Description

The str_buf_cat function in string.c in Ruby 1.9.3, 2.0.0, and 2.1 allows context-dependent attackers to cause a denial of service (segmentation fault and crash) via a long string.

Remediation

References

CVE-2014-3916

Related Vulnerabilities

Grafana Cleartext Storage of Sensitive Information Vulnerability (CVE-2020-12458)

WordPress Plugin MasterStudy LMS-for Online Courses and Education Security Bypass (3.2.13)

Envoy Proxy Inconsistent Interpretation of HTTP Requests ('HTTP Request/Response Smuggling') Vulnerability (CVE-2024-23326)

WordPress Improper Control of Generation of Code ('Code Injection') Vulnerability (CVE-2009-3890)

Drupal Core 7.x Multiple Vulnerabilities (7.0 - 7.42)

Severity

Medium

Classification

CVE-2014-3916

Tags

Missing Update Known Vulnerabilities