52 matches found
CVE-2026-49158 Apache Thrift: Ruby THeaderTransport ZLIB Decompression Bomb
Improper Handling of Highly Compressed Data Data Amplification vulnerability in Apache Thrift Ruby bindings. This issue affects Apache Thrift: before 0.24.0. Users are recommended to upgrade to version 0.24.0, which fixes the issue...
CVE-2026-49158
CVE-2026-49158 describes an Improper Handling of Highly Compressed Data (Data Amplification) in the Apache Thrift Ruby bindings (THeaderTransport). The issue affects Thrift versions before 0.24.0. The vulnerability allows amplification of data via ZLIB decompression, which can impact availability...
Improper Handling of Highly Compressed Data (Data Amplification)
Overview thrift is a Ruby bindings package for Apache Thrift. Affected versions of this package are vulnerable to Improper Handling of Highly Compressed Data Data Amplification through the ZLIB transform in lib/rb/lib/thrift/transport/headertransport.rb. An attacker can trigger memory and CPU...
CVE-2026-49158 Apache Thrift: Ruby THeaderTransport ZLIB Decompression Bomb
Improper Handling of Highly Compressed Data Data Amplification vulnerability in Apache Thrift Ruby bindings. This issue affects Apache Thrift: before 0.24.0. Users are recommended to upgrade to version 0.24.0, which fixes the issue...
CVE-2026-49158
Improper Handling of Highly Compressed Data Data Amplification vulnerability in Apache Thrift Ruby bindings. This issue affects Apache Thrift: before 0.24.0. Users are recommended to upgrade to version 0.24.0, which fixes the issue...
CVE-2026-49158
Improper Handling of Highly Compressed Data Data Amplification vulnerability in Apache Thrift Ruby bindings. This issue affects Apache Thrift: before 0.24.0. Users are recommended to upgrade to version 0.24.0, which fixes the issue...
PT-2026-64883
Name of the Vulnerable Software and Affected Versions Apache Thrift versions prior to 0.24.0 Description Improper handling of highly compressed data, known as data amplification, exists in the Apache Thrift Ruby bindings. This issue occurs during ZLIB decompression within the THeaderTransport...
OESA-2022-1752 rubygem-yajl-ruby security update
Ruby C bindings to the excellent Yajl JSON stream-based parser library. Security Fixes: yajl-ruby is a C binding to the YAJL JSON parsing and generation library. The 1.x branch and the 2.x branch of yajl contain an integer overflow which leads to subsequent heap memory corruption when dealing wit...
HTTP Request Smuggling
Overview llhttp is a set of Ruby bindings for llhttp. Affected versions of this package are vulnerable to HTTP Request Smuggling when the llhttp parser in the http module does not correctly parse and validate Transfer-Encoding headers. Remediation A fix was pushed into the master branch but not y...
HTTP Request Smuggling
Overview llhttp is a set of Ruby bindings for llhttp. Affected versions of this package are vulnerable to HTTP Request Smuggling. The llhttp parser in the http module does not correctly handle multi-line Transfer-Encoding headers. Remediation There is no fixed version for llhttp. References -...
HTTP Request Smuggling
Overview llhttp is a set of Ruby bindings for llhttp. Affected versions of this package are vulnerable to HTTP Request Smuggling via llhttp. The parse ignores chunk extensions when parsing the body of chunked requests. Remediation There is no fixed version for llhttp. References - GitHub Commit -...
Fedora: Security Advisory for hivex (FEDORA-2021-775b170f95)
The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
[SECURITY] Fedora 20 Update: ruby-qt-4.14.1-1.fc20
This package includes ruby bindings for Qt 4...
Fedora Update for ruby-qt FEDORA-2013-13499
Check for the Version of ruby-qt OpenVAS Vulnerability Test Fedora Update for ruby-qt FEDORA-2013-13499 Authors: System Generated Check Copyright: Copyright c 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...
Fedora Update for ruby-korundum FEDORA-2013-13112
Check for the Version of ruby-korundum OpenVAS Vulnerability Test Fedora Update for ruby-korundum FEDORA-2013-13112 Authors: System Generated Check Copyright: Copyright c 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it...
Fedora Update for ruby-qt FEDORA-2013-13112
Check for the Version of ruby-qt OpenVAS Vulnerability Test Fedora Update for ruby-qt FEDORA-2013-13112 Authors: System Generated Check Copyright: Copyright c 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...
[SECURITY] Fedora 17 Update: ruby-qt-4.10.5-1.fc17
This package includes ruby bindings for Qt 4...
[SECURITY] Fedora 18 Update: ruby-qt-4.10.5-1.fc18
This package includes ruby bindings for Qt 4...
Fedora Update for ruby-korundum FEDORA-2013-10182
Check for the Version of ruby-korundum OpenVAS Vulnerability Test Fedora Update for ruby-korundum FEDORA-2013-10182 Authors: System Generated Check Copyright: Copyright c 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it...