PT-2012-5955
CVE-2012-5371
·
تاريخ النشر
2012-11-28
·
تاريخ التحديث
2017-08-29
الوصف من
CVSS 2.0
5.0
متوسطةالمقاييسAV:N/AC:L/Au:N/C:N/I:N/A:P
Name of the Vulnerable Software and Affected Versions
Ruby versions 1.9 before 1.9.3-p327
Ruby versions 2.0 before r37575
Description
The issue allows context-dependent attackers to cause a denial of service (CPU consumption) via crafted input to an application that maintains a hash table. This is demonstrated by a universal multicollision attack against a variant of the MurmurHash2 algorithm.
Recommendations
For Ruby versions 1.9 before 1.9.3-p327, update to version 1.9.3-p327 or later.
For Ruby versions 2.0 before r37575, update to version r37575 or later.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