GHSA-34hf-g744-jw64

Source

https://github.com/advisories/GHSA-34hf-g744-jw64

Import Source

https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2022/05/GHSA-34hf-g744-jw64/GHSA-34hf-g744-jw64.json

JSON Data

https://api.osv.dev/v1/vulns/GHSA-34hf-g744-jw64

Aliases

CVE-2014-10077

Published

2022-05-14T01:48:52Z

Modified

2024-02-16T08:25:02.497404Z

Severity

7.5 (High) CVSS_V3 - CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CVSS Calculator

Summary

i18n Vulnerable to Denial of Service Attack

Details

Hash#slice in lib/i18n/coreext/hash.rb in the i18n gem before 0.8.0 for Ruby allows remote attackers to cause a denial of service (application crash) via a call in a situation where :somekey is present in keep_keys but not present in the hash.

Database specific

{
    "severity": "HIGH",
    "github_reviewed_at": "2022-06-17T21:39:16Z",
    "cwe_ids": [
        "CWE-20"
    ],
    "nvd_published_at": "2018-11-06T15:29:00Z",
    "github_reviewed": true
}

References

Affected packages

RubyGems / i18n

Package

Name: i18n
Purl: pkg:gem/i18n

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

0.8.0

Affected versions

0.*

0.1.0

0.2.0

0.2.1

0.3.0

0.3.1

0.3.2

0.3.3

0.3.4

0.3.5

0.3.6.pre

0.3.6

0.3.7

0.4.0.beta

0.4.0.beta1

0.4.0

0.4.1

0.4.2

0.5.0beta1

0.5.0beta2

0.5.0beta3

0.5.0

0.5.2

0.5.3

0.5.4

0.6.0beta1

0.6.0

0.6.1

0.6.2

0.6.3

0.6.4

0.6.5

0.6.8

0.6.9

0.6.11

0.7.0.beta1

0.7.0

0.8.0.beta1

Database specific

source

"https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2022/05/GHSA-34hf-g744-jw64/GHSA-34hf-g744-jw64.json"