Lucene search
+L

72 matches found

RedHat Linux
RedHat Linux
added 2008/10/21 2:52 p.m.6 views

ruby: Memory allocation failure in Ruby regex engine (remotely exploitable DoS)

The regular expression engine regex.c in Ruby 1.8.5 and earlier, 1.8.6 through 1.8.6-p286, 1.8.7 through 1.8.7-p71, and 1.9 through r18423 allows remote attackers to cause a denial of service infinite loop and crash via multiple long requests to a Ruby socket, related to memory allocation failure...

5CVSS7.2AI score0.15678EPSS
SaveExploits2References4
Snyk
Snyk
added 2008/08/14 11:41 p.m.10 views

Resource Management Errors

Overview Affected versions of this package are vulnerable to Resource Management Errors. The regular expression engine regex.c in Ruby 1.8.5 and earlier, 1.8.6 through 1.8.6-p286, 1.8.7 through 1.8.7-p71, and 1.9 through r18423 allows remote attackers to cause a denial of service infinite loop an...

5.3CVSS6.9AI score0.15678EPSS
SaveExploits2References2
Cvelist
Cvelist
added 2008/08/14 11:0 p.m.30 views

CVE-2008-3443

The regular expression engine regex.c in Ruby 1.8.5 and earlier, 1.8.6 through 1.8.6-p286, 1.8.7 through 1.8.7-p71, and 1.9 through r18423 allows remote attackers to cause a denial of service infinite loop and crash via multiple long requests to a Ruby socket, related to memory allocation failure...

6.5AI score0.15678EPSS
SaveExploits2References26
UbuntuCve
UbuntuCve
added 2008/08/14 12:0 a.m.29 views

CVE-2008-3443

The regular expression engine regex.c in Ruby 1.8.5 and earlier, 1.8.6 through 1.8.6-p286, 1.8.7 through 1.8.7-p71, and 1.9 through r18423 allows remote attackers to cause a denial of service infinite loop and crash via multiple long requests to a Ruby socket, related to memory allocation failure...

5CVSS7.1AI score0.15678EPSS
SaveExploits2References3
RubySec
RubySec
added 2008/08/14 12:0 a.m.36 views

Ruby Memory allocation failure in Ruby regex engine (remotely exploitable DoS)

The regular expression engine regex.c in Ruby 1.8.5 and earlier, 1.8.6 through 1.8.6-p286, 1.8.7 through 1.8.7-p71, and 1.9 through r18423 allows remote attackers to cause a denial of service infinite loop and crash via multiple long requests to a Ruby socket, related to memory allocation failure...

5CVSS6.6AI score0.15678EPSS
SaveExploits2References1Affected Software1
exploitpack
exploitpack
added 2008/08/13 12:0 a.m.28 views

Ruby 1.9 - regex engine Remote Socket Memory Leak

Ruby 1.9 - regex engine Remote Socket Memory Leak ------------------------------------------------------- Language : Ruby Web Site: www.ruby-lang.org Platform: All Bug: Remote Socket Memory Leak Products Affected: 1.8 series: - 1.8.5 and all prior versions - 1.8.6-p286 and all prior versions -...

0.2AI score
SaveExploits0
zdt
zdt
added 2008/08/13 12:0 a.m.22 views

Ruby <= 1.9 (regex engine) Remote Socket Memory Leak Exploit

Exploit for multiple platform in category dos / poc ============================================================ Ruby = 1.9 regex engine Remote Socket Memory Leak Exploit ============================================================ ------------------------------------------------------- Language ...

7.1AI score
SaveExploits0
Tenable Nessus
Tenable Nessus
added 2008/04/22 12:0 a.m.32 views

openSUSE 10 Security Update : OpenOffice_org (OpenOffice_org-5053)

This update of OpenOffice fixes various critical security vulnerabilities - heap-overflow when parsing PPT files CVE-2008-0320 - various buffer-overflows while parsing QPRO files CVE-2007-5745, CVE-2007-5747 - out-of-bound memory access and a heap-overflow in the regex engine of libICU...

9.3CVSS8.2AI score0.57015EPSS
SaveExploits10References5
Tenable Nessus
Tenable Nessus
added 2007/12/13 12:0 a.m.31 views

SuSE 10 Security Update : perl (ZYPP Patch Number 4665)

This update fixes a buffer overflow in perl's regex engine. CVE-2007-5116 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C Novell, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; if description scriptid29550; scriptversion"1.17";...

7.5CVSS9.5AI score0.0483EPSS
SaveExploits1References2
RedHat Linux
RedHat Linux
added 2007/11/29 3:6 p.m.7 views

pcre integer overflow

Integer overflow in Perl-Compatible Regular Expression PCRE library before 6.7 might allow context-dependent attackers to execute arbitrary code via a regular expression that involves large 1 min, 2 max, or 3 duplength values that cause an incorrect length calculation and trigger a buffer overflo...

6.8CVSS6.3AI score0.03661EPSS
SaveExploits0References4
Tenable Nessus
Tenable Nessus
added 2007/11/20 12:0 a.m.33 views

openSUSE 10 Security Update : perl (perl-4675)

This update fixes a buffer overflow in perl's regex engine. CVE-2007-5116 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update perl-4675. The text description of this plugin is C SUSE LLC...

7.5CVSS9.5AI score0.0483EPSS
SaveExploits1References1
UbuntuCve
UbuntuCve
added 2007/11/07 11:46 p.m.28 views

CVE-2007-5116

Buffer overflow in the polymorphic opcode support in the Regular Expression Engine regcomp.c in Perl 5.8 allows context-dependent attackers to execute arbitrary code by switching from byte to Unicode UTF characters in a regular expression...

7.5CVSS7.5AI score0.0483EPSS
SaveExploits1References2
Rows per page
Query Builder