondary"},{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high","assessor":"primary"},{"version":"2.0","score":5,"vector":"AV:N/AC:L/Au:N/C:P/I:N/A:N","level":"medium","assessor":"primary"}],"cwes":["CWE-122","CWE-190"],"updated_at":"2026-11-02T14:07:14.706146Z"}],"osv":[{"id":"AZL-10552","title":"CVE-2022-24795 affecting package rubygem-yajl-ruby for versions less than 1.3.1-2","description":"yajl-ruby is a C binding to the YAJL JSON parsing and generation library. The 1.x branch and the 2.x branch of `yajl` contain an integer overflow which leads to subsequent heap memory corruption when dealing with large (~2GB) inputs. The reallocation logic at `yajl_buf.c#L64` may result in the `need` 32bit integer wrapping to 0 when `need` approaches a value of 0x80000000 (i.e. ~2GB of data), which results in a reallocation of buf-\u003ealloc into a small heap chunk. These integers are declared as `size_t` in the 2.x branch of `yajl`, which practically prevents the issue from triggering on 64bit platforms, however this does not preclude this issue triggering on 32bit builds on which `size_t` is a 32bit integer. Subsequent population of this under-allocated heap chunk is based on the original buffer size, leading to heap memory corruption. This vulnerability mostly impacts process availability. Maintainers believe exploitation for arbitrary code execution is unlikely. A patch is available and anticipated to be part of yajl-ruby version 1.4.2. As a workaround, avoid passing large inputs to YAJL.","status":"published","published":"2022-04-05T16:15:14Z","modified":"2026-04-21T04:21:08.827512Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:28:01.09948Z"},{"id":"AZL-35233","title":"CVE-2022-24795 affecting package rubygem-yajl-ruby for versions less than 1.4.3-1","description":"yajl-ruby is a C binding to the YAJL JSON parsing and generation library. The 1.x branch and the 2.x branch of `yajl` contain an integer overflow which leads to subsequent heap memory corruption when dealing with large (~2GB) inputs. The reallocation logic at `yajl_buf.c#L64` may result in the `need` 32bit integer wrapping to 0 when `need` approaches a value of 0x80000000 (i.e. ~2GB of data), which results in a reallocation of buf-\u003ealloc into a small heap chunk. These integers are declared as `size_t` in the 2.x branch of `yajl`, which practically prevents the issue from triggering on 64bit platforms, however this does not preclude this issue triggering on 32bit builds on which `size_t` is a 32bit integer. Subsequent population of this under-allocated heap chunk is based on the original buffer size, leading to heap memory corruption. This vulnerability mostly impacts process availability. Maintainers believe exploitation for arbitrary code execution is unlikely. A patch is available and anticipated to be part of yajl-ruby version 1.4.2. As a workaround, avoid passing large inputs to YAJL.","status":"published","published":"2022-04-05T16:15:14Z","modified":"2026-04-21T04:50:27.785757Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:28:04.173658Z"},{"id":"CVE-2022-24795","title":"Buffer Overflow and Integer Overflow in yajl-ruby","description":"yajl-ruby is a C binding to the YAJL JSON parsing and generation library. The 1.x branch and the 2.x branch of `yajl` contain an integer overflow which leads to subsequent heap memory corruption when dealing with large (~2GB) inputs. The reallocation logic at `yajl_buf.c#L64` may result in the `need` 32bit integer wrapping to 0 when `need` approaches a value of 0x80000000 (i.e. ~2GB of data), which results in a reallocation of buf-\u003ealloc into a small heap chunk. These integers are declared as `size_t` in the 2.x branch of `yajl`, which practically prevents the issue from triggering on 64bit platforms, however this does not preclude this issue triggering on 32bit builds on which `size_t` is a 32bit integer. Subsequent population of this under-allocated heap chunk is based on the original buffer size, leading to heap memory corruption. This vulnerability mostly impacts process availability. Maintainers believe