Test Kennung:	1.3.6.1.4.1.25623.1.0.804887
Kategorie:	Denial of Service
Titel:	Ruby 'encodes' function Denial-of-Service Vulnerability (Windows)
Zusammenfassung:	This host is installed with Ruby and is; prone to denial-of-service vulnerability.
Beschreibung:	Summary: This host is installed with Ruby and is prone to denial-of-service vulnerability. Vulnerability Insight: Flaw exists due to improper bounds checking by the 'encodes' function in pack.c script. Vulnerability Impact: Successful exploitation will allow attackers to cause a denial of service (crash) or possibly execute arbitrary code. Affected Software/OS: Ruby versions 1.9.3 and earlier and 2.x through 2.1.2 on Windows. Solution: Upgrade to Ruby 2.1.3 or later. CVSS Score: 5.0 CVSS Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Querverweis:	BugTraq ID: 68474 Common Vulnerability Exposure (CVE) ID: CVE-2014-4975 http://www.securityfocus.com/bid/68474 Debian Security Information: DSA-3157 (Google Search) http://www.debian.org/security/2015/dsa-3157 http://www.mandriva.com/security/advisories?name=MDVSA-2015:129 http://www.openwall.com/lists/oss-security/2014/07/09/13 RedHat Security Advisories: RHSA-2014:1912 http://rhn.redhat.com/errata/RHSA-2014-1912.html RedHat Security Advisories: RHSA-2014:1913 http://rhn.redhat.com/errata/RHSA-2014-1913.html RedHat Security Advisories: RHSA-2014:1914 http://rhn.redhat.com/errata/RHSA-2014-1914.html http://www.ubuntu.com/usn/USN-2397-1 XForce ISS Database: ruby-cve20144975-bo(94706) https://exchange.xforce.ibmcloud.com/vulnerabilities/94706
Copyright	Copyright (C) 2014 Greenbone Networks GmbH

Dies ist nur einer von 99761 Anfälligkeitstests in unserem Testpaket. Finden Sie mehr über unsere vollständigen Sicherheitsüberprüfungen heraus. Um einen gratis Test für diese Anfälligkeit auf Ihrem System durchlaufen zu lassen, registrieren Sie sich bitte unten.