CVE-2017-14033

The decode method in the OpenSSL::ASN1 module in Ruby before 2.2.8, 2.3.x before 2.3.5, and 2.4.x through 2.4.1 allows attackers to cause a denial of service…

published September 19, 2017

CVSS
—
EPSS
8%
Percentile
94.6
In the wild
Unconfirmed
What it is

The decode method in the OpenSSL::ASN1 module in Ruby before 2.2.8, 2.3.x before 2.3.5, and 2.4.x through 2.4.1 allows attackers to cause a denial of service (interpreter crash) via a crafted string.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.07734 · 94.6th percentile
Published
2017-09-19T17:00Z
EPSS history
Timeline
  • 19 SEP 17:00Z
    The decode method in the OpenSSL::ASN1 module in Ruby before 2.2.8, 2.3.x before 2.3.5, and 2.4.x through 2.4.1 allows attackers to cause a denial of service…
    cvelistv5