CVE-2021-32823

CVE-2021-32823 affects the bindata RubyGem prior to version 2.4.10, where creating certain BinData classes (e.g., Bit100000, Bit100001, Bit100002, Bit) can cause a CPU-based denial of service, especially in combination with user_input.constantize. The vulnerability has been documented across mult...

BinData 安全漏洞

BinData is an open source declarative way to read and write structured binary data.BinData makes it easy to create new data types. It supports all common primitive data types found in the structured binary data format . Support for dependencies and variable length fields is built in. A security...

CVE-2021-32823: Uncontrolled Resource Consumption

In the bindata RubyGem before version 2.4.10 there is a potential denial-of-service vulnerability. In affected versions it is very slow for certain classes in BinData to be created. For example BinData::Bit100000, BinData::Bit100001, BinData::Bit100002, BinData::Bit . In combination with...

PT-2021-4288 · Ruby +2 · Bindata +2

Name of the Vulnerable Software and Affected Versions: bindata RubyGem versions prior to 2.4.10 Description: The issue is related to a potential denial-of-service vulnerability in the bindata RubyGem. In affected versions, it is very slow for certain classes in BinData to be created, such as...

Potential Denial-of-Service in bindata

In bindata before version 2.4.10, there is a potential denial-of-service vulnerability. In affected versions, it is very slow for certain classes in BinData to be created. For example BinData::Bit100000, BinData::Bit100001, BinData::Bit100002, BinData::Bit. In combination with .constantize there ...

Arbitrary TCP Connection Proxy: BinProxy

Arbitrary TCP Connection Proxy BinProxy is a proxy for arbitrary TCP connections. You can define custom message formats using the BinData gem. BinProxy is a tool for understanding and manipulating binary network traffic. BinProxy gives you a TCP proxy and an interface to write protocol-specific...