Skip to content
OpenAdvisories
Medium CVE-2014-9490 EUVD-2017-0214GHSA-c9c5-9fpr-m882

sentry-raven allows remote attackers to cause a denial of service via a large exponent value in a scientific number

Published Jan 20, 2015 · Updated Aug 6, 2024 · Assigned by mitre

Description

The numtok function in lib/raven/okjson.rb in the raven-ruby gem before 0.12.2 for Ruby allows remote attackers to cause a denial of service via a large exponent value in a scientific number.

Affected packages

EcosystemPackageAffectedFixedRecord
RubyGems sentry-raven < 0.12.2 0.12.2 GHSA-c9c5-9fpr-m882

References