85 matches found
Linux Distros Unpatched Vulnerability : CVE-2021-32740
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Addressable is an alternative implementation to the URI implementation that is part of Ruby's standard library. An uncontrolled resource consumption vulnerabili...
Linux Distros Unpatched Vulnerability : CVE-2019-5108
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An exploitable denial-of-service vulnerability exists in the Linux kernel prior to mainline 5.3. An attacker could exploit this vulnerability by triggering AP t...
net: mvpp2: Prevent parser TCAM memory corruption
...
SUSE CVE-2021-32740
Addressable is an alternative implementation to the URI implementation that is part of Ruby's standard library. An uncontrolled resource consumption vulnerability exists after version 2.3.0 through version 2.7.0. Within the URI template implementation in Addressable, a maliciously crafted templat...
Mageia: Security Advisory (MGASA-2021-0417)
The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Security Bulletin: Vulnerability in addressable - CVE-2021-32740 impacts IBM Watson Machine Learning Accelerator
Summary Addressable is used IBM Watson Machine Learning Accelerator. This bulletin provides mitigations for the addressable vulnerability CVE-2021-32740 by upgrading addressable to latest version. Vulnerability Details Refer to the security bulletins listed in the Remediation/Fixes section Affect...
PT-2025-8472
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A vulnerability in the Linux kernel has been resolved, specifically in the rtw89 module. The issue involves CAM leaks during the L2 reset process and ieee80211 restart hw function call...
rubygem-addressable: ReDoS in templates
A resource-consumption vulnerability was found in rubygem addressable, where its URI template implementation could allow an attacker's crafted template to consume resources, resulting in a denial of service. The highest threat from this vulnerability is to system availability...
Updated ruby-addressable packages fix security vulnerability
A security flaw was found on rubygem-addressable that a crafted template may cause a Denial of Service CVE-2021-32740...
MGASA-2021-0417 Updated ruby-addressable packages fix security vulnerability
A security flaw was found on rubygem-addressable that a crafted template may cause a Denial of Service CVE-2021-32740...
SUSE-SU-2021:2928-1 Security update for rubygem-addressable
This update for rubygem-addressable fixes the following issues: - CVE-2021-32740: Fixed denial of service via maliciously crafted templates bsc1188207...
SUSE-SU-2021:2927-1 Security update for rubygem-addressable
This update for rubygem-addressable fixes the following issues: - CVE-2021-32740: Fixed denial of service via maliciously crafted templates bsc1188207...
Fedora: Security Advisory for rubygem-addressable (FEDORA-2021-5d14763df8)
The remote host is missing an update for the Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...
Fedora: Security Advisory for rubygem-addressable (FEDORA-2021-e9fc035565)
The remote host is missing an update for the Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...
[SECURITY] Fedora 33 Update: rubygem-addressable-2.7.0-5.fc33
Addressable is an alternative implementation to the URI implementation that is part of Ruby's standard library. It is flexible, offers heuristic parsing, and additionally provides extensive support for IRIs and URI templates...
[SECURITY] Fedora 34 Update: rubygem-addressable-2.7.0-5.fc34
Addressable is an alternative implementation to the URI implementation that is part of Ruby's standard library. It is flexible, offers heuristic parsing, and additionally provides extensive support for IRIs and URI templates...
CVE-2021-32740 affecting package rubygem-addressable 2.7.0-1
CVE-2021-32740 affecting package rubygem-addressable 2.7.0-1. An upgraded version of the package is available that resolves this issue...
Regular Expression Denial of Service in Addressable templates
...
OESA-2021-1278 rubygem-addressable security update
Addressable is a replacement for the URI implementation that is part of Ruby's standard library. It more closely conforms to the relevant RFCs and adds support for URI and URL templates. Security Fixes: Addressable is an alternative implementation to the URI implementation that is part of Ruby's...
GHSA-JXHC-Q857-3J6G Regular Expression Denial of Service in Addressable templates
Impact Within the URI template implementation in Addressable, a maliciously crafted template may result in uncontrolled resource consumption, leading to denial of service when matched against a URI. In typical usage, templates would not normally be read from untrusted user input, but nonetheless,...