GitHub Advisoryadvisory · RubyGems

GHSA-wfwm-chj7-w59r Ox gem stack overflow in sax_parse

MEDIUM Published 2018-03-05 Modified 2023-08-29 Official page ↗
Aliases
CVE-2017-16229
Ecosystem
RubyGems
Packages
ox
Severity
Moderate
CVSS vector
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
Weaknesses
CWE-125
Reviewed
2020-06-16

Affected packages

• RubyGems ox: < 2.8.2 → fixed in 2.8.2

Description

In the Ox gem 2.8.1 for Ruby, the process crashes with a stack-based buffer over-read in the `read_from_str` function in `sax_buf.c` when a crafted input is supplied to `sax_parse`.

Related

Alias · CVE (1)

  • CVE-2017-16229 In the Ox gem 2.8.1 for Ruby, the process crashes with a stack-based buffer over-read in the read_from_str function in sax_buf.c when a… vulnerability

Weakness · CWE (1)

  • CWE-125 Out-of-bounds Read weakness

References