VDB
DEBIAN-CVE-2013-4287
DEBIAN-CVE-2013-4287
PUBLISHED
CVSS 8.199999809265137 HIGH
Algorithmic complexity vulnerability in Gem::Version::VERSION_PATTERN in lib/rubygems/version.rb in RubyGems before 1.8.23.1, 1.8.24 through 1.8.25, 2.0.x before 2.0.8, and 2.1.x before 2.1.0, as used in Ruby 1.9.0 through 2.0.0p247, allows remote attackers to cause a denial of service (CPU consumption) via a crafted gem version that triggers a large amount of backtracking in a regular expression.
Risk Scores
CVSS 4.0
8.199999809265137
CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Debian:12 | rubygems | 0, 0, 0 |
| Debian:14 | rubygems | 0, 0, 0 |
| Debian:11 | rubygems | 0, 0, 0 |
| Debian:13 | rubygems | 0, 0, 0 |
Timeline
- Oct 17, 2013 CVE Published
- Apr 28, 2026 CVE Updated