Lucene search
Https://gitlab.com/gitlab-org/security-products/gemnasium-dbGITLAB-E60F73B75D2CCE6370D549C9EBCCB575HistoryOct 16, 2013 - 12:00 a.m.
Possible DoS Vulnerability
2013-10-1600:00:00
https://gitlab.com/gitlab-org/security-products/gemnasium-db
gitlab.com
16
4.3 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:N/I:N/A:P
0.011 Low
EPSS
Percentile
83.9%
A carefully crafted email address in conjunction with the Action Mailer logger format string could take advantage of a bug in Ruby’s sprintf implementation and possibly lead to a denial of service attack. Impacted Ruby code will look something like this: "some string #{user_input}" % some_number
| CPE | Name | Operator | Version |
|---|---|---|---|
| gem/actionmailer | ge | 3.0.0 | |
| gem/actionmailer | lt | 3.2.15 |
References
Related
nessus
nessus
prion
prion
Format string
2013-10-17 00:55:00
securityvulns
securityvulns
[SECURITY] [DSA 2887-1] ruby-actionmailer-3.2 security update
2014-05-04 00:00:00
Ruby Actionpack / Actionmailer multiple security vulnerabilities
2014-05-04 00:00:00
[SECURITY] [DSA 2888-1] ruby-actionpack-3.2 security update
2014-05-04 00:00:00
openvas
openvas
Fedora Update for rubygem-actionmailer FEDORA-2014-0970
2014-01-27 00:00:00
Debian: Security Advisory (DSA-2887-1)
2014-03-26 00:00:00
github
github
actionmailer email address processing causes Denial of service
2017-10-24 18:33:37
ubuntucve
ubuntucve
CVE-2013-4389
2013-10-17 00:00:00
fedora
fedora
[SECURITY] Fedora 19 Update: rubygem-activesupport-3.2.13-2.fc19
2014-01-24 07:50:26
[SECURITY] Fedora 19 Update: rubygem-actionmailer-3.2.13-2.fc19
2014-01-24 07:50:26
[SECURITY] Fedora 19 Update: rubygem-actionpack-3.2.13-4.fc19
2014-01-24 07:50:26
debian
debian
[SECURITY] [DSA 2887-1] ruby-actionmailer-3.2 security update
2014-03-27 15:03:09
[SECURITY] [DSA 2888-1] ruby-actionpack-3.2 security update
2014-03-27 15:04:16
cve
cve
CVE-2013-4389
2013-10-17 00:55:00
debiancve
debiancve
CVE-2013-4389
2013-10-17 00:55:00
osv
osv
actionmailer email address processing causes Denial of service
2017-10-24 18:33:37
rubygems
rubygems
CVE-2013-4389 rubygem-actionmailer: email address processing DoS
2013-10-15 20:00:00
4.3 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:N/I:N/A:P
0.011 Low
EPSS
Percentile
83.9%
Related for GITLAB-E60F73B75D2CCE6370D549C9EBCCB575