CVE-2017-15928

Опубликовано: 27 окт. 2017

Источник: nvd

CVSS3: 7.5

CVSS2: 5

EPSS Низкий

Описание

In the Ox gem 2.8.0 for Ruby, the process crashes with a segmentation fault when a crafted input is supplied to parse_obj. NOTE: the vendor has stated "Ox should handle the error more gracefully" but has not confirmed a security implication.

Ссылки

https://github.com/ohler55/ox/issues/194
Exploit
Third Party Advisory
https://rubygems.org/gems/ox/versions/2.8.0
Vendor Advisory
https://github.com/ohler55/ox/issues/194
Exploit
Third Party Advisory
https://rubygems.org/gems/ox/versions/2.8.0
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:ox_project:ox:2.8.0:*:*:*:*:ruby:*:*

EPSS

Процентиль: 64%

0.00459

Низкий

7.5 High

CVSS3

5 Medium

CVSS2

Дефекты

CWE-20

Связанные уязвимости

CVE-2017-15928

CVSS3: 7.5

ubuntu

больше 8 лет назад

CVE-2017-15928

CVSS3: 7.5

debian

больше 8 лет назад

In the Ox gem 2.8.0 for Ruby, the process crashes with a segmentation ...

GHSA-pjj4-w39g-pw54

CVSS3: 7.5

github

около 8 лет назад

Ox gem crashes due to a crafted input

EPSS

Процентиль: 64%

0.00459

Низкий

7.5 High

CVSS3

5 Medium

CVSS2

Дефекты

CWE-20