CVE-2014-8090 The REXML parser in Ruby 1.9.x before 1.9.3 patchlevel 551, 2.0.x before 2.0.0 patchlevel 598, and 2.1.x before 2.1.5 allows remote attackers to cause a denial of service (CPU and memory consumption)....
MediumCVSS 5.0
EPSS 5.7%
- Published
- Updated
- Exploit status
- No public exploit known
Description
The REXML parser in Ruby 1.9.x before 1.9.3 patchlevel 551, 2.0.x before 2.0.0 patchlevel 598, and 2.1.x before 2.1.5 allows remote attackers to cause a denial of service (CPU and memory consumption) a crafted XML document containing an empty string in an entity that is used in a large number of nested entity references, aka an XML Entity Expansion (XEE) attack. NOTE: this vulnerability exists because of an incomplete fix for CVE-2013-1821 and CVE-2014-8080.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| ruby-lang ruby | <= 1.9.3 | No fix listed |
| ruby-lang ruby | = 1.9.3 | No fix listed |
| ruby-lang ruby | = 1.9.3-p0 | No fix listed |
| ruby-lang ruby | = 1.9.3-p125 | No fix listed |
| ruby-lang ruby | = 1.9.3-p194 | No fix listed |
| ruby-lang ruby | = 1.9.3-p286 | No fix listed |
| ruby-lang ruby | = 1.9.3-p383 | No fix listed |
| ruby-lang ruby | = 1.9.3-p385 | No fix listed |
| ruby-lang ruby | = 1.9.3-p392 | No fix listed |
| ruby-lang ruby | = 1.9.3-p426 | No fix listed |
| ruby-lang ruby | = 1.9.3-p429 | No fix listed |
| ruby-lang ruby | = 1.9.3-p448 | No fix listed |
| ruby-lang ruby | = 1.9.3-p545 | No fix listed |
| ruby-lang ruby | = 1.9.3-p547 | No fix listed |
| ruby-lang ruby | = 2.0.0 | No fix listed |
| ruby-lang ruby | = 2.0.0-p0 | No fix listed |
| ruby-lang ruby | = 2.0.0-p195 | No fix listed |
| ruby-lang ruby | = 2.0.0-p247 | No fix listed |
| ruby-lang ruby | = 2.0.0-p451 | No fix listed |
| ruby-lang ruby | = 2.0.0-p481 | No fix listed |
| ruby-lang ruby | = 2.0.0-p576 | No fix listed |
| ruby-lang ruby | = 2.0.0-p594 | No fix listed |
| ruby-lang ruby | = 2.1.1 | No fix listed |
| ruby-lang ruby | = 2.1.2 | No fix listed |
| ruby-lang ruby | = 2.1.3 | No fix listed |
Show 1 more
| Product | Affected versions | Fixed in |
|---|---|---|
| ruby-lang ruby | = 2.1.4 | No fix listed |
References
- advisories.mageia.org
- APPLE-SA-2015-09-30-3 vendor-advisory
- openSUSE-SU-2014:1589 vendor-advisory
- openSUSE-SU-2015:0002 vendor-advisory
- openSUSE-SU-2015:0007 vendor-advisory
- RHSA-2014:1911 vendor-advisory
- RHSA-2014:1912 vendor-advisory
- RHSA-2014:1913 vendor-advisory
- RHSA-2014:1914 vendor-advisory
- 59948 third-party-advisory
- 62050 third-party-advisory
- 62748 third-party-advisory
- DSA-3157 vendor-advisory
- DSA-3159 vendor-advisory
- MDVSA-2015:129 vendor-advisory
- www.oracle.com
- 71230 vdb-entry
- USN-2412-1 patch vendor-advisory
- support.apple.com
- www.ruby-lang.org exploit vendor-advisory