CVE-2017-15928 | BDVDB-2026-92357 Detail

Description#

In the Ox gem 2.8.0 for Ruby, the process crashes with a segmentation fault when a crafted input is supplied to parse_obj. NOTE: the vendor has stated "Ox should handle the error more gracefully" but has not confirmed a security implication.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

https://github.com/ohler55/ox/issues/194
https://rubygems.org/gems/ox/versions/2.8.0

Exploit#

No public exploit known

History#

Version 12017-10-27Record published in the CVE List.
Version 22024-09-16Most recent update recorded in the CVE List.