CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2013-4287

Algorithmic complexity vulnerability in Gem::Version::VERSION_PATTERN in lib/rubygems/version.rb in RubyGems before 1.8.23.1, 1.8.24 through 1.8.25, 2.0.x before 2.0.8, and 2.1.x before 2.1.0, as used in Ruby 1.9.0 through 2.0.0p247, allows remote attackers to cause a denial of service (CPU consumption) via a crafted gem version that triggers a large amount of backtracking in a regular expression.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.021

EPSS Ranking 83.2%

CVSS Severity

CVSS v2 Score 4.3

References

Products affected by CVE-2013-4287

Ruby-Lang » Ruby » Version: 1.9

cpe:2.3:a:ruby-lang:ruby:1.9
Ruby-Lang » Ruby » Version: 1.9.1

cpe:2.3:a:ruby-lang:ruby:1.9.1
Ruby-Lang » Ruby » Version: 1.9.2

cpe:2.3:a:ruby-lang:ruby:1.9.2
Ruby-Lang » Ruby » Version: 1.9.3

cpe:2.3:a:ruby-lang:ruby:1.9.3
Ruby-Lang » Ruby » Version: 2.0

cpe:2.3:a:ruby-lang:ruby:2.0
Ruby-Lang » Ruby » Version: 2.0.0

cpe:2.3:a:ruby-lang:ruby:2.0.0
Rubygems » Rubygems » Version: N/A

cpe:2.3:a:rubygems:rubygems:-
Rubygems » Rubygems » Version: 0.2.0

cpe:2.3:a:rubygems:rubygems:0.2.0
Rubygems » Rubygems » Version: 0.3.0

cpe:2.3:a:rubygems:rubygems:0.3.0
Rubygems » Rubygems » Version: 0.4.0

cpe:2.3:a:rubygems:rubygems:0.4.0
Rubygems » Rubygems » Version: 0.5.0

cpe:2.3:a:rubygems:rubygems:0.5.0
Rubygems » Rubygems » Version: 0.6.0

cpe:2.3:a:rubygems:rubygems:0.6.0
Rubygems » Rubygems » Version: 0.6.1

cpe:2.3:a:rubygems:rubygems:0.6.1
Rubygems » Rubygems » Version: 0.7.0

cpe:2.3:a:rubygems:rubygems:0.7.0
Rubygems » Rubygems » Version: 0.8.0

cpe:2.3:a:rubygems:rubygems:0.8.0
Rubygems » Rubygems » Version: 0.8.1

cpe:2.3:a:rubygems:rubygems:0.8.1
Rubygems » Rubygems » Version: 0.8.10

cpe:2.3:a:rubygems:rubygems:0.8.10
Rubygems » Rubygems » Version: 0.8.11

cpe:2.3:a:rubygems:rubygems:0.8.11
Rubygems » Rubygems » Version: 0.8.2

cpe:2.3:a:rubygems:rubygems:0.8.2
Rubygems » Rubygems » Version: 0.8.3

cpe:2.3:a:rubygems:rubygems:0.8.3
Rubygems » Rubygems » Version: 0.8.3a

cpe:2.3:a:rubygems:rubygems:0.8.3a
Rubygems » Rubygems » Version: 0.8.3b

cpe:2.3:a:rubygems:rubygems:0.8.3b
Rubygems » Rubygems » Version: 0.8.4

cpe:2.3:a:rubygems:rubygems:0.8.4
Rubygems » Rubygems » Version: 0.8.40.8.4

cpe:2.3:a:rubygems:rubygems:0.8.40.8.4
Rubygems » Rubygems » Version: 0.8.5

cpe:2.3:a:rubygems:rubygems:0.8.5
Rubygems » Rubygems » Version: 0.8.6

cpe:2.3:a:rubygems:rubygems:0.8.6
Rubygems » Rubygems » Version: 0.8.7

cpe:2.3:a:rubygems:rubygems:0.8.7
Rubygems » Rubygems » Version: 0.8.8

cpe:2.3:a:rubygems:rubygems:0.8.8
