CVE-2017-16229 | BDVDB-2026-97126 Detail

Description#

In the Ox gem 2.8.1 for Ruby, the process crashes with a stack-based buffer over-read in the read_from_str function in sax_buf.c when a crafted input is supplied to sax_parse.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

https://rubygems.org/gems/ox/versions/2.8.1
https://github.com/ohler55/ox/issues/195

Exploit#

No public exploit known

History#

Version 12018-02-26Record published in the CVE List.
Version 22024-08-05Most recent update recorded in the CVE List.