CVE-2014-0082

EPSS 6.19%
Veröffentlicht 20.02.2014 15:27:09
Zuletzt bearbeitet 29.04.2026 01:13:23
Erkennungen
Login

actionpack/lib/action_view/template/text.rb in Action View in Ruby on Rails 3.x before 3.2.17 converts MIME type strings to symbols during use of the :text option to the render method, which allows remote attackers to cause a denial of service (memory consumption) by including these strings in headers.

Betroffene Produkte Warnungen 0 Metriken 2 CWE 1 Referenzen 12

NVD 103 VulnDex Vulnerability Enrichment 0

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Rubyonrails ≫ Rails Version 3.0.0

Rubyonrails ≫ Rails Version 3.0.0 Update beta

Rubyonrails ≫ Rails Version 3.0.0 Update beta2

Rubyonrails ≫ Rails Version 3.0.0 Update beta3

Rubyonrails ≫ Rails Version 3.0.0 Update beta4

Rubyonrails ≫ Rails Version 3.0.0 Update rc

Rubyonrails ≫ Rails Version 3.0.0 Update rc2

Rubyonrails ≫ Rails Version 3.0.1

Rubyonrails ≫ Rails Version 3.0.1 Update pre

Rubyonrails ≫ Rails Version 3.0.2

Rubyonrails ≫ Rails Version 3.0.2 Update pre

Rubyonrails ≫ Rails Version 3.0.3

Rubyonrails ≫ Rails Version 3.0.4 Update rc1

Rubyonrails ≫ Rails Version 3.0.5

Rubyonrails ≫ Rails Version 3.0.5 Update rc1

Rubyonrails ≫ Rails Version 3.0.6

Rubyonrails ≫ Rails Version 3.0.6 Update rc1

Rubyonrails ≫ Rails Version 3.0.6 Update rc2

Rubyonrails ≫ Rails Version 3.0.7

Rubyonrails ≫ Rails Version 3.0.7 Update rc1

Rubyonrails ≫ Rails Version 3.0.7 Update rc2

Rubyonrails ≫ Rails Version 3.0.8

Rubyonrails ≫ Rails Version 3.0.8 Update rc1

Rubyonrails ≫ Rails Version 3.0.8 Update rc2

Rubyonrails ≫ Rails Version 3.0.8 Update rc3

Rubyonrails ≫ Rails Version 3.0.8 Update rc4

Rubyonrails ≫ Rails Version 3.0.9

Rubyonrails ≫ Rails Version 3.0.9 Update rc1

Rubyonrails ≫ Rails Version 3.0.9 Update rc2

Rubyonrails ≫ Rails Version 3.0.9 Update rc3

Rubyonrails ≫ Rails Version 3.0.9 Update rc4

Rubyonrails ≫ Rails Version 3.0.9 Update rc5

Rubyonrails ≫ Rails Version 3.0.10

Rubyonrails ≫ Rails Version 3.0.10 Update rc1

Rubyonrails ≫ Rails Version 3.0.11

Rubyonrails ≫ Rails Version 3.0.12

Rubyonrails ≫ Rails Version 3.0.12 Update rc1

Rubyonrails ≫ Rails Version 3.0.13

Rubyonrails ≫ Rails Version 3.0.13 Update rc1

Rubyonrails ≫ Rails Version 3.0.14

Rubyonrails ≫ Rails Version 3.0.16

Rubyonrails ≫ Rails Version 3.0.17

Rubyonrails ≫ Rails Version 3.0.18

Rubyonrails ≫ Rails Version 3.0.19

Rubyonrails ≫ Rails Version 3.0.20

Rubyonrails ≫ Rails Version 3.1.0

Rubyonrails ≫ Rails Version 3.1.0 Update beta1

Rubyonrails ≫ Rails Version 3.1.0 Update rc1

Rubyonrails ≫ Rails Version 3.1.0 Update rc2

Rubyonrails ≫ Rails Version 3.1.0 Update rc3

Rubyonrails ≫ Rails Version 3.1.0 Update rc4

Rubyonrails ≫ Rails Version 3.1.0 Update rc5

Rubyonrails ≫ Rails Version 3.1.0 Update rc6

Rubyonrails ≫ Rails Version 3.1.0 Update rc7

Rubyonrails ≫ Rails Version 3.1.0 Update rc8

Rubyonrails ≫ Rails Version 3.1.1