Rubygems » Rubygems » Version: 0.8.9

cpe:2.3:a:rubygems:rubygems:0.8.9
Rubygems » Rubygems » Version: 0.9.0

cpe:2.3:a:rubygems:rubygems:0.9.0
Rubygems » Rubygems » Version: 0.9.0.8

cpe:2.3:a:rubygems:rubygems:0.9.0.8
Rubygems » Rubygems » Version: 0.9.1

cpe:2.3:a:rubygems:rubygems:0.9.1
Rubygems » Rubygems » Version: 0.9.2

cpe:2.3:a:rubygems:rubygems:0.9.2
Rubygems » Rubygems » Version: 0.9.3

cpe:2.3:a:rubygems:rubygems:0.9.3
Rubygems » Rubygems » Version: 0.9.4

cpe:2.3:a:rubygems:rubygems:0.9.4
Rubygems » Rubygems » Version: 0.9.4.1

cpe:2.3:a:rubygems:rubygems:0.9.4.1
Rubygems » Rubygems » Version: 0.9.4.2

cpe:2.3:a:rubygems:rubygems:0.9.4.2
Rubygems » Rubygems » Version: 0.9.4.4

cpe:2.3:a:rubygems:rubygems:0.9.4.4
Rubygems » Rubygems » Version: 0.9.4.5

cpe:2.3:a:rubygems:rubygems:0.9.4.5
Rubygems » Rubygems » Version: 0.9.4.6

cpe:2.3:a:rubygems:rubygems:0.9.4.6
Rubygems » Rubygems » Version: 0.9.4.7

cpe:2.3:a:rubygems:rubygems:0.9.4.7
Rubygems » Rubygems » Version: 0.9.5

cpe:2.3:a:rubygems:rubygems:0.9.5
Rubygems » Rubygems » Version: 1.0.0

cpe:2.3:a:rubygems:rubygems:1.0.0
Rubygems » Rubygems » Version: 1.0.1

cpe:2.3:a:rubygems:rubygems:1.0.1
Rubygems » Rubygems » Version: 1.1.0

cpe:2.3:a:rubygems:rubygems:1.1.0
Rubygems » Rubygems » Version: 1.1.1

cpe:2.3:a:rubygems:rubygems:1.1.1
Rubygems » Rubygems » Version: 1.2.0

cpe:2.3:a:rubygems:rubygems:1.2.0
Rubygems » Rubygems » Version: 1.3.0

cpe:2.3:a:rubygems:rubygems:1.3.0
Rubygems » Rubygems » Version: 1.3.1

cpe:2.3:a:rubygems:rubygems:1.3.1
Rubygems » Rubygems » Version: 1.3.2

cpe:2.3:a:rubygems:rubygems:1.3.2
Rubygems » Rubygems » Version: 1.3.3

cpe:2.3:a:rubygems:rubygems:1.3.3
Rubygems » Rubygems » Version: 1.3.4

cpe:2.3:a:rubygems:rubygems:1.3.4
Rubygems » Rubygems » Version: 1.3.5

cpe:2.3:a:rubygems:rubygems:1.3.5
Rubygems » Rubygems » Version: 1.3.6

cpe:2.3:a:rubygems:rubygems:1.3.6
Rubygems » Rubygems » Version: 1.3.7

cpe:2.3:a:rubygems:rubygems:1.3.7
Rubygems » Rubygems » Version: 1.4.0

cpe:2.3:a:rubygems:rubygems:1.4.0
Rubygems » Rubygems » Version: 1.4.1

cpe:2.3:a:rubygems:rubygems:1.4.1
Rubygems » Rubygems » Version: 1.4.2

cpe:2.3:a:rubygems:rubygems:1.4.2
Rubygems » Rubygems » Version: 1.5.0

cpe:2.3:a:rubygems:rubygems:1.5.0
Rubygems » Rubygems » Version: 1.5.1

cpe:2.3:a:rubygems:rubygems:1.5.1
Rubygems » Rubygems » Version: 1.5.2

cpe:2.3:a:rubygems:rubygems:1.5.2
Rubygems » Rubygems » Version: 1.5.3

cpe:2.3:a:rubygems:rubygems:1.5.3
Rubygems » Rubygems » Version: 1.6.0

cpe:2.3:a:rubygems:rubygems:1.6.0
Rubygems » Rubygems » Version: 1.6.1

