Lucene search

K
archlinuxArch LinuxASA-201411-16
HistoryNov 17, 2014 - 12:00 a.m.

ruby: denial of service

2014-11-1700:00:00
Arch Linux
lists.archlinux.org
19

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

0.154 Low

EPSS

Percentile

95.3%

CPU exhaustion can occur as a result of recursive expansion with an
empty string. When reading text nodes from an XML document, the REXML
parser can be coerced into allocating extremely large string objects
which can consume all of the memory on a machine, causing a denial of
service.

OSVersionArchitecturePackageVersionFilename
anyanyanyruby< 2.1.5-1UNKNOWN

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

0.154 Low

EPSS

Percentile

95.3%