Lucene search
+L

3 matches found

OSV
OSV
added 2020/03/10 6:2 p.m.12 views

GHSA-PCQQ-5962-HVCW Denial of Service in uap-core when processing crafted User-Agent strings

Impact Some regexes are vulnerable to regular expression denial of service REDoS due to overlapping capture groups. This allows remote attackers to overload a server by setting the User-Agent header in an HTTPS request to maliciously crafted long strings. Patches Please update uap-ruby to = v2.6....

7.2AI score
SaveExploits0References3
Github Security Blog
Github Security Blog
added 2020/03/10 6:2 p.m.71 views

Denial of Service in uap-core when processing crafted User-Agent strings

Impact Some regexes are vulnerable to regular expression denial of service REDoS due to overlapping capture groups. This allows remote attackers to overload a server by setting the User-Agent header in an HTTPS request to maliciously crafted long strings. Patches Please update uap-ruby to = v2.6....

3.1AI score
SaveExploits0References4Affected Software1
RubySec
RubySec
added 2020/03/10 12:0 a.m.22 views

Denial of Service in uap-core when processing crafted User-Agent strings

Impact Some regexes are vulnerable to regular expression denial of service REDoS due to overlapping capture groups. This allows remote attackers to overload a server by setting the User-Agent header in an HTTPS request to maliciously crafted long strings. Patches Please update uap-ruby to = v2.6....

7.5CVSS7.2AI score0.02261EPSS
SaveExploits1References1Affected Software1
Rows per page
Query Builder