exploitation for arbitrary code execution is unlikely. A patch is available and anticipated to be part of yajl-ruby version 1.4.2. As a workaround, avoid passing large inputs to YAJL.","status":"published","published":"2022-04-05T00:00:00Z","modified":"2026-10-28T02:31:13.546596509Z","cvss":[{"version":"3.1","score":5.9,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"medium"}],"cwes":["CWE-122","CWE-190"],"updated_at":"2026-11-02T15:44:24.428403Z"},{"id":"DEBIAN-CVE-2022-24795","description":"yajl-ruby is a C binding to the YAJL JSON parsing and generation library. The 1.x branch and the 2.x branch of `yajl` contain an integer overflow which leads to subsequent heap memory corruption when dealing with large (~2GB) inputs. The reallocation logic at `yajl_buf.c#L64` may result in the `need` 32bit integer wrapping to 0 when `need` approaches a value of 0x80000000 (i.e. ~2GB of data), which results in a reallocation of buf-\u003ealloc into a small heap chunk. These integers are declared as `size_t` in the 2.x branch of `yajl`, which practically prevents the issue from triggering on 64bit platforms, however this does not preclude this issue triggering on 32bit builds on which `size_t` is a 32bit integer. Subsequent population of this under-allocated heap chunk is based on the original buffer size, leading to heap memory corruption. This vulnerability mostly impacts process availability. Maintainers believe exploitation for arbitrary code execution is unlikely. A patch is available and anticipated to be part of yajl-ruby version 1.4.2. As a workaround, avoid passing large inputs to YAJL.","status":"published","published":"2022-04-05T16:15:14.05Z","modified":"2026-11-03T08:02:16.160228111Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-03T08:24:50.542442Z"},{"id":"GHSA-jj47-x69x-mxrm","title":"Buffer Overflow in yajl-ruby","description":"_NOTE: A previous patch, 1.4.2, fixed the heap memory issue, but could still lead to a DoS infinite loop. Please update to version 1.4.3_\n\nThe 1.x branch and the 2.x branch of [yajl](https://github.com/lloyd/yajl) contain an integer overflow which leads to subsequent heap memory corruption when dealing with large (~2GB) inputs.\n\n### Details\n\nThe [reallocation logic at yajl_buf.c#L64](https://github.com/brianmario/yajl-ruby/blob/7168bd79b888900aa94523301126f968a93eb3a6/ext/yajl/yajl_buf.c#L64) may result in the `need` 32bit integer wrapping to 0 when `need` approaches a value of 0x80000000 (i.e. ~2GB of data), which results in a reallocation of buf-\u003ealloc into a small heap chunk.\n\nThese integers are declared as `size_t` in the 2.x branch of `yajl`, which practically prevents the issue from triggering on 64bit platforms, however this does not preclude this issue triggering on 32bit builds on which `size_t` is a 32bit integer.\n\nSubsequent population of this under-allocated heap chunk is based on the original buffer size, leading to heap memory corruption.\n\n### Impact\n\nWe rate this as a moderate severity vulnerability which mostly impacts process availability as we believe exploitation for arbitrary code execution to be unlikely.\n\n### Patches\n\nPatched in yajl-ruby 1.4.3\n\n### Workarounds\n\nAvoid passing large inputs to YAJL\n\n### References\nhttps://github.com/brianmario/yajl-ruby/blob/7168bd79b888900aa94523301126f968a93eb3a6/ext/yajl/yajl_buf.c#L64\n\n### For more information\nIf you have any questions or comments about this advisory:\n* Open an issue in [yajl-ruby](https://github.com/brianmario/yajl-ruby/issues)\n","status":"published","published":"2022-04-05T15:55:51Z","modified":"2024-02-16T08:22:00.241668Z","cvss":[{"version":"3.1","score":5.9,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"medium"}],"cwes":["CWE-122","CWE-190"],"updated_at":"2026-11-02T15:46:50.687609Z"},{"id":"OESA-2022-1752","title":"rubygem-yajl-ruby security update","description":"Ruby C bindings to the excellent Yajl JSON stream-based parser library.