Denial Of Service (DoS)

🗓️ 25 Nov 2021 17:08:05Reported by Veracode Vulnerability DatabaseType

veracode

veracode🔗 sca.analysiscenter.veracode.com👁 18 Views

Vulnerability in CGI.escape_htm

Reporter	Title	Published	Views	Family All 77
FreeBSD	rubygem-cgi -- buffer overrun in CGI.escape_html	24 Nov 202100:00	–	freebsd
IBM Security Bulletins	Security Bulletin: Netcool Operations Insight v1.6.8 addresses multiple security vulnerabilities.	11 Apr 202311:47	–	ibm
Tenable Nessus	Amazon Linux 2 : ruby (ALASRUBY3.0-2023-003)	27 Sep 202300:00	–	nessus
Tenable Nessus	Debian DSA-5067-1 : ruby2.7 - security update	4 Feb 202200:00	–	nessus
Tenable Nessus	GLSA-202401-27 : Ruby: Multiple vulnerabilities	24 Jan 202400:00	–	nessus
Tenable Nessus	MiracleLinux 7 : rh-ruby27-ruby-2.7.6-131.el7 (AXSA:2022-3889:01)	20 Jan 202600:00	–	nessus
Tenable Nessus	MiracleLinux 7 : rh-ruby30-ruby-3.0.4-149.el7 (AXSA:2022-3890:01)	20 Jan 202600:00	–	nessus
Tenable Nessus	RHEL 7 : rh-ruby30-ruby (RHSA-2022:6855)	11 Oct 202200:00	–	nessus
Tenable Nessus	RHEL 7 : rh-ruby27-ruby (RHSA-2022:6856)	11 Oct 202200:00	–	nessus
Tenable Nessus	Ubuntu 16.04 ESM / 18.04 LTS / 20.04 LTS : Ruby vulnerabilities (USN-5235-1)	18 Jan 202200:00	–	nessus

Vulners

Node

ruby rubyMatch2.7.2-r4os

AND

ruby rubyMatch2.7.4-r0os

AND

ruby rubyMatch2.7.2-r3os

AND

ruby rubyMatch2.7.3-r0os

AND

alpinelinux alpine_linuxMatch3.13

OR

ruby rubyMatch2.7.2-r0os

AND

ruby rubyMatch2.7.3-r0os

AND

ruby rubyMatch2.7.2-r1os

AND

ruby rubyMatch2.7.1-r3os

AND

ruby rubyMatch2.7.4-r0os

AND

alpinelinux alpine_linuxMatch3.12

OR

ruby rubyMatch2.7.4-r0os

AND

ruby rubyMatch2.7.3-r1os

AND

alpinelinux alpine_linuxMatch3.14

OR

ruby rubyMatch2.7.2-r4os

AND

ruby rubyMatch2.7.2-r3os

AND

ruby rubyMatch2.6.6-r2os

AND

ruby rubyMatch2.7.3-r1os

AND

ruby rubyMatch2.6.5-r2os

AND

ruby rubyMatch2.7.1-r3os

AND

ruby rubyMatch2.7.4-r1os

AND

ruby rubyMatch2.7.4-r0os

AND

ruby rubyMatch2.6.6-r4os

AND

ruby rubyMatch3.0.2-r0os

AND

ruby rubyMatch2.7.3-r0os

AND

alpinelinux alpine_linuxMatchedge

OR

ruby rubyMatch3.0.2-r0os

AND

alpinelinux alpine_linuxMatch3.15

OR

ruby2.7 ruby2.7Match2.7.2-3debian

AND

ruby2.7 ruby2.7Match2.7.4-1debian

AND

debian debian_linuxMatch999

OR

focal focalMatch2.7.0-5ubuntu1.1debian

AND

focal focalMatch2.7.0-5ubuntu1debian

AND

focal focalMatch2.7.0-5ubuntu1.2debian

AND

debian debian_linux

OR

hirsute hirsuteMatch2.7.2-3debian

AND

hirsute hirsuteMatch2.7.2-4ubuntu1debian

AND

debian debian_linux

OR

ruby2.7 ruby2.7Match2.7.2-3debian

AND

debian debian_linuxMatch11

Source	Link
secdb	www.secdb.alpinelinux.org/v3.12/main.yaml
secdb	www.secdb.alpinelinux.org/v3.13/main.yaml
secdb	www.secdb.alpinelinux.org/v3.14/main.yaml
lists	www.lists.fedoraproject.org/archives/list/[email protected]/message/IUXQCH6FRKANCVZO2Q7D2SQX33FP3KWN/
lists	www.lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/IUXQCH6FRKANCVZO2Q7D2SQX33FP3KWN/
lists	www.lists.fedoraproject.org/archives/list/[email protected]/message/UTOJGS5IEFDK3UOO7IY4OTTFGHGLSWZF/
lists	www.lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UTOJGS5IEFDK3UOO7IY4OTTFGHGLSWZF/
security	www.security.gentoo.org/glsa/202401-27
hackerone	www.hackerone.com/reports/1328463
security	www.security.netapp.com/advisory/ntap-20220303-0006/

24 Jan 2024 06:21Current

3.1Low risk

Vulners AI Score3.1

CVSS 27.5

CVSS 3.19.8

EPSS0.00483

denial of service ruby cgi escape_html vulnerable attack large string application crash software