In the yajl-ruby gem 1.3.0 for Ruby, when a crafted JSON file is supplied to Yajl::Parser.new.parse, the whole ruby process crashes with a SIGABRT in the yajl_string_decode function in yajl_encode.c. This results in the whole ruby process terminating and potentially a denial of service.

The remote Ubuntu 20.04 LTS / 22.04 LTS / 23.04 host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-6233-2 advisory.

    USN-6233-1 fixed vulnerabilities in YAJL. This update provides the corresponding updates for Ubuntu 20.04     LTS, Ubuntu 22.04 LTS, and Ubuntu 23.04.



Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Debian 10 host has a package installed that is affected by multiple vulnerabilities as referenced in the dla-3516 advisory.

    -------------------------------------------------------------------------     Debian LTS Advisory DLA-3516-1                debian-lts@lists.debian.org     https://www.debian.org/lts/security/                         Sean Whitton     August 05, 2023                               https://wiki.debian.org/LTS
    -------------------------------------------------------------------------

    Package        : burp     Version        : 2.1.32-2+deb10u1     CVE ID         : CVE-2017-16516 CVE-2022-24795 CVE-2023-33460     Debian Bug     : 1040036

    Multiple vulnerabilities have been found in the version of yajl bundled     with burp, a simple cross-platform network BackUp and Restore Program.
    yajl is a JSON parser and small validating JSON generator.

    CVE-2017-16516

      When a crafted JSON file is supplied to yajl, the process might       crash with a SIGABRT in the yajl_string_decode function in       yajl_encode.c.  This potentially results in a denial of service.

    CVE-2022-24795

      The 1.x branch and the 2.x branch of `yajl` contain an integer       overflow which leads to subsequent heap memory corruption when dealing       with large (~2GB) inputs.

    CVE-2023-33460

      There's a memory leak in yajl 2.1.0 with use of yajl_tree_parse       function, which potentially cause the server to run out of memory and       crash.

    For Debian 10 buster, this problem has been fixed in version     2.1.32-2+deb10u1.

    We recommend that you upgrade your burp packages.

    For the detailed security status of burp please refer to     its security tracker page at:
    https://security-tracker.debian.org/tracker/burp

    Further information about Debian LTS security advisories, how to apply     these updates to your system and frequently asked questions can be     found at: https://wiki.debian.org/LTS     Attachment:
    signature.asc     Description: PGP signature

Tenable has extracted the preceding description block directly from the Debian security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Ubuntu 16.04 ESM / 18.04 ESM host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-6233-1 advisory.

    It was discovered that YAJL was not properly performing bounds checks when decoding a string with escape     sequences. If a user or automated system using YAJL were tricked into processing specially crafted input,     an attacker could possibly use this issue to cause a denial of service (application abort).
    (CVE-2017-16516)

    It was discovered that YAJL was not properly handling memory allocation when dealing with large inputs,     which could lead to heap memory corruption. If a user or automated system using YAJL were tricked into     running a specially crafted large input, an attacker could possibly use this issue to cause a denial of     service. (CVE-2022-24795)

    It was discovered that memory leaks existed in one of the YAJL parsing functions. An attacker could     possibly use this issue to cause a denial of service (memory exhaustion). (CVE-2023-33460)

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Debian 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-3492 advisory.

    -------------------------------------------------------------------------     Debian LTS Advisory DLA-3492-1                debian-lts@lists.debian.org     https://www.debian.org/lts/security/                         Tobias Frost     July 11, 2023                                 https://wiki.debian.org/LTS
    -------------------------------------------------------------------------

    Package        : yajl     Version        : 2.1.0-3+deb10u2     CVE ID         : CVE-2017-16516 CVE-2022-24795 CVE-2023-33460     Debian Bug     : 1040036

    Multiple vulnerabilties have been found in yajl, a JSON parser / small     validating JSON generator# written in ANSI C, which potentially can     cause memory corruption or DoS.

    The CVE-20117-16516 had been addressed already in DLA-3478, however the     fix has been found to be incomplete as it missed an additional memory     leak.  This update fixes that problem.

    CVE-2017-16516

      When a crafted JSON file is supplied to yajl, the process might       crash with a SIGABRT in the yajl_string_decode function in       yajl_encode.c. This results potentially in a denial of service.

    CVE-2022-24795

      The 1.x branch and the 2.x branch of `yajl` contain an integer       overflow which leads to subsequent heap memory corruption when dealing       with large (~2GB) inputs.

    CVE-2023-33460

      There's a memory leak in yajl 2.1.0 with use of yajl_tree_parse       function, which potentially cause out-of-memory in server and cause       crash.

    For Debian 10 buster, these problems have been fixed in version     2.1.0-3+deb10u2.

    We recommend that you upgrade your yajl packages.

    For the detailed security status of yajl please refer to     its security tracker page at:
    https://security-tracker.debian.org/tracker/yajl

    Further information about Debian LTS security advisories, how to apply     these updates to your system and frequently asked questions can be     found at: https://wiki.debian.org/LTS     Attachment:
    signature.asc     Description: PGP signature

Tenable has extracted the preceding description block directly from the Debian security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

A vulnerability was found in ruby-yajl, an interface to Yajl, a JSON stream-based parser library. When a crafted JSON file is supplied to Yajl::Parser.new.parse, the whole ruby process crashes with a SIGABRT in the yajl_string_decode function in yajl_encode.c. This may result in a denial of service.

For Debian 7 'Wheezy', these problems have been fixed in version 1.1.0-2+deb7u1.

We recommend that you upgrade your ruby-yajl packages.

NOTE: Tenable Network Security has extracted the preceding description block directly from the DLA security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

ID	Name	Product	Family	Severity
186986	Ubuntu 20.04 LTS / 22.04 LTS / 23.04 : YAJL vulnerabilities (USN-6233-2)	Nessus	Ubuntu Local Security Checks	high
179386	Debian dla-3516 : burp - security update	Nessus	Debian Local Security Checks	high
178443	Ubuntu 16.04 ESM / 18.04 ESM : YAJL vulnerabilities (USN-6233-1)	Nessus	Ubuntu Local Security Checks	high
178173	Debian dla-3492 : libyajl-dev - security update	Nessus	Debian Local Security Checks	high
104464	Debian DLA-1167-1 : ruby-yajl security update	Nessus	Debian Local Security Checks	high

Detections

Analytics

CVE-2017-16516

high

Tenable Plugins

high

high

high

high

high