Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
githubGitHub Advisory DatabaseGHSA-5CQM-CRXM-6QPV
HistoryDec 14, 2021 - 9:36 p.m.

Buffer overrun in CGI.escape_html

2021-12-1421:36:20
CWE-190
GitHub Advisory Database
github.com
29

9.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.008 Low

EPSS

Percentile

81.6%

JSON

A buffer overrun vulnerability was discovered in CGI.escape_html. This can lead to a buffer overflow when a user passes a very large string (> 700 MB) to CGI.escape_html on a platform where long type takes 4 bytes, typically, Windows.

CPENameOperatorVersion
cgilt0.1.0.1
cgilt0.2.1
cgilt0.3.1

References

Related

prion 1
redhatcve 1
freebsd 1
veracode 1
osv 4
debiancve 1
hackerone 1
ubuntucve 1
cve 1
cnvd 1
alpinelinux 1
nessus 6
ubuntu 1
debian 1
cloudfoundry 1
redhat 2
fedora 2
mageia 1
gentoo 1
ibm 1
prion
prion
Integer overflow
2022-02-06 21:15:00
redhatcve
redhatcve
CVE-2021-41816
2021-11-25 18:21:44
freebsd
freebsd
rubygem-cgi -- buffer overrun in CGI.escape_html
2021-11-24 00:00:00
veracode
veracode
Denial Of Service (DoS)
2021-11-25 17:08:05
osv
osv
CVE-2021-41816
2022-02-06 21:15:07
Buffer overrun in CGI.escape_html
2021-12-14 21:36:20
ruby2.3, ruby2.5, ruby2.7 vulnerabilities
2022-01-18 17:13:18
debiancve
debiancve
CVE-2021-41816
2022-02-06 21:15:00
hackerone
hackerone
Internet Bug Bounty: Buffer Overflow in optimized_escape_html method
2022-01-20 13:37:51
ubuntucve
ubuntucve
CVE-2021-41816
2021-12-02 00:00:00
cve
cve
CVE-2021-41816
2022-02-06 21:15:00
cnvd
cnvd
Ruby Buffer Overflow Vulnerability (CNVD-2022-18048)
2021-11-29 00:00:00
alpinelinux
alpinelinux
CVE-2021-41816
2022-02-06 21:15:00
nessus
nessus
Ubuntu 16.04 ESM / 18.04 LTS / 20.04 LTS : Ruby vulnerabilities (USN-5235-1)
2022-01-18 00:00:00
Amazon Linux 2 : ruby (ALASRUBY3.0-2023-003)
2023-09-27 00:00:00
Debian DSA-5067-1 : ruby2.7 - security update
2022-02-04 00:00:00
ubuntu
ubuntu
Ruby vulnerabilities
2022-01-18 00:00:00
debian
debian
[SECURITY] [DSA 5067-1] ruby2.7 security update
2022-02-03 19:30:34
cloudfoundry
cloudfoundry
USN-5235-1: Ruby vulnerabilities | Cloud Foundry
2022-03-09 00:00:00
redhat
redhat
(RHSA-2022:6856) Moderate: rh-ruby27-ruby security, bug fix, and enhancement update
2022-10-11 07:10:36
(RHSA-2022:6855) Moderate: rh-ruby30-ruby security, bug fix, and enhancement update
2022-10-11 07:10:39
fedora
fedora
[SECURITY] Fedora 35 Update: ruby-3.0.4-153.fc35
2022-05-08 01:48:39
[SECURITY] Fedora 34 Update: ruby-3.0.4-153.fc34
2022-05-08 02:03:44
mageia
mageia
Updated ruby packages fix security vulnerability
2021-12-24 00:01:45
gentoo
gentoo
Ruby: Multiple vulnerabilities
2024-01-24 00:00:00
ibm
ibm
Security Bulletin: Netcool Operations Insight v1.6.8 addresses multiple security vulnerabilities.
2023-04-11 11:47:27

9.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.008 Low

EPSS

Percentile

81.6%

JSON
Related for GHSA-5CQM-CRXM-6QPV
prion1redhatcve1freebsd1veracode1osv4debiancve1hackerone1ubuntucve1cve1cnvd1alpinelinux1nessus6ubuntu1debian1cloudfoundry1redhat2fedora2mageia1gentoo1ibm1