GitHub Advisoryadvisory · RubyGems

GHSA-5gxp-c379-pj42 ccsv Double Free vulnerability

MEDIUM Published 2022-05-17 Modified 2023-01-27 Official page ↗
Aliases
CVE-2017-15364
Ecosystem
RubyGems
Packages
ccsv
Severity
Moderate
CVSS vector
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
Weaknesses
CWE-415
Reviewed
2023-01-27

Affected packages

• RubyGems ccsv: <= 1.1.0 (no fix yet)

Description

The foreach function in `ext/ccsv.c` in Ccsv 1.1.0 allows remote attackers to cause a denial of service (double free and application crash) or possibly have unspecified other impact via a crafted file.

Related

Alias · CVE (1)

  • CVE-2017-15364 The foreach function in ext/ccsv.c in Ccsv 1.1.0 allows remote attackers to cause a denial of service (double free and application crash)… vulnerability

Weakness · CWE (1)

References