GitHub Advisoryadvisory · RubyGems

GHSA-wfrc-r6c6-7j9r WEBrick Denial of Service Vulnerability

HIGH Published 2022-05-02 Modified 2024-02-09 Official page ↗
Aliases
CVE-2008-4310
Ecosystem
RubyGems
Packages
webrick
Severity
High
Weaknesses
CWE-400
Reviewed
2024-02-09

Affected packages

• RubyGems webrick: < 1.3.1 → fixed in 1.3.1

Description

httputils.rb in WEBrick in Ruby 1.8.1 and 1.8.5, as used in Red Hat Enterprise Linux 4 and 5, allows remote attackers to cause a denial of service (CPU consumption) via a crafted HTTP request. NOTE: this issue exists because of an incomplete fix for CVE-2008-3656.

Related

Alias · CVE (1)

  • CVE-2008-4310 httputils.rb in WEBrick in Ruby 1.8.1 and 1.8.5, as used in Red Hat Enterprise Linux 4 and 5, allows remote attackers to cause a denial of… vulnerability

Weakness · CWE (1)

  • CWE-400 Uncontrolled Resource Consumption weakness

References