CVE-2013-1812

Опубликовано: 12 дек. 2013

Источник: debian

EPSS Низкий

Описание

The ruby-openid gem before 2.2.2 for Ruby allows remote OpenID providers to cause a denial of service (CPU consumption) via (1) a large XRDS document or (2) an XML Entity Expansion (XEE) attack.

Пакеты

Пакет	Статус	Версия исправления	Релиз	Тип
ruby-openid	fixed	2.1.8debian-6		package
libopenid-ruby	removed			package
libopenid-ruby	fixed	2.1.8debian-1+squeeze1	squeeze	package

EPSS

Процентиль: 67%

0.00531

Низкий

Связанные уязвимости

CVE-2013-1812

ubuntu

около 12 лет назад

The ruby-openid gem before 2.2.2 for Ruby allows remote OpenID providers to cause a denial of service (CPU consumption) via (1) a large XRDS document or (2) an XML Entity Expansion (XEE) attack.

CVE-2013-1812

nvd

около 12 лет назад

The ruby-openid gem before 2.2.2 for Ruby allows remote OpenID providers to cause a denial of service (CPU consumption) via (1) a large XRDS document or (2) an XML Entity Expansion (XEE) attack.

GHSA-6c8p-qphv-668v

github

больше 8 лет назад

Denial of service in ruby-openid

EPSS

Процентиль: 67%

0.00531

Низкий