Sha256: d348f582792844546ae758d6bf7c2a82a88a570c10f3f819c0d9b63a80ccab99
Contents?: true
Size: 1.08 KB
Versions: 16
Compression:
Stored size: 1.08 KB
Contents
module Dawn
module Kb
# Automatically created with rake on 2015-07-30
class CVE_2014_9490
include DependencyCheck
def initialize
message = "The numtok function in lib/raven/okjson.rb in the raven-ruby gem before 0.12.2 for Ruby allows remote attackers to cause a denial of service via a large exponent value in a scientific number."
super({
:name=>"CVE-2014-9490",
:cvss=>"AV:N/AC:L/Au:N/C:N/I:N/A:P",
:release_date => Date.new(2015, 1, 20),
:cwe=>"399",
:owasp=>"A9",
:osvdb=>"115654",
:applies=>["sinatra", "padrino", "rails"],
:kind=>Dawn::KnowledgeBase::DEPENDENCY_CHECK,
:message=>message,
:mitigation=>"Please upgrade raven-ruby gem to the latest version",
:aux_links=>["https://github.com/getsentry/raven-ruby/commit/477ee93a3f735be33bc1e726820654cdf6e22d8f", "http://seclists.org/oss-sec/2015/q1/26"]
})
self.safe_dependencies = [{:name=>"raven-ruby", :version=>['0.12.2']}]
end
end
end
end
Version data entries
16 entries across 16 versions & 1 rubygems