CVE-2013-4363
1 advisory.
RubyGems/rubygems-update CVE-2013-4363: medium
RubyGems Regular Expression Denial of Service
Action: Upgrade rubygems-update to 1.8.23.2 or later.
bundle update rubygems-updateAffected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 1.8.23.2 | - |
| 1.8.24 | 1.8.27 | - |
| 2.0.0 | 2.0.10 | - |
| 2.1.0 | 2.1.5 | - |
Fixed versions
| 1.8.23.2 | 1.8.27 | 2.0.10 | 2.1.5 |
Sources
- osv: GHSA-9qvm-2vhf-q649
- https://nvd.nist.gov/vuln/detail/CVE-2013-4363
- https://github.com/rubygems/rubygems
- https://github.com/rubysec/ruby-advisory-db/blob/master/gems/rubygems-update/CVE-2013-4363.yml
- https://web.archive.org/web/20170331150441/https://puppet.com/security/cve/cve-2013-4363
- http://blog.rubygems.org/2013/09/24/CVE-2013-4363.html
- http://www.openwall.com/lists/oss-security/2013/09/14/3
- http://www.openwall.com/lists/oss-security/2013/09/18/8
- http://www.openwall.com/lists/oss-security/2013/09/20/1
CVE-2013-4363 · published · modified · JSON