Test ID:	1.3.6.1.4.1.25623.1.0.804888
Category:	Denial of Service
Title:	Ruby 'str_buf_cat' function Denial-of-Service Vulnerability - Windows
Summary:	Ruby is prone to a denial of service (DoS) vulnerability.
Description:	Summary: Ruby is prone to a denial of service (DoS) vulnerability. Vulnerability Insight: Flaw exists due to an error in 'str_buf_cat' function in string.c script triggered when handling an overly long string. Vulnerability Impact: Successful exploitation will allow attackers to cause a denial of service (crash) condition. Affected Software/OS: Ruby versions 1.9.3, 2.0.0 and 2.1.0 on Windows. Solution: Upgrade to Ruby 2.1.3 or later. CVSS Score: 5.0 CVSS Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2014-3916 BugTraq ID: 67705 http://www.securityfocus.com/bid/67705 https://bugs.ruby-lang.org/issues/9709 http://seclists.org/oss-sec/2014/q2/362 http://seclists.org/oss-sec/2014/q2/375 XForce ISS Database: ruby-cve20143916-dos(93505) https://exchange.xforce.ibmcloud.com/vulnerabilities/93505
Copyright	Copyright (C) 2014 Greenbone AG

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.