Lucene search
Gentoo FoundationMGASA-2013-0297HistoryOct 10, 2013 - 2:29 a.m.
Updated ruby-RubyGems package fixes security vulnerabilies
2013-10-1002:29:35
Gentoo Foundation
advisories.mageia.org
15
CVSS2
4.3
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:N/I:N/A:P
EPSS
0.018
Percentile
88.3%
Updated ruby-RubyGems package fixes security vulnerability: RubyGems validates versions with a regular expression that is vulnerable to denial of service due to a backtracking regular expression. For specially crafted RubyGems versions attackers can cause denial of service through CPU consumption (CVE-2013-4287, CVE-2013-4363).
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Mageia | 3 | noarch | ruby-rubygems | < 1.8.27-1 | ruby-RubyGems-1.8.27-1.mga3 |
Related
openvas
openvas
Fedora Update for rubygems FEDORA-2013-17649
2013-10-08 00:00:00
Amazon Linux: Security Advisory (ALAS-2013-231)
2015-09-08 00:00:00
Amazon Linux: Security Advisory (ALAS-2014-290)
2015-09-08 00:00:00
amazon
amazon
Medium: ruby19
2014-02-26 14:27:00
Medium: rubygems
2013-10-16 20:52:00
Medium: rubygems
2013-09-26 22:22:00
cvelist
cvelist
CVE-2013-4363
2013-10-17 23:00:00
CVE-2013-4287
2013-10-17 23:00:00
prion
prion
Design/Logic Flaw
2013-10-17 23:55:00
Design/Logic Flaw
2013-10-17 23:55:00
osv
osv
RubyGems Regular Expression Denial of Service
2022-05-17 00:16:50
RubyGems Regular Expression Denial of Service vulnerability
2022-05-14 01:08:27
fedora
fedora
[SECURITY] Fedora 18 Update: rubygems-1.8.25-8.fc18
2013-10-04 02:02:10
[SECURITY] Fedora 19 Update: rubygems-2.0.10-106.fc19
2013-10-04 02:01:04
[SECURITY] Fedora 19 Update: rubygems-2.0.8-104.fc19
2013-09-20 16:25:58
cve
cve
CVE-2013-4363
2013-10-17 23:55:04
CVE-2013-4287
2013-10-17 23:55:04
github
github
RubyGems Regular Expression Denial of Service
2022-05-17 00:16:50
RubyGems Regular Expression Denial of Service vulnerability
2022-05-14 01:08:27
nessus
nessus
Oracle Solaris Third-Party Patch Update : ruby (multiple_cryptographic_issues_vulnerabilities_in)
2015-01-19 00:00:00
Amazon Linux AMI : ruby19 (ALAS-2014-290)
2014-03-02 00:00:00
Amazon Linux AMI : rubygems (ALAS-2013-231)
2013-10-24 00:00:00
ubuntucve
ubuntucve
CVE-2013-4363
2013-10-17 00:00:00
CVE-2013-4287
2013-10-17 00:00:00
rubygems
rubygems
nvd
nvd
CVE-2013-4363
2013-10-17 23:55:04
CVE-2013-4287
2013-10-17 23:55:04
debiancve
debiancve
CVE-2013-4363
2013-10-17 23:55:04
CVE-2013-4287
2013-10-17 23:55:04
oraclelinux
oraclelinux
rubygems security update
2013-10-17 00:00:00
freebsd
freebsd
ruby-gems -- Algorithmic Complexity Vulnerability
2013-09-24 00:00:00
ruby-gems -- Algorithmic Complexity Vulnerability
2013-09-09 00:00:00
veracode
veracode
Denial Of Service (DoS) Via CPU Consumption
2019-01-15 08:57:26
redhat
redhat
(RHSA-2014:0207) Moderate: rubygems security update
2014-02-24 00:00:00
(RHSA-2013:1523) Moderate: ruby193-ruby security update
2013-11-14 00:00:00
(RHSA-2013:1427) Moderate: ruby193-ruby security update
2013-10-15 00:00:00
centos
centos
rubygems security update
2013-10-18 12:42:23
CVSS2
4.3
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:N/I:N/A:P
EPSS
0.018
Percentile
88.3%
Related for MGASA-2013-0297