Lucene search
Arch LinuxASA-201411-16HistoryNov 17, 2014 - 12:00 a.m.
ruby: denial of service
2014-11-1700:00:00
Arch Linux
lists.archlinux.org
22
0.13 Low
EPSS
Percentile
95.6%
CPU exhaustion can occur as a result of recursive expansion with an
empty string. When reading text nodes from an XML document, the REXML
parser can be coerced into allocating extremely large string objects
which can consume all of the memory on a machine, causing a denial of
service.
Related
nessus
nessus
Ubuntu 14.04 LTS : Ruby vulnerability (USN-2412-1)
2014-11-21 00:00:00
openSUSE Security Update : ruby19 (openSUSE-SU-2014:1589-1)
2014-12-09 00:00:00
Amazon Linux AMI : ruby20 (ALAS-2014-448)
2014-11-18 00:00:00
openvas
openvas
Ruby 'REXML' Parser XML Entity Expansion (XEE) Vulnerability - Windows
2014-12-01 00:00:00
Ubuntu: Security Advisory (USN-2412-1)
2022-08-26 00:00:00
Oracle: Security Advisory (ELSA-2014-1911)
2015-10-06 00:00:00
securityvulns
securityvulns
[USN-2412-1] Ruby vulnerability
2014-11-24 00:00:00
Ruby DoS
2014-11-24 00:00:00
APPLE-SA-2015-09-30-3 OS X El Capitan 10.11
2015-10-05 00:00:00
veracode
veracode
XML Entity Expansion (XEE)
2019-05-02 05:05:32
ubuntu
ubuntu
Ruby vulnerability
2014-11-20 00:00:00
oraclelinux
oraclelinux
ruby security update
2014-11-26 00:00:00
ruby193-ruby security update
2016-02-04 00:00:00
ruby security update
2014-11-26 00:00:00
redhat
redhat
(RHSA-2014:1911) Moderate: ruby security update
2014-11-26 00:00:00
(RHSA-2014:1914) Moderate: ruby200-ruby security update
2014-11-26 00:00:00
(RHSA-2014:1912) Moderate: ruby security update
2014-11-26 00:00:00
centos
centos
ruby security update
2014-12-01 12:57:41
ruby, rubygem, rubygems security update
2014-12-01 13:45:48
debian
debian
[SECURITY] [DSA 3159-1] ruby1.8 security update
2015-02-10 17:49:21
[SECURITY] [DSA 3157-1] ruby1.9.1 security update
2015-02-09 17:10:22
[SECURITY] [DLA 200-1] ruby1.9.1 security update
2015-04-15 18:17:59
amazon
amazon
osv
osv
ruby1.8 - security update
2015-02-10 00:00:00
ruby1.9.1 - security update
2015-04-15 00:00:00
ruby1.9.1 - security update
2015-02-09 00:00:00
cve
cve
CVE-2014-8090
2014-11-21 15:59:04
ubuntucve
ubuntucve
CVE-2014-8090
2014-11-14 00:00:00
nvd
nvd
CVE-2014-8090
2014-11-21 15:59:04
mageia
mageia
Updated ruby packages fix security vulnerabilities
2014-11-21 15:44:16
cvelist
cvelist
CVE-2014-8090
2014-11-21 15:00:00
prion
prion
Design/Logic Flaw
2014-11-21 15:59:00
rubygems
rubygems
CVE-2014-8090 ruby: REXML incomplete fix for CVE-2014-8080
2014-11-12 21:00:00
gentoo
gentoo
Ruby: Denial of service
2014-12-13 00:00:00