The remote Oracle Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2014-1911 advisory.

    - Fix REXML billion laughs attack via parameter entity expansion       (CVE-2014-8080).
      Resolves: rhbz#1163993

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Updated ruby packages that fix two security issues are now available for Red Hat Enterprise Linux 6.

Red Hat Product Security has rated this update as having Moderate security impact. Common Vulnerability Scoring System (CVSS) base scores, which give detailed severity ratings, are available for each vulnerability from the CVE links in the References section.

Ruby is an extensible, interpreted, object-oriented, scripting language. It has features to process text files and to perform system management tasks.

Multiple denial of service flaws were found in the way the Ruby REXML XML parser performed expansion of parameter entities. A specially crafted XML document could cause REXML to use an excessive amount of CPU and memory. (CVE-2014-8080, CVE-2014-8090)

The CVE-2014-8090 issue was discovered by Red Hat Product Security.

All ruby users are advised to upgrade to these updated packages, which contain backported patches to correct these issues. All running instances of Ruby need to be restarted for this update to take effect.

Multiple denial of service flaws were found in the way the Ruby REXML XML parser performed expansion of parameter entities. A specially crafted XML document could cause REXML to use an excessive amount of CPU and memory. (CVE-2014-8080, CVE-2014-8090)

A stack-based buffer overflow was found in the implementation of the Ruby Array pack() method. When performing base64 encoding, a single byte could be written past the end of the buffer, possibly causing Ruby to crash. (CVE-2014-4975)

All running instances of Ruby need to be restarted for this update to take effect.

Updated ruby packages fix security vulnerabilities :

Due to unrestricted entity expansion, when reading text nodes from an XML document, the REXML parser in Ruby can be coerced into allocating extremely large string objects which can consume all of the memory on a machine, causing a denial of service (CVE-2014-8080).

Will Wood discovered that Ruby incorrectly handled the encodes() function. An attacker could possibly use this issue to cause Ruby to crash, resulting in a denial of service, or possibly execute arbitrary code. The default compiler options for affected releases should reduce the vulnerability to a denial of service (CVE-2014-4975).

Due to an incomplete fix for CVE-2014-8080, 100% CPU utilization can occur as a result of recursive expansion with an empty String. When reading text nodes from an XML document, the REXML parser in Ruby can be coerced into allocating extremely large string objects which can consume all of the memory on a machine, causing a denial of service (CVE-2014-8090).

The remote Oracle Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2014-1913 advisory.

    - Fix off-by-one stack-based buffer overflow in the encodes() function       (CVE-2014-4975).
      Related: rhbz#1164004
    - Fix REXML billion laughs attack via parameter entity expansion       (CVE-2014-8080).
      Related: rhbz#1164004

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2014:1912 advisory.

    Ruby is an extensible, interpreted, object-oriented, scripting language.
    It has features to process text files and to perform system management     tasks.

    Multiple denial of service flaws were found in the way the Ruby REXML XML     parser performed expansion of parameter entities. A specially crafted XML     document could cause REXML to use an excessive amount of CPU and memory.
    (CVE-2014-8080, CVE-2014-8090)

    A stack-based buffer overflow was found in the implementation of the Ruby     Array pack() method. When performing base64 encoding, a single byte could     be written past the end of the buffer, possibly causing Ruby to crash.
    (CVE-2014-4975)

    The CVE-2014-8090 issue was discovered by Red Hat Product Security.

    All ruby users are advised to upgrade to these updated packages, which     contain backported patches to correct these issues. All running instances     of Ruby need to be restarted for this update to take effect.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Multiple denial of service flaws were found in the way the Ruby REXML XML parser performed expansion of parameter entities. A specially crafted XML document could cause REXML to use an excessive amount of CPU and memory. (CVE-2014-8080, CVE-2014-8090)

All running instances of Ruby need to be restarted for this update to take effect.

This ruby update fixes the following two security issues :

  - bnc#902851: fix CVE-2014-8080: Denial Of Service XML     Expansion

  - bnc#905326: fix CVE-2014-8090: Another Denial Of Service     XML Expansion

  - Enable tests to run during the build. This way we can     compare the results on different builds.

The following issues were fixed in this update :

  - CVE-2014-8090: Denial Of Service XML Expansion     (bnc#905326)

  - CVE-2014-8080: Denial Of Service XML Expansion     (bnc#902851)

It was discovered that the REXML parser, part of the interpreter for the Ruby language, could be coerced into allocating large string objects that could consume all available memory on the system. This could allow remote attackers to cause a denial of service (crash).

ID	名前	製品	ファミリー	公開日	更新日	深刻度
79593	Oracle Linux 6 : ruby (ELSA-2014-1911)	Nessus	Oracle Linux Local Security Checks	2014/11/27	2024/10/22	high
79642	CentOS 6 : ruby (CESA-2014:1911)	Nessus	CentOS Local Security Checks	2014/12/2	2021/1/4	medium
79658	Scientific Linux Security Update : ruby on SL7.x x86_64 (20141126)	Nessus	Scientific Linux Local Security Checks	2014/12/2	2021/1/14	medium
82382	Mandriva Linux Security Advisory : ruby (MDVSA-2015:129)	Nessus	Mandriva Local Security Checks	2015/3/30	2021/1/14	medium
181041	Oracle Linux 6 : ruby193-ruby (ELSA-2014-1913)	Nessus	Oracle Linux Local Security Checks	2023/9/7	2024/10/22	high
79595	RHEL 6 : ruby (RHSA-2014:1911)	Nessus	Red Hat Local Security Checks	2014/11/27	2021/1/14	medium
79596	RHEL 7 : ruby (RHSA-2014:1912)	Nessus	Red Hat Local Security Checks	2014/11/27	2024/11/4	high
79657	Scientific Linux Security Update : ruby on SL6.x i386/x86_64 (20141126)	Nessus	Scientific Linux Local Security Checks	2014/12/2	2021/1/14	medium
80353	openSUSE Security Update : ruby20 (openSUSE-SU-2015:0002-1)	Nessus	SuSE Local Security Checks	2015/1/5	2021/1/19	medium
80356	openSUSE Security Update : ruby2.1 (openSUSE-SU-2015:0007-1)	Nessus	SuSE Local Security Checks	2015/1/5	2021/1/19	medium
81279	Debian DSA-3159-1 : ruby1.8 - security update	Nessus	Debian Local Security Checks	2015/2/11	2021/1/11	medium

検出

プラグインの検索

high

medium

medium

medium

high

medium

high

medium

medium

medium

medium