ox 2.4.0

2 security vulnerabilities found in version 2.4.0

ox ruby gem segmentation fault via parse_obj

high severity CVE-2017-15928
high severity CVE-2017-15928
Patched versions: >= 2.8.1

In the Ox gem 2.8.0 for Ruby, the process crashes with a segmentation fault when a crafted input is supplied to parse_obj. NOTE: the vendor has stated "Ox should handle the error more gracefully" but has not confirmed a security implication.

ox ruby gem stack overflow in sax_parse

medium severity CVE-2017-16229
medium severity CVE-2017-16229
Patched versions: >= 2.8.2

In the Ox gem 2.8.1 for Ruby, the process crashes with a stack-based buffer over-read in the read_from_str function in sax_buf.c when a crafted input is supplied to sax_parse.

No officially reported memory leakage issues detected.


This gem version does not have any officially reported memory leaked issues.

No license issues detected.


This gem version has a license in the gemspec.

This gem version is available.


This gem version has not been yanked and is still available for usage.