Find, fix and prevent vulnerabilities in your code.

Overview

json is a JSON implementation as a Ruby extension in C.

Affected versions of this package are vulnerable to Heap-based Buffer Overflow via the JSON.dump or JSON::State#generate process when streaming oversized attacker-controlled strings to an IO object. An attacker can cause a process crash or denial of service by providing a specially crafted string near 16 KB in size.

Remediation

Upgrade json to version 2.19.9 or higher.

References

• GitHub Advisory
• GitHub Commit
• GitHub Release

Overview

Affected versions of this package are vulnerable to Improper Locking in the release_write_lock() and release_read_lock() functions. An attacker can disrupt synchronization guarantees and exploit data races or cause denial of service by invoking these functions from unauthorized threads or without holding the appropriate lock.

Remediation

Upgrade concurrent-ruby to version 1.3.7 or higher.

References

• GitHub Advisory
• GitHub Commit

Overview

Affected versions of this package are vulnerable to Wrap-around Error in ReentrantReadWriteLock that causes incorrect write locks. An attacker can cause a thread to incorrectly obtain a write lock without exclusivity by repeatedly acquiring the read lock 32,768 times, which overflows the internal counter and bypasses the global writer state. This allows other threads to continue acquiring read locks concurrently, leading to data races and inconsistent reads of shared mutable state.

Remediation

Upgrade concurrent-ruby to version 1.3.7 or higher.

References

• GitHub Advisory
• GitHub Commit