CVE-2013-1812

RubyGems/ruby-openid CVE-2013-1812: medium, EPSS 2.13%

Denial of service in ruby-openid

Action: Upgrade ruby-openid to 2.2.2 or later.

bundle update ruby-openid

Affected

Fixed versions

Sources

• osv: GHSA-6c8p-qphv-668v
• https://nvd.nist.gov/vuln/detail/CVE-2013-1812
• https://github.com/openid/ruby-openid/pull/43
• https://github.com/openid/ruby-openid/commit/a3693cef06049563f5b4e4824f4d3211288508ed
• https://bugzilla.redhat.com/show_bug.cgi?id=918134
• https://github.com/advisories/GHSA-6c8p-qphv-668v
• https://github.com/openid/ruby-openid
• https://github.com/openid/ruby-openid/blob/master/CHANGELOG.md
• https://github.com/rubysec/ruby-advisory-db/blob/master/gems/ruby-openid/CVE-2013-1812.yml
• http://lists.fedoraproject.org/pipermail/package-announce/2013-November/120204.html
• http://lists.fedoraproject.org/pipermail/package-announce/2013-November/120361.html
• http://www.openwall.com/lists/oss-security/2013/03/03/8

CVE-2013-1812 · published 2017-10-24T18:33:37Z · modified 2024-12-05T05:43:55.233706Z · JSON