CVE-2011-4815
30.12.2011, 01:55
Ruby (aka CRuby) before 1.8.7-p357 computes hash values without restricting the ability to trigger hash collisions predictably, which allows context-dependent attackers to cause a denial of service (CPU consumption) via crafted input to an application that maintains a hash table.Enginsight
| Vendor | Product | Version |
|---|---|---|
| ruby-lang | ruby | 𝑥 ≤ 1.8.7-p352 |
| ruby-lang | ruby | 1.8.7-p299 |
| ruby-lang | ruby | 1.8.7-p302 |
| ruby-lang | ruby | 1.8.7-p330 |
| ruby-lang | ruby | 1.8.7-p334 |
𝑥
= Vulnerable software versions
Ubuntu Releases
Ubuntu Product | |||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|
| ruby1.8 |
| ||||||||||
| ruby1.9 |
| ||||||||||
| ruby1.9.1 |
|
Common Weakness Enumeration
References