Lucene search
MitreCVELIST:CVE-2014-6438HistorySep 06, 2017 - 9:00 p.m.
CVE-2014-6438
2017-09-0621:00:00
mitre
www.cve.org
6
EPSS
0.006
Percentile
77.9%
The URI.decode_www_form_component method in Ruby before 1.9.2-p330 allows remote attackers to cause a denial of service (catastrophic regular expression backtracking, resource consumption, or application crash) via a crafted string.
Related
nvd
nvd
CVE-2014-6438
2017-09-06 21:29:00
openvas
openvas
Debian: Security Advisory (DLA-275-1)
2023-03-08 00:00:00
osv
osv
ruby1.9.1 - security update
2015-07-20 00:00:00
ubuntucve
ubuntucve
CVE-2014-6438
2017-09-06 00:00:00
cve
cve
CVE-2014-6438
2017-09-06 21:29:00
nessus
nessus
Debian DLA-275-1 : ruby1.9.1 security update
2015-07-20 00:00:00
RHEL 6 : ruby (Unpatched Vulnerability)
2024-06-03 00:00:00
RHEL 5 : ruby (Unpatched Vulnerability)
2024-06-03 00:00:00
debian
debian
[SECURITY] [DLA 275-1] ruby1.9.1 security update
2015-07-20 00:52:47
prion
prion
Design/Logic Flaw
2017-09-06 21:29:00