Lucene search
K

7 matches found

AstraLinux
AstraLinux
added 2026/05/03 11:59 p.m.2 views

Astra Linux - уязвимость в ruby-websocket-extensions

The websocket-extensions Ruby module before version 0.1.5 allowed Denial of Service DoS attacks through Regex backtracking. The extension parser could take quadratic time when parsing a header containing an unclosed string parameter value whose content was a repeated two-byte sequence of a...

7.5CVSS7.1AI score0.02622EPSS
Exploits1References1
OPENSUSE Linux
OPENSUSE Linux
added 2026/03/18 12:0 a.m.2 views

ruby4.0-rubygem-websocket-extensions-0.1.5-1.24 on GA media (moderate)

ruby4.0-rubygem-websocket-extensions-0.1.5-1.24 on GA media Announcement ID: openSUSE-SU-2026:10368-1 Rating: moderate Cross-References: CVE-2020-7663 CVSS scores: CVE-2020-7663 SUSE : 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L Affected Products: openSUSE Tumbleweed An update that solves on...

4.3CVSS7.1AI score0.02622EPSS
Exploits1
OSV
OSV
added 2026/03/13 12:0 a.m.2 views

OPENSUSE-SU-2026:10368-1 ruby4.0-rubygem-websocket-extensions-0.1.5-1.24 on GA media

These are all security issues fixed in the ruby4.0-rubygem-websocket-extensions-0.1.5-1.24 package on the GA media of openSUSE Tumbleweed...

7.5CVSS5.8AI score0.02622EPSS
Exploits1References1
Redos
Redos
added 2025/07/24 12:0 a.m.5 views

ROS-20250724-06

A vulnerability in the Ruby websocket-extensions module that supports the implementation of WebSocket extensions is related to spending quadratic time parsing a header containing an unclosed string parameter value, which is a repeating two-byte sequence of backslash and some of backslash and some...

7.5CVSS7.4AI score0.02622EPSS
Exploits1
Ubuntu
Ubuntu
added 2020/09/16 1:7 p.m.81 views

USN-4502-1: websocket-extensions vulnerability

It was discovered that websocket-extensions does not properly parse special headers. A remote attacker could use this issue to cause regex backtracking, resulting in a denial of service. CVE-2020-7663...

7.5CVSS7.4AI score0.02622EPSS
Exploits1
OpenVAS
OpenVAS
added 2020/08/20 12:0 a.m.18 views

Debian: Security Advisory (DLA-2334-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5CVSS7.6AI score0.02622EPSS
Exploits1References3
Debian
Debian
added 2020/08/19 12:1 p.m.38 views

[SECURITY] [DLA 2334-1] ruby-websocket-extensions security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-2334-1 [email protected] https://www.debian.org/lts/security/ Chris Lamb August 19, 2020 https://wiki.debian.org/LTS -...

7.5CVSS7.5AI score0.02622EPSS
Exploits1
Rows per page
Query Builder