{"action":"Upgrade openssl to 2.0.0 or later.","affected":[{"fixed":"2.0.0","introduced":"0"}],"component":"openssl","cve_ids":["CVE-2017-14033"],"ecosystem":"RubyGems","epss":0.07734,"exploited":false,"fixed_versions":["2.0.0"],"ghsa_id":"GHSA-v6rp-3r3v-hf4p","id":"tcs_01M5KENFTGWMT0JJCTRJJ1ZVKW","modified_at":"2024-02-16T08:21:15.875104Z","published_at":"2022-05-14T02:03:26Z","references":["https://osv.dev/vulnerability/GHSA-v6rp-3r3v-hf4p","https://nvd.nist.gov/vuln/detail/CVE-2017-14033","https://github.com/ruby/openssl/commit/36bf7f403ebb6cefcaa1e7af9d8ec99e6b4bc1ed","https://access.redhat.com/errata/RHSA-2018:0378","https://access.redhat.com/errata/RHSA-2018:0583","https://access.redhat.com/errata/RHSA-2018:0585","https://github.com/ruby/openssl","https://github.com/rubysec/ruby-advisory-db/blob/master/gems/openssl/CVE-2017-14033.yml","https://lists.debian.org/debian-lts-announce/2018/07/msg00012.html","https://security.gentoo.org/glsa/201710-18","https://web.archive.org/web/20210509153849/http://www.securityfocus.com/bid/100868","https://web.archive.org/web/20210622181826/http://www.securitytracker.com/id/1042004","https://web.archive.org/web/20210724095519/http://www.securitytracker.com/id/1039363","https://www.debian.org/security/2017/dsa-4031","https://www.ruby-lang.org/en/news/2017/09/14/openssl-asn1-buffer-underrun-cve-2017-14033","https://www.ruby-lang.org/en/news/2017/09/14/ruby-2-2-8-released","https://www.ruby-lang.org/en/news/2017/09/14/ruby-2-3-5-released"],"severity":{"label":"high","score":7.5},"sources":[{"source":"osv","source_id":"GHSA-v6rp-3r3v-hf4p","url":"https://osv.dev/vulnerability/GHSA-v6rp-3r3v-hf4p"}],"summary":"Ruby OpenSSL DoS Vulnerability"}