DEBIAN-CVE-2019-16201

See a problem?
Please try reporting it to the source first.
Source
https://security-tracker.debian.org/tracker/CVE-2019-16201
Import Source
https://storage.googleapis.com/osv-test-debian-osv/debian-cve-osv/DEBIAN-CVE-2019-16201.json
JSON Data
https://api.test.osv.dev/v1/vulns/DEBIAN-CVE-2019-16201
Upstream
Published
2019-11-26T18:15:15Z
Modified
2025-09-19T06:20:23Z
Summary
[none]
Details

WEBrick::HTTPAuth::DigestAuth in Ruby through 2.4.7, 2.5.x through 2.5.6, and 2.6.x through 2.6.4 has a regular expression Denial of Service cause by looping/backtracking. A victim must expose a WEBrick server that uses DigestAuth to the Internet or a untrusted network.

References

Affected packages

Debian:12 / jruby

Package

Name
jruby
Purl
pkg:deb/debian/jruby?arch=source

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
9.3.9.0+ds-1

Ecosystem specific 

{
    "urgency": "not yet assigned"
}

Debian:13 / jruby

Package

Name
jruby
Purl
pkg:deb/debian/jruby?arch=source

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
9.3.9.0+ds-1

Ecosystem specific 

{
    "urgency": "not yet assigned"
}

Debian:14 / jruby

Package

Name
jruby
Purl
pkg:deb/debian/jruby?arch=source

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
9.3.9.0+ds-1

Ecosystem specific 

{
    "urgency": "not yet assigned"
}