CVE-2014-3916

score

<0.1

cvss

5.0

epss

1.4%

published

2014-11-16

kev added

—

first seen

2026-10-21

Ruby 1.9.3, 2.0.0, and 2.1 contain a denial of service caused by the str_buf_cat function in string.c, letting attackers cause segmentation faults and crashes via a long string, exploit requires sending a long string.