ruby4.0-rubygem-websocket-extensions-0.1.5-1.24 on GA media
ruby4.0-rubygem-websocket-extensions-0.1.5-1.24 on GA media
describes (1)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2020-7663US | high7.5 | — | ||
websocket-extensions ruby module prior to 0.1.5 allows Denial of Service (DoS) via Regex Backtracking. The extension parser may take quadratic time when parsing a header containing… | ||||
references
External citations — patches, advisories, analysis.
- URL of this CSAF noticeself
- SUSE CVE CVE-2020-7663 pageself
- SUSE ratingsexternal
remediations (4)
- Fixedruby4.0-rubygem-websocket-extensions-0:0.1.5-1.24.aarch64 as component of openSUSE Tumbleweed
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
- Fixedruby4.0-rubygem-websocket-extensions-0:0.1.5-1.24.ppc64le as component of openSUSE Tumbleweed
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
- Fixedruby4.0-rubygem-websocket-extensions-0:0.1.5-1.24.s390x as component of openSUSE Tumbleweed
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
- Fixedruby4.0-rubygem-websocket-extensions-0:0.1.5-1.24.x86_64 as component of openSUSE Tumbleweed
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan