PT-2024-30542 · Fugit +1 · Fugit +1

🗓️ 19 Aug 2024 00:00:00Reported by Positive TechnologiesType

ptsecurity

ptsecurity🔗 dbugs.ptsecurity.com👁 3 Views

Fugit before 1.11.1 may hang on long input, stalling a thread; upgrade to 1.11.1.

Reporter	Title	Published	Views	Family All 28
IBM Security Bulletins	Security Bulletin: Multiple Vulnerabilities in IBM CloudPak for AIOps	15 Apr 202503:03	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Guardium Data Security Center is affected by multiple vulnerabilities	15 Apr 202503:11	–	ibm
IBM Security Bulletins	Security Bulletin: A vulnerability in fugit gem affects IBM License Metric Tool (CVE-2024-43380).	17 Sep 202408:55	–	ibm
Chainguard	CVE-2024-43380 vulnerabilities	19 Aug 202415:15	–	cgr
Circl	CVE-2024-43380	19 Aug 202417:41	–	circl
CNNVD	fugit 安全漏洞	19 Aug 202400:00	–	cnnvd
CVE	CVE-2024-43380	19 Aug 202414:37	–	cve
Cvelist	CVE-2024-43380 fugit parse and parse_nat stall on lengthy input	19 Aug 202414:37	–	cvelist
Debian CVE	CVE-2024-43380	19 Aug 202414:37	–	debiancve
Elastic	Logstash 8.15.1 Security Update (ESA-2024-35)	8 Apr 202515:56	–	elastic

Source	Link
github	www.github.com/rubysec/ruby-advisory-db/blob/master/gems/fugit/CVE-2024-43380.yml
github	www.github.com/floraison/fugit/security/advisories/GHSA-2m96-52r3-2f3g
github	www.github.com/floraison/fugit/commit/ad2c1c9c737213d585fff0b51c927d178b2c05a5
github	www.github.com/floraison/fugit/issues/104
cve	www.cve.mitre.org/cgi-bin/cvename.cgi
security-tracker	www.security-tracker.debian.org/tracker/source-package/ruby-fugit
osv	www.osv.dev/vulnerability/GHSA-2m96-52r3-2f3g
ubuntu	www.ubuntu.com/security/CVE-2024-43380
nvd	www.nvd.nist.gov/vuln/detail/CVE-2024-43380
osv	www.osv.dev/vulnerability/CVE-2024-43380

23 Aug 2024 00:00Current

8.8High risk

Vulners AI Score8.8

CVSS 3.15.3 - 7.5

EPSS0.00237

SSVC

fugit prior parser hang long input thread stall upgrade 1.11.1 input limit