Test Kennung:	1.3.6.1.4.1.25623.1.0.805202
Kategorie:	Denial of Service
Titel:	Ruby 'REXML' Parser XML Entity Expansion (XEE) Vulnerability - Windows
Zusammenfassung:	Ruby is prone to XML entity expansion vulnerability.
Beschreibung:	Summary: Ruby is prone to XML entity expansion vulnerability. Vulnerability Insight: Flaw exists due to an error within the REXML module when parsing XML entities. Vulnerability Impact: Successful exploitation will allow attackers to cause a denial of service (crash) condition. Affected Software/OS: Ruby versions Ruby 1.9.x before 1.9.3-p551, 2.0.x before 2.0.0-p598, and 2.1.x before 2.1.5 on Windows. Solution: Upgrade to Ruby 1.9.3-p551 or 2.0.0-p598 or 2.1.5 later. CVSS Score: 5.0 CVSS Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Querverweis:	Common Vulnerability Exposure (CVE) ID: CVE-2014-8090 http://lists.apple.com/archives/security-announce/2015/Sep/msg00008.html BugTraq ID: 71230 http://www.securityfocus.com/bid/71230 Debian Security Information: DSA-3157 (Google Search) http://www.debian.org/security/2015/dsa-3157 Debian Security Information: DSA-3159 (Google Search) http://www.debian.org/security/2015/dsa-3159 http://www.mandriva.com/security/advisories?name=MDVSA-2015:129 RedHat Security Advisories: RHSA-2014:1911 http://rhn.redhat.com/errata/RHSA-2014-1911.html RedHat Security Advisories: RHSA-2014:1912 http://rhn.redhat.com/errata/RHSA-2014-1912.html RedHat Security Advisories: RHSA-2014:1913 http://rhn.redhat.com/errata/RHSA-2014-1913.html RedHat Security Advisories: RHSA-2014:1914 http://rhn.redhat.com/errata/RHSA-2014-1914.html http://secunia.com/advisories/59948 http://secunia.com/advisories/62050 http://secunia.com/advisories/62748 SuSE Security Announcement: openSUSE-SU-2014:1589 (Google Search) http://lists.opensuse.org/opensuse-updates/2014-12/msg00035.html SuSE Security Announcement: openSUSE-SU-2015:0002 (Google Search) http://lists.opensuse.org/opensuse-updates/2015-01/msg00000.html SuSE Security Announcement: openSUSE-SU-2015:0007 (Google Search) http://lists.opensuse.org/opensuse-updates/2015-01/msg00004.html http://www.ubuntu.com/usn/USN-2412-1
Copyright	Copyright (C) 2014 Greenbone AG

Dies ist nur einer von 145615 Anfälligkeitstests in unserem Testpaket. Finden Sie mehr über unsere vollständigen Sicherheitsüberprüfungen heraus. Um einen gratis Test für diese Anfälligkeit auf Ihrem System durchlaufen zu lassen, registrieren Sie sich bitte unten.