DeutschShown in its original language — a full translation is planned for a future version.
Ruby: Mehrere Schwachstellen
view advisory published 2014-11-05
Ein Angreifer kann mehrere Schwachstellen in Ruby und Ubuntu Linux ausnutzen, um beliebigen Programmcode mit den Rechten des Dienstes auszuführen oder einen Denial of Service Angriff durchzuführen.
01
describes (2)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2014-4975US | medium5.0 | — | ||
Off-by-one error in the encodes function in pack.c in Ruby 1.9.3 and earlier, and 2.x through 2.1.2, when using certain format string specifiers, allows context-dependent attackers… | ||||
| CVE-2014-8080US | medium5.0 | — | ||
The REXML parser in Ruby 1.9.x before 1.9.3-p550, 2.0.x before 2.0.0-p594, and 2.1.x before 2.1.4 allows remote attackers to cause a denial of service (memory consumption) via a cr… | ||||
02
references
External citations — patches, advisories, analysis.
- CentOS Errata and Security Advisory CESA-2014:1911external
- CentOS Errata and Security Advisory CESA-2014:1912external
- Red Hat Security Advisory RHSA-2014:1911-1 vom 2014-11-26external
- Red Hat Security Advisory RHSA-2014:1912-1 vom 2014-11-26external
- Red Hat Security Advisory RHSA-2014:1913-1 vom 2014-11-26external
- Red Hat Security Advisory RHSA-2014:1914-1 vom 2014-11-26external
- Mandriva Security Advisory MDVSA-2014:225 vom 2014-11-25external
- Schwachstelle in Ruby vom 2014-07-17external
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan