Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Algorithmic complexity vulnerability in Gem::Version::ANCHORED_VERSION_PATTERN in lib/rubygems/version.rb in RubyGems before 1.8.23.2, 1.8.24 through 1.8.26, 2.0.x before 2.0.10, and 2.1.x before 2.1.5, as used in Ruby 1.9.0 through 2.0.0p247, allows remote attackers to cause a denial of service (CPU consumption) via a crafted gem version that triggers a large amount of backtracking in a regular expression. NOTE: this issue is due to an incomplete fix for CVE-2013-4287.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Ruby 加密问题漏洞
Vulnerability Description
Ruby是松本行弘个人开发者的一种跨平台、面向对象的动态类型编程语言。 Ruby 1.9.0至2.0.0p247版本中使用的RubyGems中的lib/rubygems/version.rb文件中的Gem::Version::ANCHORED_VERSION_PATTERN函数中存在加密问题漏洞，该漏洞源于正则表达式没有充分验证gem版本。远程攻击者可通过特制的gem版本利用该漏洞造成拒绝服务（CPU耗尽）。以下版本受到影响：RubyGems 1.8.23及之前的版本，1.8.24至1.8.26版本，2.
CVSS Information
N/A
Vulnerability Type
N/A