Known vulnerabilities in yajl (Red Hat package)
Vendor:
Red Hat Inc.
Software:
yajl (Red Hat package)
Software CPE:
cpe:2.3:o:red_hat:yajl_redhat_package:*:*:*:*:*:red_hat_enterprise_linux:*:*
Website:
https://www.redhat.com/en
Total vulnerabilities:
2
Public exploits:
0
Known exploited (KEV):
0
Highest CVSSv4 Score:
8.8
Breakdown by Severity Chart
Vulnerabilities (2)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU77812 - Missing release of memory after effective lifetime CVE-2023-33460 |
CWE-401 | Medium | 2.1.0-12.el8, 2.1.0-12.el8_8, 2.1.0-13.el8_6, 2.1.0-22.el9 | 29.06.2023 |
SB2023062940 SB2023081424 SB2023082180 and 19 more |
||
| #VU64001 - Heap-based Buffer Overflow CVE-2022-24795 |
CWE-122 | Medium | 2.1.0-11.el8, 2.1.0-13.el8_6, 2.1.0-21.el9 | 06.06.2022 |
SB2022061543 SB2022090745 SB2022110845 and 16 more |