Skip to content
OpenAdvisories

Package · Debian

ruby-ox

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Feed

  • Medium 5.5
    CVE-2017-16229

    Ox gem stack overflow in sax_parse

    In the Ox gem 2.8.1 for Ruby, the process crashes with a stack-based buffer over-read in the read_from_str function in sax_buf.c when a crafted input is supplied to sax_parse.

    ox ruby-ox ruby-ox Debian Ubuntu RubyGems
  • High 7.5
    CVE-2017-15928

    Ox gem crashes due to a crafted input

    In the Ox gem 2.8.0 for Ruby, the process crashes with a segmentation fault when a crafted input is supplied to parse_obj. NOTE: the vendor has stated "Ox should handle the error more gracefully" but has not confirmed a security implication.

    ox ruby-ox ruby-ox Debian Ubuntu RubyGems