Lucene search
+L

CVE-2014-8090

🗓️ 21 Nov 2014 15:59:04Reported by [email protected]Type 
nvd
 nvd
🔗 web.nvd.nist.gov👁 24 Views

The REXML parser in Ruby versions 1.9.x before 1.9.3 patchlevel 551, 2.0.x before 2.0.0 patchlevel 598, and 2.1.x before 2.1.5 allows remote attackers to cause a denial of service (CPU and memory consumption) via an XML Entity Expansion (XEE) attack exploiting an incomplete fix for CVE-2013-1821 and CVE-2014-8080

Related
Detection
Refs
NVD
Node
OR
ruby-langrubyRange1.9.3p550
ruby-langrubyMatch1.9.3
ruby-langrubyMatch1.9.3p0
ruby-langrubyMatch1.9.3p125
ruby-langrubyMatch1.9.3p194
ruby-langrubyMatch1.9.3p286
ruby-langrubyMatch1.9.3p383
ruby-langrubyMatch1.9.3p385
ruby-langrubyMatch1.9.3p392
ruby-langrubyMatch1.9.3p426
ruby-langrubyMatch1.9.3p429
ruby-langrubyMatch1.9.3p448
ruby-langrubyMatch1.9.3p545
ruby-langrubyMatch1.9.3p547
ruby-langrubyMatch2.0.0
ruby-langrubyMatch2.0.0p0
ruby-langrubyMatch2.0.0p195
ruby-langrubyMatch2.0.0p247
ruby-langrubyMatch2.0.0p451
ruby-langrubyMatch2.0.0p481
ruby-langrubyMatch2.0.0p576
ruby-langrubyMatch2.0.0p594
ruby-langrubyMatch2.1.1
ruby-langrubyMatch2.1.2
ruby-langrubyMatch2.1.3
ruby-langrubyMatch2.1.4

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation