PT-2022-7111 · Yajl-Ruby+10 · Yajl-Ruby+10

Jhawthorn · Published 2022-04-05 · Updated 2024-12-06 · CVE-2022-24795

Positive Technologies (AI Summary)

CVSS v2.0

7.8

High

Base vector

AV:N/AC:L/Au:N/C:C/I:N/A:N

Name of the Vulnerable Software and Affected Versions yajl-ruby versions 1.x through 2.x

Description The issue is related to an integer overflow in the yajl-ruby library, which leads to heap memory corruption when dealing with large inputs (~2GB). The reallocation logic at yajl buf.c#L64 may result in the need 32bit integer wrapping to 0, causing a reallocation of buf->alloc into a small heap chunk. This vulnerability mostly impacts process availability, and maintainers believe exploitation for arbitrary code execution is unlikely.

Recommendations For yajl-ruby versions 1.x through 2.x, update to version 1.4.3 to resolve the issue. As a temporary workaround, avoid passing large inputs to YAJL.

Exploit

Fix

Integer Overflow

Heap Based Buffer Overflow

Weakness Enumeration

CWE-190

CWE-122

Related Identifiers

ALSA-2022:7524

ALSA-2022:8252

ALSA-2022_7524

ALSA-2022_8252

ALT-PU-2023-4612

ALT-PU-2023-7987

ALT-PU-2024-16516

AZL-10552

AZL-35233

BDU:2023-07630

CESA-2022_7524

CVE-2022-24795

DLA-3492-1

DLA-3516-1

GHSA-JJ47-X69X-MXRM

OESA-2022-1752

OESA-2022-1912

OPENSUSE-SU-2022_3162-1

OPENSUSE-SU-2024:12258-1

RHSA-2022:7524

RHSA-2022:8252

RHSA-2022_7524

RHSA-2022_8252

RHSA-2024:2063

RLSA-2022:7524

RLSA-2022:8252

SUSE-SU-2022:1746-1

SUSE-SU-2022:1918-1

SUSE-SU-2022:3162-1

SUSE-SU-2022_1746-1

SUSE-SU-2022_3162-1

USN-6233-1

USN-6233-2

Affected Products

Alt Linux

Almalinux

Astra Linux

Centos

Debian

Linuxmint

Red Hat

Rocky Linux

Suse

Ubuntu

Yajl-Ruby

References · 73

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/24xxx/CVE-2022-24795.json · Exploit
• 🔥 https://github.com/brianmario/yajl-ruby/blob/7168bd79b888900aa94523301126f968a93eb3a6/ext/yajl/yajl_buf.c#L64 · Exploit
• 🔥 https://github.com/brianmario/yajl-ruby/security/advisories/GHSA-jj47-x69x-mxrm · Exploit
• 🔥 https://github.com/rubysec/ruby-advisory-db/blob/master/gems/yajl-ruby/CVE-2022-24795.yml · Exploit
• https://github.com/brianmario/yajl-ruby/commit/7168bd79b888900aa94523301126f968a93eb3a6 · Patch
• https://ubuntu.com/security/notices/USN-6233-2 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2022-24795 · Vendor Advisory
• https://osv.dev/vulnerability/DLA-3516-1 · Vendor Advisory
• https://osv.dev/vulnerability/RLSA-2022:8252 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2022:1746-1 · Vendor Advisory
• https://osv.dev/vulnerability/ALSA-2022:7524 · Vendor Advisory
• https://bdu.fstec.ru/vul/2023-07630 · Security Note
• https://osv.dev/vulnerability/OESA-2022-1752 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2022-24795 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2022:3162-1 · Vendor Advisory