\r\n\r\nSecurity Fix(es):\r\n\r\nyajl-ruby is a C binding to the YAJL JSON parsing and generation library. The 1.x branch and the 2.x branch of `yajl` contain an integer overflow which leads to subsequent heap memory corruption when dealing with large (~2GB) inputs. The reallocation logic at `yajl_buf.c#L64` may result in the `need` 32bit integer wrapping to 0 when `need` approaches a value of 0x80000000 (i.e. ~2GB of data), which results in a reallocation of buf-\u0026gt;alloc into a small heap chunk. These integers are declared as `size_t` in the 2.x branch of `yajl`, which practically prevents the issue from triggering on 64bit platforms, however this does not preclude this issue triggering on 32bit builds on which `size_t` is a 32bit integer. Subsequent population of this under-allocated heap chunk is based on the original buffer size, leading to heap memory corruption. This vulnerability mostly impacts process availability. Maintainers believe exploitation for arbitrary code execution is unlikely. A patch is available and anticipated to be part of yajl-ruby version 1.4.2. As a workaround, avoid passing large inputs to YAJL.(CVE-2022-24795)","status":"published","published":"2022-07-15T11:05:01Z","modified":"2026-08-18T01:16:47.36635942Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:52:39.528805Z"},{"id":"OESA-2022-1912","title":"yajl security update","description":"yajl is a small event-driven JSON parser written in ANSI C, and a small validating JSON generator.\r\n\r\nSecurity Fix(es):\r\n\r\nyajl-ruby is a C binding to the YAJL JSON parsing and generation library. The 1.x branch and the 2.x branch of `yajl` contain an integer overflow which leads to subsequent heap memory corruption when dealing with large (~2GB) inputs. The reallocation logic at `yajl_buf.c#L64` may result in the `need` 32bit integer wrapping to 0 when `need` approaches a value of 0x80000000 (i.e. ~2GB of data), which results in a reallocation of buf-\u0026gt;alloc into a small heap chunk. These integers are declared as `size_t` in the 2.x branch of `yajl`, which practically prevents the issue from triggering on 64bit platforms, however this does not preclude this issue triggering on 32bit builds on which `size_t` is a 32bit integer. Subsequent population of this under-allocated heap chunk is based on the original buffer size, leading to heap memory corruption. This vulnerability mostly impacts process availability. Maintainers believe exploitation for arbitrary code execution is unlikely. A patch is available and anticipated to be part of yajl-ruby version 1.4.2. As a workaround, avoid passing large inputs to YAJL.(CVE-2022-24795)","status":"published","published":"2022-09-16T11:05:13Z","modified":"2026-08-18T01:16:54.963348345Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:52:39.528805Z"},{"id":"RHSA-2022:7524","title":"Red Hat Security Advisory: yajl security update","status":"published","published":"2024-09-16T08:00:43Z","modified":"2026-06-26T12:22:18.643329002Z","cvss":[{"version":"3.1","score":5.9,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:53:10.139266Z"},{"id":"RHSA-2022:8252","title":"Red Hat Security Advisory: yajl security update","status":"published","published":"2024-09-16T08:00:50Z","modified":"2026-06-26T12:22:29.779417261Z","cvss":[{"version":"3.1","score":5.9,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:53:10.139266Z"},{"id":"RHSA-2024:2063","title":"Red Hat Security Advisory: yajl security update","status":"published","published":"2024-09-16T12:48:51Z","modified":"2026-06-26T12:22:22.231934143Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:53:13.30378Z"},{"id":"RLSA-2022:7524","title":"Moderate: yajl security update","description":"Yet Another JSON Library (YAJL) is a small event-driven (SAX-style) JSON parser written in ANSI C and a small validating JSON generator.\n\nSecurity Fix(es):\n\n* yajl: heap-based buffer overflow when handling large inputs due to an integer overflow (CVE-2022-24795)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n\nAdditional Changes:\n\nFor detailed information on changes in this release, see the Rocky Linux 8.7 Release Notes linked from the References section.","status":"published","published":"2022-11-08T06:21:57Z","modified":"2026-02-05T14:00:11.160223Z","cvss":[{"version":"3.1","score":5.9,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:53:24.322216Z"},{"id":"RLSA-2022:8252","title":"Moderate: yajl security update","description":"Yet Another JSON Library (YAJL) is a small event-driven (SAX-style) JSON parser written in ANSI C, and a small validating JSON generator.