ruby Archives - CVE Vulnerability

CVE-2008-4310

Sun, 26 Feb 2023 09:10:28 +0000

httputils.rb in WEBrick in Ruby 1.8.1 and 1.8.5, as used in Red Hat Enterprise Linux 4 and 5, allows remote attackers to cause a denial of service (CPU consumption) via a crafted HTTP request. NOTE: this issue exists because of an incomplete fix for CVE-2008-3656.

The post CVE-2008-4310 appeared first on CVE Vulnerability.

CVE-2008-2376

Sun, 26 Feb 2023 09:09:28 +0000

Integer overflow in the rb_ary_fill function in array.c in Ruby before revision 17756 allows context-dependent attackers to cause a denial of service (crash) or possibly have unspecified other impact via a call to the Array#fill method with a start (aka beg) argument greater than ARY_MAX_SIZE. NOTE: this issue exists because of an incomplete fix for other closely related integer overflows.

The post CVE-2008-2376 appeared first on CVE Vulnerability.

CVE-2008-1145

Sun, 26 Feb 2023 09:08:52 +0000

Directory traversal vulnerability in WEBrick in Ruby 1.8 before 1.8.5-p115 and 1.8.6-p114, and 1.9 through 1.9.0-1, when running on systems that support backslash () path separators or case-insensitive file names, allows remote attackers to access arbitrary files via (1) “..%5c” (encoded backslash) sequences or (2) filenames that match patterns in the :NondisclosureName option.

The post CVE-2008-1145 appeared first on CVE Vulnerability.

CVE-2020-5247

Sun, 26 Feb 2023 06:42:15 +0000

In Puma (RubyGem) before 4.3.2 and before 3.12.3, if an application using Puma allows untrusted input in a response header, an attacker can use newline characters (i.e. `CR`, `LF` or`/r`, `/n`) to end the header and inject malicious content, such as additional headers or an entirely new response body. This vulnerability is known as HTTP Response Splitting. While not an attack in itself, response splitting is a vector for several other attacks, such as cross-site scripting (XSS). This is related to CVE-2019-16254, which fixed this vulnerability for the WEBrick Ruby web server. This has been fixed in versions 4.3.2 and 3.12.3 by checking all headers for line endings and rejecting headers with those characters.

The post CVE-2020-5247 appeared first on CVE Vulnerability.

CVE-2020-25613

Sun, 26 Feb 2023 06:39:45 +0000

An issue was discovered in Ruby through 2.5.8, 2.6.x through 2.6.6, and 2.7.x through 2.7.1. WEBrick, a simple HTTP server bundled with Ruby, had not checked the transfer-encoding header value rigorously. An attacker may potentially exploit this issue to bypass a reverse proxy (which also has a poor header check), which may lead to an HTTP Request Smuggling attack.

The post CVE-2020-25613 appeared first on CVE Vulnerability.

CVE-2019-16255

Sun, 26 Feb 2023 06:31:13 +0000

Ruby through 2.4.7, 2.5.x through 2.5.6, and 2.6.x through 2.6.4 allows code injection if the first argument (aka the “command” argument) to Shell#[] or Shell#test in lib/shell.rb is untrusted data. An attacker can exploit this to call an arbitrary Ruby method.

The post CVE-2019-16255 appeared first on CVE Vulnerability.

CVE-2019-16254

Sun, 26 Feb 2023 06:31:13 +0000

Ruby through 2.4.7, 2.5.x through 2.5.6, and 2.6.x through 2.6.4 allows HTTP Response Splitting. If a program using WEBrick inserts untrusted input into the response header, an attacker can exploit it to insert a newline character to split a header, and inject malicious content to deceive clients. NOTE: this issue exists because of an incomplete fix for CVE-2017-17742, which addressed the CRLF vector, but did not address an isolated CR or an isolated LF.

The post CVE-2019-16254 appeared first on CVE Vulnerability.

CVE-2019-16201

Sun, 26 Feb 2023 06:31:12 +0000

WEBrick::HTTPAuth::DigestAuth in Ruby through 2.4.7, 2.5.x through 2.5.6, and 2.6.x through 2.6.4 has a regular expression Denial of Service cause by looping/backtracking. A victim must expose a WEBrick server that uses DigestAuth to the Internet or a untrusted network.

The post CVE-2019-16201 appeared first on CVE Vulnerability.

CVE-2021-41816

Thu, 23 Feb 2023 14:12:06 +0000

CGI.escape_html in Ruby before 2.7.5 and 3.x before 3.0.3 has an integer overflow and resultant buffer overflow via a long string on platforms (such as Windows) where size_t and long have different numbers of bytes. This also affects the CGI gem before 0.3.1 for Ruby.

The post CVE-2021-41816 appeared first on CVE Vulnerability.

CVE-2021-33621

Thu, 23 Feb 2023 14:10:03 +0000

The cgi gem before 0.1.0.2, 0.2.x before 0.2.2, and 0.3.x before 0.3.5 for Ruby allows HTTP response splitting. This is relevant to applications that use untrusted user input either to generate an HTTP response or to create a CGI::Cookie object.

The post CVE-2021-33621 appeared first on CVE Vulnerability.