NetSight
IP …
high7.8

CVE-2011-4815

Ruby (aka CRuby) before 1.8.7-p357 computes hash values without restricting the ability to trigger hash collisions predictably, which allows context-dependent …

Impact

Ruby (aka CRuby) before 1.8.7-p357 computes hash values without restricting the ability to trigger hash collisions predictably, which allows context-dependent attackers to cause a denial of service (CPU consumption) via crafted input to an application that maintains a hash table.

Affected products

VendorProductAffected versions
Ruby-LangRuby
through 1.8.7-p352
Versions 1.8.7-p299, 1.8.7-p302, 1.8.7-p330, 1.8.7-p334

Weakness classification

CWE-20

References