CVE Catalog
CVE-2023-33460
MediumCVSS 6.5Exploitation Probability (EPSS)
Elevated risk1.13%
62th percentile - higher than 62% of all known CVEs
Summary
There is a memory leak in version 2.1.0 of the yajl library related to the use of the yajl_tree_parse function. This can lead to out-of-memory conditions on the server and ultimately cause crashes.
Risk Assessment
The memory leak can result in service unavailability, impacting system stability and performance. Organizations may experience downtime and potential data loss.
Recommendation
It is recommended to update the yajl library to the latest version to mitigate the memory leak issue. Monitoring memory usage on the server may also help identify problems.
Original NVD description (English source)
There's a memory leak in yajl 2.1.0 with use of yajl_tree_parse function. which will cause out-of-memory in server and cause crash.