CVE-2017-6181

Опубликовано: 03 апр. 2017

Источник: nvd

CVSS3: 7.5

CVSS2: 5

EPSS Низкий

Описание

The parse_char_class function in regparse.c in the Onigmo (aka Oniguruma-mod) regular expression library, as used in Ruby 2.4.0, allows remote attackers to cause a denial of service (deep recursion and application crash) via a crafted regular expression.

Ссылки

http://www.securityfocus.com/bid/97304
Third Party Advisory
VDB Entry
https://bugs.ruby-lang.org/issues/13234
Issue Tracking
Vendor Advisory
https://bugs.ruby-lang.org/projects/ruby-trunk/repository/revisions/57660
Issue Tracking
Vendor Advisory
http://www.securityfocus.com/bid/97304
Third Party Advisory
VDB Entry
https://bugs.ruby-lang.org/issues/13234
Issue Tracking
Vendor Advisory
https://bugs.ruby-lang.org/projects/ruby-trunk/repository/revisions/57660
Issue Tracking
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:ruby-lang:ruby:2.4.0:*:*:*:*:*:*:*

EPSS

Процентиль: 71%

0.00696

Низкий

7.5 High

CVSS3

5 Medium

CVSS2

Дефекты

CWE-20

Связанные уязвимости

CVE-2017-6181

CVSS3: 7.5

ubuntu

почти 9 лет назад

CVE-2017-6181

CVSS3: 6.5

redhat

почти 9 лет назад

CVE-2017-6181

CVSS3: 7.5

debian

почти 9 лет назад

The parse_char_class function in regparse.c in the Onigmo (aka Oniguru ...

GHSA-5pfp-rwpx-xgfx

CVSS3: 7.5

github

больше 3 лет назад

EPSS

Процентиль: 71%

0.00696

Низкий

7.5 High

CVSS3

5 Medium

CVSS2

Дефекты

CWE-20