\n\nSecurity Fix(es):\n\n* yajl: heap-based buffer overflow when handling large inputs due to an integer overflow (CVE-2022-24795)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n\nAdditional Changes:\n\nFor detailed information on changes in this release, see the Rocky Linux 9.1 Release Notes linked from the References section.","status":"published","published":"2022-11-15T06:19:32Z","modified":"2026-02-04T07:40:22.215725Z","cvss":[{"version":"3.1","score":5.9,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:53:24.322216Z"},{"id":"UBUNTU-CVE-2022-24795","description":"yajl-ruby is a C binding to the YAJL JSON parsing and generation library. The 1.x branch and the 2.x branch of `yajl` contain an integer overflow which leads to subsequent heap memory corruption when dealing with large (~2GB) inputs. The reallocation logic at `yajl_buf.c#L64` may result in the `need` 32bit integer wrapping to 0 when `need` approaches a value of 0x80000000 (i.e. ~2GB of data), which results in a reallocation of buf-\u003ealloc into a small heap chunk. These integers are declared as `size_t` in the 2.x branch of `yajl`, which practically prevents the issue from triggering on 64bit platforms, however this does not preclude this issue triggering on 32bit builds on which `size_t` is a 32bit integer. Subsequent population of this under-allocated heap chunk is based on the original buffer size, leading to heap memory corruption. This vulnerability mostly impacts process availability. Maintainers believe exploitation for arbitrary code execution is unlikely. A patch is available and anticipated to be part of yajl-ruby version 1.4.2. As a workaround, avoid passing large inputs to YAJL.","status":"published","published":"2022-04-05T16:15:00Z","modified":"2026-10-17T12:55:57.070959525Z","cvss":[{"version":"3.1","score":5.9,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"medium"},{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T16:53:53.13624Z"},{"id":"ALSA-2022:7524","title":"Moderate: yajl security update","description":"Yet Another JSON Library (YAJL) is a small event-driven (SAX-style) JSON parser written in ANSI C and a small validating JSON generator.\n\nSecurity Fix(es):\n\n* yajl: heap-based buffer overflow when handling large inputs due to an integer overflow (CVE-2022-24795)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n\nAdditional Changes:\n\nFor detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.","status":"published","published":"2022-11-08T00:00:00Z","modified":"2026-10-29T11:01:07.824890726Z","updated_at":"2026-11-02T15:27:51.655726Z"},{"id":"ALSA-2022:8252","title":"Moderate: yajl security update","description":"Yet Another JSON Library (YAJL) is a small event-driven (SAX-style) JSON parser written in ANSI C, and a small validating JSON generator.\n\nSecurity Fix(es):\n\n* yajl: heap-based buffer overflow when handling large inputs due to an integer overflow (CVE-2022-24795)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n\nAdditional Changes:\n\nFor detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.","status":"published","published":"2022-11-15T00:00:00Z","modified":"2026-10-29T11:31:18.827710976Z","updated_at":"2026-11-02T15:27:51.655726Z"},{"id":"CLSA-2026-1791550583","title":"Fix CVE(s): CVE-2022-24795","description":"   * SECURITY UPDATE: integer overflow in yajl_buf_ensure_available()\n     - debian/patches/CVE-2022-24795.patch: abort() on buffer size overflow\n     - CVE-2022-24795","status":"published","published":"2026-10-09T12:56:33Z","modified":"2026-10-26T09:32:04.721078498Z","updated_at":"2026-11-02T15:43:50.599064Z"},{"id":"DLA-3492-1","title":"yajl - security update","status":"published","published":"2023-07-11T00:00:00Z","modified":"2026-03-09T01:23:22.692446Z","updated_at":"2026-11-02T15:46:11.734021Z"},{"id":"DLA-3516-1","title":"burp - security update","status":"published","published":"2023-08-05T00:00:00Z","modified":"2026-03-09T01:21:57.779435Z","updated_at":"2026-11-02T15:46:11.734021Z"},{"id":"openSUSE-SU-2024:12258-1","title":"libyajl-devel-2.1.0-6.1 on GA media","description":"These are all security issues fixed in the libyajl-devel-2.1.0-6.