actionmailer email address processing causes Denial of service

2017-10-2418:33:37

Google

osv.dev

0.011 Low

EPSS

Percentile

84.1%

JSON

Multiple format string vulnerabilities in log_subscriber.rb files in the log subscriber component in Action Mailer in Ruby on Rails 3.x before 3.2.15 allow remote attackers to cause a denial of service via a crafted e-mail address that is improperly handled during construction of a log message.

CPENameOperatorVersion
actionmailereq3.1.7
actionmailereq3.0.6
actionmailereq3.0.9.rc5
actionmailereq3.2.10
actionmailereq3.2.8
actionmailereq3.2.9
actionmailereq3.1.3
actionmailereq3.0.11
actionmailereq3.1.12
actionmailereq3.2.5

Name	Operator	Version
actionmailer	eq	3.1.7
actionmailer	eq	3.0.6
actionmailer	eq	3.0.9.rc5
actionmailer	eq	3.2.10
actionmailer	eq	3.2.8
actionmailer	eq	3.2.9
actionmailer	eq	3.1.3
actionmailer	eq	3.0.11
actionmailer	eq	3.1.12
actionmailer	eq	3.2.5