Lucene search
+L

3 matches found

OSV
OSV
•added 2020/03/10 6:02 p.m.•19 views

GHSA-PCQQ-5962-HVCW Denial of Service in uap-core when processing crafted User-Agent strings

Impact Some regexes are vulnerable to regular expression denial of service REDoS due to overlapping capture groups. This allows remote attackers to overload a server by setting the User-Agent header in an HTTPS request to maliciously crafted long strings. Patches Please update uap-ruby to = v2.6....

7.2AI score
SaveExploits0References3
Github Security Blog
Github Security Blog
•added 2020/03/10 6:02 p.m.•79 views

Denial of Service in uap-core when processing crafted User-Agent strings

Impact Some regexes are vulnerable to regular expression denial of service REDoS due to overlapping capture groups. This allows remote attackers to overload a server by setting the User-Agent header in an HTTPS request to maliciously crafted long strings. Patches Please update uap-ruby to = v2.6....

3.1AI score
SaveExploits0References4Affected Software1
RubySec
RubySec
•added 2020/03/10 12:00 a.m.•48 views

Denial of Service in uap-core when processing crafted User-Agent strings

Impact Some regexes are vulnerable to regular expression denial of service REDoS due to overlapping capture groups. This allows remote attackers to overload a server by setting the User-Agent header in an HTTPS request to maliciously crafted long strings. Patches Please update uap-ruby to = v2.6....

7.5CVSS7.2AI score0.02261EPSS
SaveExploits1References1Affected Software1
Rows per page
Query Builder