oval:org.mitre.oval:def:23772

Definition Id: oval:org.mitre.oval:def:23772
 
Oval ID: oval:org.mitre.oval:def:23772
Title: ELSA-2013:1441: rubygems security update (Moderate)
Description: Algorithmic complexity vulnerability in Gem::Version::VERSION_PATTERN in lib/rubygems/version.rb in RubyGems before 1.8.23.1, 1.8.24 through 1.8.25, 2.0.x before 2.0.8, and 2.1.x before 2.1.0, as used in Ruby 1.9.0 through 2.0.0p247, allows remote attackers to cause a denial of service (CPU consumption) via a crafted gem version that triggers a large amount of backtracking in a regular expression.
Family: unix Class: patch
Reference(s): ELSA-2013:1441-01
CVE-2012-2005
CVE-2012-2126
CVE-2013-4287
Version: 17
Platform(s): Oracle Linux 6
Product(s): rubygems
Definition Synopsis:
Definition Id: oval:org.mitre.oval:def:16594
 
Oval ID: oval:org.mitre.oval:def:16594
Title: Oracle Linux 6.x
Description: The operating system installed on the system is Oracle Linux 6.x
Family: unix Class: inventory
Reference(s): cpe:/o:oracle:linux:6
Version: 5
Platform(s): Oracle Linux 6
Product(s):
Definition Synopsis:
Referenced By:
oval:org.mitre.oval:def:23772