Lucene search

K
osvGoogleOSV:USN-6853-1
HistoryJun 26, 2024 - 12:27 p.m.

ruby2.7, ruby3.0, ruby3.1 vulnerability

2024-06-2612:27:29
Google
osv.dev
1
ruby
vulnerability
ungetbyte
ungetc
remote attacker
denial of service
sensitive information
software

7.3 High

AI Score

Confidence

High

0 Low

EPSS

Percentile

0.0%

It was discovered that Ruby incorrectly handled the ungetbyte and ungetc
methods. A remote attacker could use this issue to cause Ruby to crash,
resulting in a denial of service, or possibly obtain sensitive information.