Rubyonrails ≫ Rails Version 3.1.1 Update rc1

Rubyonrails ≫ Rails Version 3.1.1 Update rc2

Rubyonrails ≫ Rails Version 3.1.1 Update rc3

Rubyonrails ≫ Rails Version 3.1.2

Rubyonrails ≫ Rails Version 3.1.2 Update rc1

Rubyonrails ≫ Rails Version 3.1.2 Update rc2

Rubyonrails ≫ Rails Version 3.1.3

Rubyonrails ≫ Rails Version 3.1.4

Rubyonrails ≫ Rails Version 3.1.4 Update rc1

Rubyonrails ≫ Rails Version 3.1.5

Rubyonrails ≫ Rails Version 3.1.5 Update rc1

Rubyonrails ≫ Rails Version 3.1.6

Rubyonrails ≫ Rails Version 3.1.7

Rubyonrails ≫ Rails Version 3.1.8

Rubyonrails ≫ Rails Version 3.1.9

Rubyonrails ≫ Rails Version 3.1.10

Rubyonrails ≫ Rails Version 3.2.0

Rubyonrails ≫ Rails Version 3.2.0 Update rc1

Rubyonrails ≫ Rails Version 3.2.0 Update rc2

Rubyonrails ≫ Rails Version 3.2.1

Rubyonrails ≫ Rails Version 3.2.2

Rubyonrails ≫ Rails Version 3.2.2 Update rc1

Rubyonrails ≫ Rails Version 3.2.3

Rubyonrails ≫ Rails Version 3.2.3 Update rc1

Rubyonrails ≫ Rails Version 3.2.3 Update rc2

Rubyonrails ≫ Rails Version 3.2.4

Rubyonrails ≫ Rails Version 3.2.4 Update rc1

Rubyonrails ≫ Rails Version 3.2.5

Rubyonrails ≫ Rails Version 3.2.6

Rubyonrails ≫ Rails Version 3.2.7

Rubyonrails ≫ Rails Version 3.2.8

Rubyonrails ≫ Rails Version 3.2.9

Rubyonrails ≫ Rails Version 3.2.10

Rubyonrails ≫ Rails Version 3.2.11

Rubyonrails ≫ Rails Version 3.2.12

Rubyonrails ≫ Rails Version 3.2.13

Rubyonrails ≫ Rails Version 3.2.13 Update rc1

Rubyonrails ≫ Rails Version 3.2.13 Update rc2

Rubyonrails ≫ Rails Version 3.2.15

Rubyonrails ≫ Rails Version 3.2.15 Update rc3

Rubyonrails ≫ Ruby On Rails Version <= 3.2.16

Rubyonrails ≫ Ruby On Rails Version 3.0.4

Rubyonrails ≫ Ruby On Rails Version 3.2.14

Rubyonrails ≫ Ruby On Rails Version 3.2.14 Update rc1

Rubyonrails ≫ Ruby On Rails Version 3.2.14 Update rc2

Rubyonrails ≫ Ruby On Rails Version 3.2.15 Update rc1

Rubyonrails ≫ Ruby On Rails Version 3.2.15 Update rc2

Zu dieser CVE wurde keine Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	6.19%	0.926

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
NIST	5	10	2.9	AV:N/AC:L/Au:N/C:N/I:N/A:P

CWE-20 Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

http://rhn.redhat.com/errata/RHSA-2014-0215.html

http://secunia.com/advisories/57376

http://secunia.com/advisories/57836

http://www.getchef.com/blog/2014/04/09/enterprise-chef-11-1-3-release/

http://lists.opensuse.org/opensuse-updates/2014-02/msg00081.html

http://rhn.redhat.com/errata/RHSA-2014-0306.html

http://openwall.com/lists/oss-security/2014/02/18/10

https://groups.google.com/forum/message/raw?msg=rubyonrails-security/LMxO_3_eCuc/ozGBEhKaJbIJ

https://puppet.com/security/cve/cve-2014-0082

https://nvd.nist.gov/vuln/detail/CVE-2014-0082

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2014-0082

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2014-0082

EUVD

Team-orientierte Vulnerability Management Plattform

Features der Plattform

CVE-2014-0082