onyx --cves cve-2014-0082
CVE-2014-0082
- score
- <0.1
- cvss
- 5.0
- epss
- 6.2%
- published
- 2014-02-20
- kev added
- —
- first seen
Ruby on Rails 3.x before 3.2.17 contains a denial of service caused by converting MIME type strings to symbols during render with :text option, letting remote attackers cause memory exhaustion, exploit requires sending headers with MIME type strings.
Timeline
How this CVE moved toward exploitation. Chart: last 30 days — trend score, EPSS, community mentions per day; hover the event lane.
- Published
- Tracked by Onyx
Weaknesses
References 9
- https://groups.google.com/forum/message/raw?msg=rubyonrails-security/LMxO_3_eCuc/ozGBEhKaJbIJ
- http://rhn.redhat.com/errata/RHSA-2014-0306.html
- http://secunia.com/advisories/57836
- https://puppet.com/security/cve/cve-2014-0082
- http://lists.opensuse.org/opensuse-updates/2014-02/msg00081.html
- http://openwall.com/lists/oss-security/2014/02/18/10
- http://rhn.redhat.com/errata/RHSA-2014-0215.html
- http://secunia.com/advisories/57376
- http://www.getchef.com/blog/2014/04/09/enterprise-chef-11-1-3-release/