CVE:CVE-2023-33460
CNNVD:CNNVD-202306-363
YAJL是Lloyd Hilaiel个人开发者的一个快速流式 JSON 解析库。
YAJL 2.1.0版本存在安全漏洞，该漏洞源于使用yajl_tree_parse 函数会导致内存泄漏。
solution:Upgrade yajl_project yajl to a higher version than 2.1.0,and avoid the version 2.1.0; Upgrade fedoraproject fedora to a higher version than 37,38,and avoid the version 37,38; Upgrade debian debian_linux to a higher version than 10.0,and avoid the version 10.0