CVE-2015-3227
See a problem?- Source
- https://nvd.nist.gov/vuln/detail/CVE-2015-3227
- Import Source
- https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2015-3227.json
- JSON Data
- https://api.osv.dev/v1/vulns/CVE-2015-3227
- Aliases
- Related
- Published
- 2015-07-26T22:59:06Z
- Modified
- 2024-09-11T02:00:04Z
- Summary
- [none]
- Details
-
The (1) jdom.rb and (2) rexml.rb components in Active Support in Ruby on Rails before 4.1.11 and 4.2.x before 4.2.2, when JDOM or REXML is enabled, allow remote attackers to cause a denial of service (SystemStackError) via a large XML document depth.
- References
-
- http://www.debian.org/security/2016/dsa-3464
- https://groups.google.com/forum/message/raw?msg=rubyonrails-security/bahr2JLnxvk/x4EocXnHPp8J
- http://lists.opensuse.org/opensuse-updates/2015-07/msg00050.html
- http://openwall.com/lists/oss-security/2015/06/16/16
- http://www.securityfocus.com/bid/75234
- http://www.securitytracker.com/id/1033755
- https://security-tracker.debian.org/tracker/CVE-2015-3227
Affected packages
Debian:11 / rails
Package
- Name
- rails
- Purl
- pkg:deb/debian/rails?arch=source
Debian:12 / rails
Package
- Name
- rails
- Purl
- pkg:deb/debian/rails?arch=source
Debian:13 / rails
Package
- Name
- rails
- Purl
- pkg:deb/debian/rails?arch=source