[Forgot Password]
Login  Register Subscribe

30479

 
 

423868

 
 

248585

 
 

909

 
 

195621

 
 

282

 
Paid content will be excluded from the download.


Download | Alert*
OVAL

CVE-2017-16229 -- ruby-ox

ID: oval:org.secpod.oval:def:1900702Date: (C)2019-06-03   (M)2023-12-20
Class: VULNERABILITYFamily: unix




In the Ox gem 2.8.1 for Ruby, the process crashes with a stack-based buffer over-read in the read_from_str function in sax_buf.c when a crafted input is supplied to sax_parse.

Platform:
Ubuntu 16.04
Ubuntu 14.04
Product:
ruby-ox
Reference:
CVE-2017-16229
CVE    1
CVE-2017-16229
CPE    3
cpe:/a:ruby-ox:ruby-ox
cpe:/o:ubuntu:ubuntu_linux:16.04
cpe:/o:ubuntu:ubuntu_linux:14.04

© SecPod Technologies