Lucene search

K
freebsdFreeBSDF7BA20AA-6B5A-11DD-9D79-001FC61C2A55
HistoryAug 08, 2008 - 12:00 a.m.

ruby -- DoS vulnerability in WEBrick

2008-08-0800:00:00
vuxml.freebsd.org
11

7.8 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:N/I:N/A:C

0.355 Low

EPSS

Percentile

97.1%

The official ruby site reports:

WEBrick::HTTP::DefaultFileHandler is faulty of exponential time
taking requests due to a backtracking regular expression in
WEBrick::HTTPUtils.split_header_value.

7.8 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:N/I:N/A:C

0.355 Low

EPSS

Percentile

97.1%