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2025-05-07T18:13:53.769942Z","updated_at":"2026-11-02T16:58:35.485255Z"},{"id":"SUSE-SU-2022:1746-1","title":"Security update for libyajl","description":"\nThis update for libyajl fixes the following issue:\n\n- CVE-2022-24795: Fixed a heap-based buffer overflow when handling large inputs due to an integer overflow (bsc#1198405)\n","status":"published","published":"2022-06-14T09:52:52Z","modified":"2026-02-04T02:46:41.586346Z","updated_at":"2026-11-02T15:53:50.513981Z"},{"id":"SUSE-SU-2022:1918-1","title":"Security update for rubygem-yajl-ruby","description":"\nThis update for rubygem-yajl-ruby fixes the following issue:\n\n-CVE-2022-24795: Fixed a heap-based buffer overflow when handling large inputs due to an integer overflow (bsc#1198405)\n","status":"published","published":"2022-06-02T08:48:36Z","modified":"2026-02-04T04:14:08.097776Z","updated_at":"2026-11-02T15:53:50.513981Z"},{"id":"SUSE-SU-2022:3162-1","title":"Security update for libyajl","description":"This update for libyajl fixes the following issues:\n\n- CVE-2022-24795: Fixed heap-based buffer overflow when handling large inputs (bsc#1198405).\n","status":"published","published":"2022-09-07T13:07:56Z","modified":"2026-02-04T02:37:08.871433Z","updated_at":"2026-11-02T15:53:50.965375Z"},{"id":"USN-6233-1","title":"yajl vulnerabilities","description":"It was discovered that YAJL was not properly performing bounds checks when\ndecoding a string with escape sequences. If a user or automated system\nusing YAJL were tricked into processing specially crafted input, an\nattacker could possibly use this issue to cause a denial of service\n(application abort). (CVE-2017-16516)\n\nIt was discovered that YAJL was not properly handling memory allocation\nwhen dealing with large inputs, which could lead to heap memory\ncorruption. If a user or automated system using YAJL were tricked into\nrunning a specially crafted large input, an attacker could possibly use\nthis issue to cause a denial of service. (CVE-2022-24795)\n\nIt was discovered that memory leaks existed in one of the YAJL parsing\nfunctions. An attacker could possibly use this issue to cause a denial of\nservice (memory exhaustion). (CVE-2023-33460)\n","status":"published","published":"2023-07-18T13:31:52Z","modified":"2026-06-29T13:50:54.329530594Z","updated_at":"2026-11-02T16:58:17.305935Z"},{"id":"USN-6233-2","title":"yajl vulnerabilities","description":"USN-6233-1 fixed vulnerabilities in YAJL. This update provides the\ncorresponding updates for Ubuntu 20.04 LTS, Ubuntu 22.04 LTS, and Ubuntu\n23.04.\n\nOriginal advisory details:\n\n It was discovered that YAJL was not properly performing bounds checks when\n decoding a string with escape sequences. If a user or automated system\n using YAJL were tricked into processing specially crafted input, an\n attacker could possibly use this issue to cause a denial of service\n (application abort). (CVE-2017-16516)\n \n It was discovered that YAJL was not properly handling memory allocation\n when dealing with large inputs, which could lead to heap memory\n corruption. If a user or automated system using YAJL were tricked into\n running a specially crafted large input, an attacker could possibly use\n this issue to cause a denial of service. (CVE-2022-24795)\n \n It was discovered that memory leaks existed in one of the YAJL parsing\n functions. An attacker could possibly use this issue to cause a denial of\n service (memory exhaustion). (CVE-2023-33460)\n","status":"published","published":"2023-12-14T16:51:18Z","modified":"2026-04-27T16:30:59.760532Z","updated_at":"2026-11-02T16:58:17.305935Z"}]}}