Advisory ROSA-SA-2021-1826

Software: ed 1.9 OS: Cobalt 7.9 CVE-ID: CVE-2015-2987 CVE-Crit: MEDIUM CVE-DESC: Type74 ED before 4.0 incorrectly uses 128-bit ECB encryption for small files, making it easier for attackers to obtain plaintext data by differential cryptanalysis of a file with an original length of less than 128...

Huawei EulerOS: Security Advisory for ed (EulerOS-SA-2019-2572)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

EulerOS 2.0 SP2 : ed (EulerOS-SA-2019-2507)

According to the version of the ed package installed, the EulerOS installation on the remote host is affected by the following vulnerability : - regex.c in GNU ed before 1.14.1 allows attackers to cause a denial of service crash via a malformed command, which triggers an invalid free.CVE-2017-535...

EulerOS 2.0 SP5 : ed (EulerOS-SA-2019-1962)

According to the version of the ed package installed, the EulerOS installation on the remote host is affected by the following vulnerability : - regex.c in GNU ed before 1.14.1 allows attackers to cause a denial of service crash via a malformed command, which triggers an invalid free.CVE-2017-535...

CVE-2017-5357

regex.c in GNU ed before 1.14.1 allows attackers to cause a denial of service crash via a malformed command, which triggers an invalid free...

Ruby regex.c远程拒绝服务漏洞

BUGTRAQ ID: 30682 CVECAN ID: CVE-2008-3443 Ruby是一种功能强大的面向对象的脚本语言。 Ruby的正则表达式引擎（regex.c）没有正确地为套接字分配内存，如果远程攻击者向ruby套接字发送了多个超长请求的话，就会导致ruby陷入死循环并崩溃。 Yukihiro Matsumoto Ruby 1.9.x Yukihiro Matsumoto Ruby 1.8.x 厂商补丁： Debian ------ Debian已经为此发布了一个安全公告（DSA-1695-1）以及相应补丁: DSA-1695-1：New Ruby packages fix...

CVE-2008-3443

CVE-2008-3443 affects Ruby’s regex engine in Ruby 1.8.5 and earlier, 1.8.6 through 1.8.6-p286, 1.8.7 through 1.8.7-p71, and 1.9 through r18423. The issue enables remote attackers to cause a denial of service (infinite loop and crash) by sending multiple long requests to a Ruby socket (notably Web...