Lucene search
K

6 matches found

Prion
Prion
added 2023/09/14 8:15 a.m.22 views

Input validation

Improper Input Validation, Uncontrolled Resource Consumption vulnerability in Apache Commons Compress in TAR parsing.This issue affects Apache Commons Compress: from 1.22 before 1.24.0. Users are recommended to upgrade to version 1.24.0, which fixes the issue. A third party can create a malformed...

1.9CVSS6.3AI score0.01834EPSS
Exploits1References2Affected Software1
Cvelist
Cvelist
added 2023/09/14 7:45 a.m.23 views

CVE-2023-42503 Apache Commons Compress: Denial of service via CPU consumption for malformed TAR file

Improper Input Validation, Uncontrolled Resource Consumption vulnerability in Apache Commons Compress in TAR parsing.This issue affects Apache Commons Compress: from 1.22 before 1.24.0. Users are recommended to upgrade to version 1.24.0, which fixes the issue. A third party can create a malformed...

6.7AI score0.00014EPSS
Exploits0References2
Veracode
Veracode
added 2020/04/10 12:59 a.m.34 views

Arbitrary Code Execution

ruby is vulnerable to arbitrary code execution. A flaw was found in the way large amounts of memory were allocated on 64-bit systems when using the BigDecimal class. A context-dependent attacker could use this flaw to cause memory corruption, causing a Ruby application that uses the BigDecimal...

6.8CVSS3.6AI score0.01937EPSS
Exploits0References16Affected Software1
OpenVAS
OpenVAS
added 2011/07/08 12:0 a.m.25 views

RedHat Update for ruby RHSA-2011:0908-01

The remote host is missing an update for the SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

7.5CVSS7.2AI score0.21101EPSS
Exploits4References2
Prion
Prion
added 2011/03/23 2:0 a.m.27 views

Integer overflow

The VpMemAlloc function in bigdecimal.c in the BigDecimal class in Ruby 1.9.2-p136 and earlier, as used on Apple Mac OS X before 10.6.7 and other platforms, does not properly allocate memory, which allows context-dependent attackers to execute arbitrary code or cause a denial of service applicati...

6.8CVSS7.8AI score0.01937EPSS
Exploits0References10Affected Software1
UbuntuCve
UbuntuCve
added 2011/03/22 12:0 a.m.29 views

CVE-2011-0188

The VpMemAlloc function in bigdecimal.c in the BigDecimal class in Ruby 1.9.2-p136 and earlier, as used on Apple Mac OS X before 10.6.7 and other platforms, does not properly allocate memory, which allows context-dependent attackers to execute arbitrary code or cause a denial of service applicati...

6.8CVSS6.8AI score0.01937EPSS
Exploits0References2
Rows per page
Query Builder