Lucene search
+L

3 matches found

RedHat Linux
RedHat Linux
added 2021/06/29 4:10 p.m.9 views

ruby: Regular expression denial of service vulnerability of WEBrick's Digest authentication

WEBrick::HTTPAuth::DigestAuth in Ruby through 2.4.7, 2.5.x through 2.5.6, and 2.6.x through 2.6.4 has a regular expression Denial of Service cause by looping/backtracking. A victim must expose a WEBrick server that uses DigestAuth to the Internet or a untrusted network...

7.8CVSS7.2AI score0.05128EPSS
SaveExploits0References5
OSV
OSV
added 2019/11/26 6:15 p.m.8 views

ALPINE-CVE-2019-16201

WEBrick::HTTPAuth::DigestAuth in Ruby through 2.4.7, 2.5.x through 2.5.6, and 2.6.x through 2.6.4 has a regular expression Denial of Service cause by looping/backtracking. A victim must expose a WEBrick server that uses DigestAuth to the Internet or a untrusted network...

7.5CVSS6.9AI score0.05128EPSS
SaveExploits0References1
RubySec
RubySec
added 2019/10/01 12:0 a.m.62 views

Regular Expression Denial of Service vulnerability of WEBrick's Digest access authentication

Regular expression denial of service vulnerability of WEBrick’s Digest authentication module was found. An attacker can exploit this vulnerability to cause an effective denial of service against a WEBrick service...

7.8CVSS6.7AI score0.05128EPSS
SaveExploits0References1Affected Software1
Rows per page
Query Builder