JVN#90615481: Ruby hash table implementation vulnerable to denial-of-service

The hash table implementation in Ruby contains an issue, where it may intentionally create a series of strings whose hash values collide. As a result, a denial-of-service (DoS) attack may be conducted.

Impact

When processing a series of specially crafted strings, a denial-of-service (DoS) may occur.

Solution

Update the Software
Update to the latest version according to the information provided by the developer.

Products Affected

• Ruby versions prior to 1.8.7-p357
• Ruby 1.9.x versions prior to 1.9.1