CVE-2017-15928

Severity: high (CVSS 7.5 v3.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.7% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2017-10-27 · updated 2026-06-17
Weakness: CWE-20

Description

In the Ox gem 2.8.0 for Ruby, the process crashes with a segmentation fault when a crafted input is supplied to parse_obj. NOTE: the vendor has stated "Ox should handle the error more gracefully" but has not confirmed a security implication.

Affected products

Ox Project Ox: 2.8.0

References

https://github.com/ohler55/ox/issues/194
https://rubygems.org/gems/ox/versions/2.8.0
https://github.com/ohler55/ox/issues/194
https://rubygems.org/gems/ox/versions/2.8.0

Get alerted when CVE-2017-15928 or the next vulnerability affects your stack