CVE-2018-8777

In Ruby before 2.2.10, 2.3.x before 2.3.7, 2.4.x before 2.4.4, 2.5.x before 2.5.1, and 2.6.0-preview1, an attacker can pass a large HTTP request with a crafted…

published April 3, 2018

CVSS
—
EPSS
4%
Percentile
91.4
In the wild
Unconfirmed
What it is

In Ruby before 2.2.10, 2.3.x before 2.3.7, 2.4.x before 2.4.4, 2.5.x before 2.5.1, and 2.6.0-preview1, an attacker can pass a large HTTP request with a crafted header to WEBrick server or a crafted body to WEBrick server/handler and cause a denial of service (memory consumption).

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.04458 · 91.4th percentile
Published
2018-04-03T22:00Z
EPSS history
Timeline
  • 03 APR 22:00Z
    In Ruby before 2.2.10, 2.3.x before 2.3.7, 2.4.x before 2.4.4, 2.5.x before 2.5.1, and 2.6.0-preview1, an attacker can pass a large HTTP request with a crafted…
    cvelistv5