CVE-2017-0900

RubyGems version 2.6.12 and earlier is vulnerable to maliciously crafted gem specifications to cause a denial of service attack against RubyGems clients who…

published August 31, 2017

CVSS
—
EPSS
8%
Percentile
95.0
In the wild
Unconfirmed
What it is

RubyGems version 2.6.12 and earlier is vulnerable to maliciously crafted gem specifications to cause a denial of service attack against RubyGems clients who have issued a `query` command.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.08491 · 95.0th percentile
Published
2017-08-31T20:00Z
EPSS history
Timeline
  • 31 AUG 20:00Z
    RubyGems version 2.6.12 and earlier is vulnerable to maliciously crafted gem specifications to cause a denial of service attack against RubyGems clients who…
    cvelistv5