Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
The parse_char_class function in regparse.c in the Onigmo (aka Oniguruma-mod) regular expression library, as used in Ruby 2.4.0, allows remote attackers to cause a denial of service (deep recursion and application crash) via a crafted regular expression.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Ruby 输入验证漏洞
Vulnerability Description
Ruby是日本软件开发者松本行弘所研发的一种跨平台、面向对象的动态类型编程语言。 Ruby 2.4.0版本中使用的Onigmo（又叫Oniguruma-mod）正则表达式库的regparse.c文件的‘parse_char_class’函数存在安全漏洞。远程攻击者可借助特制的正则表达式利用该漏洞造成拒绝服务（应用程序崩溃）。
CVSS Information
N/A
Vulnerability Type
N/A