CVE-2008-3790
27.08.2008, 20:41
The REXML module in Ruby 1.8.6 through 1.8.6-p287, 1.8.7 through 1.8.7-p72, and 1.9 allows context-dependent attackers to cause a denial of service (CPU consumption) via an XML document with recursively nested entities, aka an "XML entity explosion."Enginsight
| Vendor | Product | Version |
|---|---|---|
| ruby-lang | ruby | 1.8.6 |
| ruby-lang | ruby | 1.8.6:p110 |
| ruby-lang | ruby | 1.8.6:p111 |
| ruby-lang | ruby | 1.8.6:p114 |
| ruby-lang | ruby | 1.8.6:p230 |
| ruby-lang | ruby | 1.8.6:p286 |
| ruby-lang | ruby | 1.8.6:p287 |
| ruby-lang | ruby | 1.8.6:p36 |
| ruby-lang | ruby | 1.8.6:preview1 |
| ruby-lang | ruby | 1.8.6:preview2 |
| ruby-lang | ruby | 1.8.6:preview3 |
| ruby-lang | ruby | 1.8.7 |
| ruby-lang | ruby | 1.8.7:p17 |
| ruby-lang | ruby | 1.8.7:p22 |
| ruby-lang | ruby | 1.8.7:p71 |
| ruby-lang | ruby | 1.8.7:p72 |
| ruby-lang | ruby | 1.8.7:preview1 |
| ruby-lang | ruby | 1.8.7:preview2 |
| ruby-lang | ruby | 1.8.7:preview3 |
| ruby-lang | ruby | 1.8.7:preview4 |
| ruby-lang | ruby | 1.9 |
𝑥
= Vulnerable software versions
Ubuntu Releases
Ubuntu Product | |||||||||||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| ruby1.8 |
| ||||||||||||||||||||||
| ruby1.9 |
|
Common Weakness Enumeration