Lucene search
RubySecRUBY:RUBYGEMS-UPDATE-2013-4287-97163HistorySep 08, 2013 - 8:00 p.m.
CVE-2013-4287 rubygems: version regex algorithmic complexity vulnerability
2013-09-0820:00:00
RubySec
rubysec.com
8
Algorithmic complexity vulnerability in Gem::Version::VERSION_PATTERN
in lib/rubygems/version.rb in RubyGems before 1.8.23.1, 1.8.24 through 1.8.25, 2.0.x
before 2.0.8, and 2.1.x before 2.1.0, as used in Ruby 1.9.0 through 2.0.0p247, allows
remote attackers to cause a denial of service (CPU consumption) via a crafted gem
version that triggers a large amount of backtracking in a regular expression.
Related
fedora
fedora
[SECURITY] Fedora 20 Update: rubygems-2.0.8-104.fc20
2013-09-23 00:28:12
[SECURITY] Fedora 19 Update: rubygems-2.0.8-104.fc19
2013-09-20 16:25:58
[SECURITY] Fedora 18 Update: rubygems-1.8.25-7.fc18
2013-09-20 16:19:23
redhat
redhat
(RHSA-2013:1523) Moderate: ruby193-ruby security update
2013-11-14 00:00:00
(RHSA-2014:0207) Moderate: rubygems security update
2014-02-24 00:00:00
(RHSA-2013:1427) Moderate: ruby193-ruby security update
2013-10-15 00:00:00
osv
osv
RubyGems Regular Expression Denial of Service vulnerability
2022-05-14 01:08:27
RubyGems Regular Expression Denial of Service
2022-05-17 00:16:50
github
github
RubyGems Regular Expression Denial of Service vulnerability
2022-05-14 01:08:27
RubyGems Regular Expression Denial of Service
2022-05-17 00:16:50
openvas
openvas
Fedora Update for rubygems FEDORA-2013-16316
2013-09-24 00:00:00
Fedora Update for rubygems FEDORA-2013-16376
2013-09-24 00:00:00
Fedora Update for rubygems FEDORA-2013-16316
2013-09-24 00:00:00
veracode
veracode
Denial Of Service (DoS) Via CPU Consumption
2019-01-15 08:57:26
nessus
nessus
Fedora 19 : rubygems-2.0.8-104.fc19 (2013-16376)
2013-09-21 00:00:00
Fedora 20 : rubygems-2.0.8-104.fc20 (2013-16251)
2013-09-23 00:00:00
RHEL 6 : rubygems (RHSA-2014:0207)
2018-12-04 00:00:00
prion
prion
Design/Logic Flaw
2013-10-17 23:55:00
Design/Logic Flaw
2013-10-17 23:55:00
debiancve
debiancve
CVE-2013-4287
2013-10-17 23:55:00
CVE-2013-4363
2013-10-17 23:55:00
ubuntucve
ubuntucve
CVE-2013-4287
2013-10-17 00:00:00
CVE-2013-4363
2013-10-17 00:00:00
cve
cve
CVE-2013-4287
2013-10-17 23:55:00
CVE-2013-4363
2013-10-17 23:55:00
freebsd
freebsd
ruby-gems -- Algorithmic Complexity Vulnerability
2013-09-09 00:00:00
amazon
amazon
Medium: rubygems
2013-09-26 22:22:00
Medium: rubygems
2013-10-16 20:52:00
Medium: ruby19
2014-02-26 14:27:00
mageia
mageia
Updated ruby-RubyGems package fixes security vulnerabilies
2013-10-10 02:29:35
rubygems
rubygems
centos
centos
rubygems security update
2013-10-18 12:42:23
oraclelinux
oraclelinux
rubygems security update
2013-10-17 00:00:00
Related for RUBY:RUBYGEMS-UPDATE-2013-4287-97163