Lucene search
K

CVE-2014-8090

🗓️ 21 Nov 2014 15:59:04Reported by [email protected]Type 
nvd
 nvd
🔗 web.nvd.nist.gov👁 22 Views

The REXML parser in Ruby versions 1.9.x before 1.9.3 patchlevel 551, 2.0.x before 2.0.0 patchlevel 598, and 2.1.x before 2.1.5 allows remote attackers to cause a denial of service (CPU and memory consumption) via an XML Entity Expansion (XEE) attack exploiting an incomplete fix for CVE-2013-1821 and CVE-2014-8080

Related
Detection
Refs
NVD
Node
ruby-langrubyRange1.9.3p550
OR
ruby-langrubyMatch1.9.3
OR
ruby-langrubyMatch1.9.3p0
OR
ruby-langrubyMatch1.9.3p125
OR
ruby-langrubyMatch1.9.3p194
OR
ruby-langrubyMatch1.9.3p286
OR
ruby-langrubyMatch1.9.3p383
OR
ruby-langrubyMatch1.9.3p385
OR
ruby-langrubyMatch1.9.3p392
OR
ruby-langrubyMatch1.9.3p426
OR
ruby-langrubyMatch1.9.3p429
OR
ruby-langrubyMatch1.9.3p448
OR
ruby-langrubyMatch1.9.3p545
OR
ruby-langrubyMatch1.9.3p547
OR
ruby-langrubyMatch2.0.0
OR
ruby-langrubyMatch2.0.0p0
OR
ruby-langrubyMatch2.0.0p195
OR
ruby-langrubyMatch2.0.0p247
OR
ruby-langrubyMatch2.0.0p451
OR
ruby-langrubyMatch2.0.0p481
OR
ruby-langrubyMatch2.0.0p576
OR
ruby-langrubyMatch2.0.0p594
OR
ruby-langrubyMatch2.1.1
OR
ruby-langrubyMatch2.1.2
OR
ruby-langrubyMatch2.1.3
OR
ruby-langrubyMatch2.1.4

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation