Unscored CVE-2014-3916 EUVD-2014-3853GHSA-252h-69rw-g2rp

The str_buf_cat function in string.c in Ruby 1.9.3, 2.0.0, and 2.1 allows context-dependent attackers to cause a denial of service (segment…

Published Nov 16, 2014 · Updated Aug 6, 2024 · Assigned by mitre

Description

The str_buf_cat function in string.c in Ruby 1.9.3, 2.0.0, and 2.1 allows context-dependent attackers to cause a denial of service (segmentation fault and crash) via a long string.

References

ruby-cve20143916-dos(93505) vdb-entry
67705 vdb-entry
https://bugs.ruby-lang.org/issues/9709
[oss-security] 20140529 Re: Fwd: [ruby-core:62800] [ruby-trunk - Bug #9709] Large string causes SEGV with x64-mingw32 mailing-list
[oss-security] 20140527 Fwd: [ruby-core:62800] [ruby-trunk - Bug #9709] Large string causes SEGV with x64-mingw32 mailing-list