Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
RubyGems version Ruby 2.2 series: 2.2.9 and earlier, Ruby 2.3 series: 2.3.6 and earlier, Ruby 2.4 series: 2.4.3 and earlier, Ruby 2.5 series: 2.5.0 and earlier, prior to trunk revision 62422 contains a infinite loop caused by negative size vulnerability in ruby gem package tar header that can result in a negative size could cause an infinite loop.. This vulnerability appears to have been fixed in 2.7.6.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
RubyGems 安全漏洞
Vulnerability Description
RubyGems是RubyGems组织的一款Ruby程序包管理器，它主要用于发布和管理Ruby程序包。 RubyGems中的ruby gem package tar包头存在安全漏洞。远程攻击者可通过发送特制的请求利用该漏洞造成拒绝服务（无限循环）。以下版本受到影响：RubyGems 2.2.9版本，2.3.6版本，2.4.3版本，2.5.0版本。
CVSS Information
N/A
Vulnerability Type
N/A