CVE-2006-1931
Fixed in a distro release EPSS 10%
The HTTP/XMLRPC server in Ruby before 1.8.2 uses blocking sockets, which allows attackers to cause a denial of service (blocked connections) via a large amount of data.
Products: yukihiro_matsumoto ruby
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 3.1 | ruby1.8 | 1.8.2-7sarge4 |
| Red Hat Enterprise Linux 4 | irb | 0:1.8.1-7.EL4.3 |
| Red Hat Enterprise Linux 4 | ruby | 0:1.8.1-7.EL4.3 |
| Red Hat Enterprise Linux 4 | ruby-debuginfo | 0:1.8.1-7.EL4.3 |
| Red Hat Enterprise Linux 4 | ruby-devel | 0:1.8.1-7.EL4.3 |
| Red Hat Enterprise Linux 4 | ruby-docs | 0:1.8.1-7.EL4.3 |
| Red Hat Enterprise Linux 4 | ruby-libs | 0:1.8.1-7.EL4.3 |
| Red Hat Enterprise Linux 4 | ruby-mode | 0:1.8.1-7.EL4.3 |
| Red Hat Enterprise Linux 4 | ruby-tcltk | 0:1.8.1-7.EL4.3 |