CVE-2017-15928

In the Ox gem 2.8.0 for Ruby, the process crashes with a segmentation fault when a crafted input is supplied to parse_obj. NOTE: the vendor has stated "Ox should handle the error more gracefully" but has not confirmed a security implication.

Score

CVSS 3.0 7.5 High

Status

Modified - cve@mitre.org

Published

2017-10-27

Last modified

2024-09-16

Weaknesses

CWE-20

Affected products

• Ox (Ox Project)

References

• https://github.com/ohler55/ox/issues/194
• https://rubygems.org/gems/ox/versions/2.8.0