Most recent entries from all

certa-2011-avi-729 — Une vulnérabilité a été corrigée dans Ruby, qui permet de réaliser un déni de service à distance.

certa-2011-avi-729

EUVD-2026-117033

fkie_cve-2011-4815

Ruby (aka CRuby) before 1.8.7-p357 computes hash values without restricting the ability to trigger hash collisions predictably, which allows context-dependent attackers to cause a denial of service (CPU consumption) via crafted input to an application that maintains a hash table.

GHSA-xpr8-vpc7-7vfc

gsd-2011-4815

jvndb-2012-000066

The hash table implementation in Ruby contains a denial-of-service (DoS) vulnerability. The hash table implementation in Ruby contains an issue, where it may intentionally create a series of strings whose hash values collide. As a result, a denial-of-service (DoS) attack may be conducted. Tanaka Akira of National Institute of Advanced Industrial Science and Technology (AIST) reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning Partnership.

RHSA-2012:0069 — Red Hat Security Advisory: ruby security update

ruby: hash table collisions CPU usage DoS (oCERT-2011-003)