rubygem-cgi -- buffer overrun in CGI.escape_html

2021-11-2400:00:00

vuxml.freebsd.org

9.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.008 Low

EPSS

Percentile

81.6%

JSON

chamal reports:

    A security vulnerability that causes buffer overflow when
    you pass a very large string (&gt; 700 MB) to
    CGI.escape_html on a platform where
    long type takes 4 bytes, typically, Windows.

OSVersionArchitecturePackageVersionFilename
FreeBSDanynoarchruby= 2.7.0,1UNKNOWN
FreeBSDanynoarchruby< 2.7.5,1UNKNOWN
FreeBSDanynoarchruby27= 2.7.0,1UNKNOWN
FreeBSDanynoarchruby27< 2.7.5,1UNKNOWN
FreeBSDanynoarchruby30= 3.0.0,1UNKNOWN
FreeBSDanynoarchruby30< 3.0.3,1UNKNOWN
FreeBSDanynoarchrubygem-cgi< 0.3.1UNKNOWN

OS	Version	Architecture	Package	Version	Filename
FreeBSD	any	noarch	ruby	= 2.7.0,1	UNKNOWN
FreeBSD	any	noarch	ruby	< 2.7.5,1	UNKNOWN
FreeBSD	any	noarch	ruby27	= 2.7.0,1	UNKNOWN
FreeBSD	any	noarch	ruby27	< 2.7.5,1	UNKNOWN
FreeBSD	any	noarch	ruby30	= 3.0.0,1	UNKNOWN
FreeBSD	any	noarch	ruby30	< 3.0.3,1	UNKNOWN
FreeBSD	any	noarch	rubygem-cgi	< 0.3.1	UNKNOWN