openwrt ▾
›
openwrt-25.12 ▾
›
vulnerability
›
CVE-2023-33460
Component Overview
Vulnerability Overview
Name
CVE-2023-33460
Source
NVD (
link
)
Debian (
link
)
Description
There's a memory leak in yajl 2.1.0 with use of yajl_tree_parse function. which will cause out-of-memory in server and cause crash.
CWEs
CWE-401
CWE-401
Published Date
Jun 6, 2023
Updated Date
Jun 17, 2026
Workaround
-
Advisories
https://github.com/lloyd/yajl/issues/250
Exploit
https://lists.debian.org/debian-lts-announce/2023/07/msg00000.html
Mailing List
https://lists.debian.org/debian-lts-announce/2023/07/msg00013.html
Mailing List
https://github.com/lloyd/yajl/issues/250
Exploit
https://lists.debian.org/debian-lts-announce/2023/07/msg00000.html
Mailing List
https://lists.debian.org/debian-lts-announce/2023/07/msg00013.html
Mailing List
Analysis
#
Affected Component
Analysis
yajl
Patched
Vulnerability Ratings
#
6.5
CVSSv31
6.5
CVSSv31
NaN
other
Others affected components
#
Name
Project
Project Version
Version
Status
yajl
buildroot
2025.02.x
2.1.0
Exploitable
yajl
buildroot
master
2.1.0
Exploitable
yajl
openwrt
master
2.1.0-r4
Patched
yajl
yocto
kirkstone
1.0.12
Patched
yajl
yocto
master
2.1.0
Patched
yajl
yocto
scarthgap
1.0.12
Patched
Resolved with patches
#
yajl (openwrt:master)
#
Title
Author
Resolve
1
Fix for CVE-2023-33460a
Like Ma <likemartinma@gmail.com>
CVE-2023-33460
yajl (openwrt:openwrt-25.12)
#
Title
Author
Resolve
1
Fix for CVE-2023-33460a
Like Ma <likemartinma@gmail.com>
CVE-2023-33460
yajl (yocto:kirkstone)
#
Title
Author
Resolve
1
fix memory leaks
"zhang.jiujiu" <282627424@qq.com>
CVE-2023-33460
yajl (yocto:kirkstone)
#
Title
Author
Resolve
1
fix memory leaks
"zhang.jiujiu" <282627424@qq.com>
CVE-2023-33460
yajl (yocto:master)
#
Title
Author
Resolve
1
Patch #1
Ross Burton <ross.burton@arm.com>
CVE-2023-33460
yajl (yocto:master)
#
Title
Author
Resolve
1
Patch #1
Ross Burton <ross.burton@arm.com>
CVE-2023-33460
yajl (yocto:scarthgap)
#
Title
Author
Resolve
1
Patch #1
Ross Burton <ross.burton@arm.com>
CVE-2023-33460
yajl (yocto:scarthgap)
#
Title
Author
Resolve
1
Patch #1
Ross Burton <ross.burton@arm.com>
CVE-2023-33460