Test Kennung:	1.3.6.1.4.1.25623.1.0.804887
Kategorie:	Denial of Service
Titel:	Ruby 'encodes' function Denial-of-Service Vulnerability - Windows
Zusammenfassung:	Ruby is prone to a denial of service (DoS) vulnerability.
Beschreibung:	Summary: Ruby is prone to a denial of service (DoS) vulnerability. Vulnerability Insight: Flaw exists due to improper bounds checking by the 'encodes' function in pack.c script. Vulnerability Impact: Successful exploitation will allow attackers to cause a denial of service (crash) or possibly execute arbitrary code. Affected Software/OS: Ruby versions 1.9.3 and earlier and 2.x through 2.1.2 on Windows. Solution: Upgrade to Ruby 2.1.3 or later. CVSS Score: 5.0 CVSS Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Querverweis:	Common Vulnerability Exposure (CVE) ID: CVE-2014-4975 BugTraq ID: 68474 http://www.securityfocus.com/bid/68474 Debian Security Information: DSA-3157 (Google Search) http://www.debian.org/security/2015/dsa-3157 http://www.mandriva.com/security/advisories?name=MDVSA-2015:129 http://www.openwall.com/lists/oss-security/2014/07/09/13 RedHat Security Advisories: RHSA-2014:1912 http://rhn.redhat.com/errata/RHSA-2014-1912.html RedHat Security Advisories: RHSA-2014:1913 http://rhn.redhat.com/errata/RHSA-2014-1913.html RedHat Security Advisories: RHSA-2014:1914 http://rhn.redhat.com/errata/RHSA-2014-1914.html http://www.ubuntu.com/usn/USN-2397-1 XForce ISS Database: ruby-cve20144975-bo(94706) https://exchange.xforce.ibmcloud.com/vulnerabilities/94706
Copyright	Copyright (C) 2014 Greenbone AG

Dies ist nur einer von 146377 Anfälligkeitstests in unserem Testpaket. Finden Sie mehr über unsere vollständigen Sicherheitsüberprüfungen heraus. Um einen gratis Test für diese Anfälligkeit auf Ihrem System durchlaufen zu lassen, registrieren Sie sich bitte unten.