CVE-2017-11465

The parseryyerror function in the UTF-8 parser in Ruby 2.4.1 allows attackers to cause a denial of service invalid write or read or possibly have unspecified other impact via a crafted Ruby script, related to the parsertokaddutf8 function in parse.y. NOTE: this might have security relevance as a...

CVE-2017-11465

Removed by vendor...

PT-2017-2568

Name of the Vulnerable Software and Affected Versions Ruby versions 2.4.1 Description The issue is related to a buffer overflow in the parser yyerror function of the UTF-8 parser in the Ruby interpreter. This can be exploited by a remote attacker using a specially crafted Ruby script that interac...