Lucene search
K

5 matches found

Github Security Blog
Github Security Blog
added 2017/10/24 6:33 p.m.46 views

actionmailer email address processing causes Denial of service

Multiple format string vulnerabilities in logsubscriber.rb files in the log subscriber component in Action Mailer in Ruby on Rails 3.x before 3.2.15 allow remote attackers to cause a denial of service via a crafted e-mail address that is improperly handled during construction of a log message...

4.3CVSS6.2AI score0.01333EPSS
Exploits1References9Affected Software1
UbuntuCve
UbuntuCve
added 2013/10/17 12:55 a.m.45 views

CVE-2013-4389

Multiple format string vulnerabilities in logsubscriber.rb files in the log subscriber component in Action Mailer in Ruby on Rails 3.x before 3.2.15 allow remote attackers to cause a denial of service via a crafted e-mail address that is improperly handled during construction of a log message...

4.3CVSS7.2AI score0.01333EPSS
Exploits1References2
Prion
Prion
added 2013/10/17 12:55 a.m.41 views

Format string

Multiple format string vulnerabilities in logsubscriber.rb files in the log subscriber component in Action Mailer in Ruby on Rails 3.x before 3.2.15 allow remote attackers to cause a denial of service via a crafted e-mail address that is improperly handled during construction of a log message...

4.3CVSS7.1AI score0.01333EPSS
Exploits1References6Affected Software3
Debian CVE
Debian CVE
added 2013/10/17 12:0 a.m.36 views

CVE-2013-4389

Multiple format string vulnerabilities in logsubscriber.rb files in the log subscriber component in Action Mailer in Ruby on Rails 3.x before 3.2.15 allow remote attackers to cause a denial of service via a crafted e-mail address that is improperly handled during construction of a log message...

4.3CVSS6.2AI score0.01333EPSS
Exploits1
RubySec
RubySec
added 2013/10/16 12:0 a.m.40 views

CVE-2013-4389 rubygem-actionmailer: email address processing DoS

Multiple format string vulnerabilities in logsubscriber.rb files in the log subscriber component in Action Mailer in Ruby on Rails 3.x before 3.2.15 allow remote attackers to cause a denial of service via a crafted e-mail address that is improperly handled during construction of a log message...

4.3CVSS4.9AI score0.01333EPSS
Exploits1References1Affected Software1
Rows per page
Query Builder