Ox gem crashes due to a crafted input (GHSA-pjj4-w39g-pw54)
Published: 2017-11-21T18:26:40Z
Aliases: CVE-2017-15928
Severity: HIGH · CWE: CWE-20

In the Ox gem 2.8.0 for Ruby, the process crashes with a segmentation fault when a crafted input is supplied to `parse_obj`. NOTE: the vendor has stated "Ox should handle the error more gracefully" but has not confirmed a security implication.

Affected packages:
package: ecosystem: RubyGems
name: ox
ranges: type: ECOSYSTEM
events: introduced: 0
fixed: 2.8.1
database_specific: last_known_affected_version_range: <= 2.8.0