Lucene search
Ubuntu.comUB:CVE-2014-8080HistoryOct 29, 2014 - 12:00 a.m.
CVE-2014-8080
2014-10-2900:00:00
ubuntu.com
ubuntu.com
9
5 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:N/I:N/A:P
0.095 Low
EPSS
Percentile
94.6%
The REXML parser in Ruby 1.9.x before 1.9.3-p550, 2.0.x before 2.0.0-p594,
and 2.1.x before 2.1.4 allows remote attackers to cause a denial of service
(memory consumption) via a crafted XML document, aka an XML Entity
Expansion (XEE) attack.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| ubuntu | 12.04 | noarch | ruby1.8 | < 1.8.7.352-2ubuntu1.5 | UNKNOWN |
| ubuntu | 12.04 | noarch | ruby1.9.1 | < 1.9.3.0-1ubuntu2.9 | UNKNOWN |
| ubuntu | 14.04 | noarch | ruby1.9.1 | < 1.9.3.484-2ubuntu1.1 | UNKNOWN |
| ubuntu | 14.04 | noarch | ruby2.0 | < 2.0.0.484-1ubuntu2.1 | UNKNOWN |
| ubuntu | 14.10 | noarch | ruby2.0 | < 2.0.0.484+really457-3ubuntu1.1 | UNKNOWN |
| ubuntu | 14.10 | noarch | ruby2.1 | < 2.1.2-2ubuntu1.1 | UNKNOWN |
| ubuntu | 15.04 | noarch | ruby2.1 | < 2.1.2-2ubuntu2 | UNKNOWN |
| ubuntu | 15.10 | noarch | ruby2.1 | < 2.1.2-2ubuntu2 | UNKNOWN |
Related
nessus
nessus
Amazon Linux AMI : ruby20 (ALAS-2014-441)
2014-11-06 00:00:00
Amazon Linux AMI : ruby21 (ALAS-2014-439)
2014-11-06 00:00:00
Amazon Linux AMI : ruby21 (ALAS-2014-449)
2014-11-18 00:00:00
openvas
openvas
Amazon Linux: Security Advisory (ALAS-2014-441)
2015-09-08 00:00:00
Amazon Linux: Security Advisory (ALAS-2014-439)
2015-09-08 00:00:00
Ruby 'REXML' parser Denial-of-Service Vulnerability (Windows)
2014-11-21 00:00:00
amazon
amazon
prion
prion
Design/Logic Flaw
2014-11-03 16:55:00
Design/Logic Flaw
2014-11-21 15:59:00
mageia
mageia
Updated ruby packages fix CVE-2014-8080
2014-11-14 03:57:44
Updated ruby packages fix security vulnerabilities
2014-11-21 15:44:16
veracode
veracode
XML Entity Expansion (XEE)
2019-01-15 09:03:29
cve
cve
CVE-2014-8080
2014-11-03 16:55:00
CVE-2014-8090
2014-11-21 15:59:00
rubygems
rubygems
CVE-2014-8090 ruby: REXML incomplete fix for CVE-2014-8080
2014-11-12 21:00:00
debian
debian
[SECURITY] [DSA 3159-1] ruby1.8 security update
2015-02-10 17:49:21
[SECURITY] [DSA 3157-1] ruby1.9.1 security update
2015-02-09 17:10:22
[SECURITY] [DLA 200-1] ruby1.9.1 security update
2015-04-15 18:17:59
centos
centos
ruby security update
2014-12-01 12:57:41
ruby, rubygem, rubygems security update
2014-12-01 13:45:48
redhat
redhat
(RHSA-2014:1911) Moderate: ruby security update
2014-11-26 00:00:00
(RHSA-2014:1914) Moderate: ruby200-ruby security update
2014-11-26 00:00:00
(RHSA-2014:1912) Moderate: ruby security update
2014-11-26 00:00:00
oraclelinux
oraclelinux
ruby security update
2014-11-26 00:00:00
ruby193-ruby security update
2016-02-04 00:00:00
ruby security update
2014-11-26 00:00:00
fedora
fedora
[SECURITY] Fedora 21 Update: ruby-2.1.4-24.fc21
2014-11-10 06:32:27
ubuntu
ubuntu
Ruby vulnerabilities
2014-11-04 00:00:00
osv
osv
ruby1.8 - security update
2015-02-10 00:00:00
ruby1.9.1 - security update
2015-04-15 00:00:00
ruby1.9.1 - security update
2015-02-09 00:00:00
ubuntucve
ubuntucve
CVE-2014-8090
2014-11-14 00:00:00
securityvulns
securityvulns
Ruby DoS
2014-11-24 00:00:00
APPLE-SA-2015-09-30-3 OS X El Capitan 10.11
2015-10-05 00:00:00
Apple Mac OS X / Mac EFI / OS X Server multiple security vulnerabilities
2015-10-25 00:00:00
gentoo
gentoo
Ruby: Denial of service
2014-12-13 00:00:00
5 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:N/I:N/A:P
0.095 Low
EPSS
Percentile
94.6%
Related for UB:CVE-2014-8080