Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
The regular expression engine (regex.c) in Ruby 1.8.5 and earlier, 1.8.6 through 1.8.6-p286, 1.8.7 through 1.8.7-p71, and 1.9 through r18423 allows remote attackers to cause a denial of service (infinite loop and crash) via multiple long requests to a Ruby socket, related to memory allocation failure, and as demonstrated against Webrick.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Ruby regex.c 远程拒绝服务漏洞
Vulnerability Description
Ruby一种为简单快捷面向对象编程(面向对象程序设计)而创的脚本语言 Ruby低版本(1.8.5及之前，1.8.6到1.8.6-p286，1.8.7到1.8.7-p7，1.9 到r18423)中的正则引擎(regex.c)存在拒绝服务漏洞。远程攻击者借助多个对Ruby socket的超长请求，导致死循环和崩溃，引起拒绝服务。
CVSS Information
N/A
Vulnerability Type
N/A