Heap-based buffer overflow in yajl-ruby and yajl - CVE-2022-24795

Vulnerability identifier: #VU64001

CSH Severity: Medium

CVSS v4: 8.7 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N]

CVE-ID: CVE-2022-24795

CWE-ID: CWE-122

Exploitation vector: Remote access

Exploit availability: No public exploit available

The vulnerability allows a remote attacker to perform a denial of service attack.

The vulnerability exists due to a boundary error when handling large inputs. A remote attacker can pass specially crafted data to the application, trigger a heap-based buffer overflow and perform a denial of service attack.

yajl-ruby
yajl
Amazon Linux AMI
Oracle Linux
SUSE Manager Retail Branch Server
SUSE Manager Server
SUSE Manager Proxy
SUSE Linux Enterprise Micro
openSUSE Leap Micro
Fedora
SUSE Linux Enterprise Storage
Anolis OS
SUSE OpenStack Cloud Crowbar
Red Hat CodeReady Linux Builder for IBM z Systems
Red Hat CodeReady Linux Builder for ARM 64
Red Hat CodeReady Linux Builder for Power, little endian
Red Hat CodeReady Linux Builder for x86_64
Red Hat Enterprise Linux for ARM 64
Red Hat Enterprise Linux for Power, little endian
Red Hat Enterprise Linux for IBM z Systems
Red Hat Enterprise Linux for x86_64
Red Hat Enterprise Linux Server - AUS
Red Hat Enterprise Linux for x86_64 - Extended Update Support
Red Hat Enterprise Linux for IBM z Systems - Extended Update Support
Red Hat Enterprise Linux for Power, little endian - Extended Update Support
Red Hat Enterprise Linux Server - TUS
Red Hat Enterprise Linux for ARM 64 - Extended Update Support
Red Hat CodeReady Linux Builder for x86_64 - Extended Update Support
Red Hat CodeReady Linux Builder for Power, little endian - Extended Update Support
Red Hat CodeReady Linux Builder for ARM 64 - Extended Update Support
SUSE Linux Enterprise Desktop
SUSE Linux Enterprise High Performance Computing
SUSE Linux Enterprise Module for Basesystem
SUSE Linux Enterprise Server
SUSE Linux Enterprise Server for SAP Applications
openSUSE Leap
openEuler
IBM Cloud Pak for Multicloud Management
Red Hat OpenShift Container Platform
Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions
ruby2.1-rubygem-yajl-ruby-debuginfo
rubygem-yajl-ruby-debugsource
ruby2.1-rubygem-yajl-ruby
libbson
rubygem-yajl-ruby-help
rubygem-yajl-ruby-debuginfo
rubygem-yajl-ruby
yajl (Red Hat package)
yajl-doc
yajl-devel
yajl
yajl-debuginfo
yajl-debugsource
libyajl2-32bit
libyajl2-32bit-debuginfo
libyajl-devel-32bit
libyajl-devel-static
libyajl-devel
libyajl2-debuginfo
libyajl2
libyajl-debugsource
OpenShift Virtualization

Install updates from vendor's website.

yajl-ruby - update to 1.4.2
IBM Cloud Pak for Multicloud Management - update to 2.3.8
ruby2.1-rubygem-yajl-ruby-debuginfo - update to 1.3.1-4.6.1
rubygem-yajl-ruby-debugsource - update to 1.3.1-4.6.1
ruby2.1-rubygem-yajl-ruby - update to 1.3.1-4.6.1
libbson - update to 1.3.5-7.el7
rubygem-yajl-ruby-help - update to 1.4.3-1
rubygem-yajl-ruby-debuginfo - update to 1.4.3-1
rubygem-yajl-ruby-debugsource - update to 1.4.3-1
rubygem-yajl-ruby - update to 1.4.3-1
yajl (Red Hat package) - addressed in versions 2.1.0-11.el8, 2.1.0-13.el8_6, 2.1.0-21.el9
yajl-doc - addressed in versions 2.1.0-11.0.1, 2.1.0-13.0.1
yajl-devel - addressed in versions 2.1.0-11.0.1, 2.1.0-13.0.1
yajl - addressed in versions 2.1.0-11.0.1, 2.1.0-13.0.1
yajl - update to 2.1.0-16
yajl-debuginfo - update to 2.1.0-16
yajl-devel - update to 2.1.0-16
yajl-debugsource - update to 2.1.0-16
yajl - update to 2.1.0-16
yajl - addressed in versions 2.1.0-21.fc37, 2.1.0-21.fc38
libyajl2-32bit - update to 2.1.0-150000.4.3.1
libyajl2-32bit-debuginfo - update to 2.1.0-150000.4.3.1
libyajl-devel-32bit - update to 2.1.0-150000.4.3.1
yajl-debuginfo - update to 2.1.0-150000.4.3.1
yajl - update to 2.1.0-150000.4.3.1
libyajl-devel-static - update to 2.1.0-150000.4.3.1
libyajl-devel - update to 2.1.0-150000.4.3.1
libyajl2-debuginfo - update to 2.1.0-150000.4.3.1
libyajl2 - update to 2.1.0-150000.4.3.1
libyajl-debugsource - update to 2.1.0-150000.4.3.1
OpenShift Virtualization - addressed in versions 4.11.1, 4.12.0
Red Hat OpenShift Container Platform - addressed in versions 4.15.12, 4.15.13

• https://github.com/brianmario/yajl-ruby/security/advisories/GHSA-jj47-x69x-mxrm
• https://github.com/brianmario/yajl-ruby/blob/7168bd79b888900aa94523301126f968a93eb3a6/ext/yajl/yajl_buf.c#L64
• https://github.com/brianmario/yajl-ruby/commit/7168bd79b888900aa94523301126f968a93eb3a6

• SUSE update for rubygem-yajl-ruby
• SUSE update for libyajl
• Red Hat Enterprise Linux 8 update for yajl
• Red Hat Enterprise Linux 9 update for yajl
• Multiple vulnerabilities in OpenShift Virtualization 4.11
• Multiple vulnerabilities in OpenShift Virtualization 4.12
• Multiple vulnerabilities in Oracle Linux
• Fedora 38 update for yajl
• Fedora 37 update for yajl
• Multiple vulnerabilities in IBM Cloud Pak for Multicloud Management
• openEuler update for rubygem-yajl-ruby
• openEuler update for yajl
• Red Hat Enterprise Linux 8.6 Extended Update Support update for yajl
• Multiple vulnerabilities in Red Hat OpenShift Container Platform 4.15
• Multiple vulnerabilities in Red Hat OpenShift Container Platform 4.15
• Fedora EPEL 7 update for libbson
• Amazon Linux AMI update for yajl
• Anolis OS update for yajl
• Anolis OS update for yajl