cpe:2.3:a:rubygems:rubygems:1.6.1
Rubygems » Rubygems » Version: 1.6.2

cpe:2.3:a:rubygems:rubygems:1.6.2
Rubygems » Rubygems » Version: 1.7.0

cpe:2.3:a:rubygems:rubygems:1.7.0
Rubygems » Rubygems » Version: 1.7.1

cpe:2.3:a:rubygems:rubygems:1.7.1
Rubygems » Rubygems » Version: 1.7.2

cpe:2.3:a:rubygems:rubygems:1.7.2
Rubygems » Rubygems » Version: 1.8.0

cpe:2.3:a:rubygems:rubygems:1.8.0
Rubygems » Rubygems » Version: 1.8.1

cpe:2.3:a:rubygems:rubygems:1.8.1
Rubygems » Rubygems » Version: 1.8.10

cpe:2.3:a:rubygems:rubygems:1.8.10
Rubygems » Rubygems » Version: 1.8.11

cpe:2.3:a:rubygems:rubygems:1.8.11
Rubygems » Rubygems » Version: 1.8.12

cpe:2.3:a:rubygems:rubygems:1.8.12
Rubygems » Rubygems » Version: 1.8.13

cpe:2.3:a:rubygems:rubygems:1.8.13
Rubygems » Rubygems » Version: 1.8.14

cpe:2.3:a:rubygems:rubygems:1.8.14
Rubygems » Rubygems » Version: 1.8.15

cpe:2.3:a:rubygems:rubygems:1.8.15
Rubygems » Rubygems » Version: 1.8.16

cpe:2.3:a:rubygems:rubygems:1.8.16
Rubygems » Rubygems » Version: 1.8.17

cpe:2.3:a:rubygems:rubygems:1.8.17
Rubygems » Rubygems » Version: 1.8.18

cpe:2.3:a:rubygems:rubygems:1.8.18
Rubygems » Rubygems » Version: 1.8.19

cpe:2.3:a:rubygems:rubygems:1.8.19
Rubygems » Rubygems » Version: 1.8.2

cpe:2.3:a:rubygems:rubygems:1.8.2
Rubygems » Rubygems » Version: 1.8.20

cpe:2.3:a:rubygems:rubygems:1.8.20
Rubygems » Rubygems » Version: 1.8.21

cpe:2.3:a:rubygems:rubygems:1.8.21
Rubygems » Rubygems » Version: 1.8.22

cpe:2.3:a:rubygems:rubygems:1.8.22
Rubygems » Rubygems » Version: 1.8.23

cpe:2.3:a:rubygems:rubygems:1.8.23
Rubygems » Rubygems » Version: 1.8.24

cpe:2.3:a:rubygems:rubygems:1.8.24
Rubygems » Rubygems » Version: 1.8.25

cpe:2.3:a:rubygems:rubygems:1.8.25
Rubygems » Rubygems » Version: 1.8.3

cpe:2.3:a:rubygems:rubygems:1.8.3
Rubygems » Rubygems » Version: 1.8.4

cpe:2.3:a:rubygems:rubygems:1.8.4
Rubygems » Rubygems » Version: 1.8.5

cpe:2.3:a:rubygems:rubygems:1.8.5
Rubygems » Rubygems » Version: 1.8.6

cpe:2.3:a:rubygems:rubygems:1.8.6
Rubygems » Rubygems » Version: 1.8.7

cpe:2.3:a:rubygems:rubygems:1.8.7
Rubygems » Rubygems » Version: 1.8.8

cpe:2.3:a:rubygems:rubygems:1.8.8
Rubygems » Rubygems » Version: 1.8.9

cpe:2.3:a:rubygems:rubygems:1.8.9
Rubygems » Rubygems » Version: 2.0.0

cpe:2.3:a:rubygems:rubygems:2.0.0
Rubygems » Rubygems » Version: 2.0.1

cpe:2.3:a:rubygems:rubygems:2.0.1
Rubygems » Rubygems » Version: 2.0.2

cpe:2.3:a:rubygems:rubygems:2.0.2
Rubygems » Rubygems » Version: 2.0.3

cpe:2.3:a:rubygems:rubygems:2.0.3
Rubygems » Rubygems » Version: 2.0.4

cpe:2.3:a:rubygems:rubygems:2.0.4
Rubygems » Rubygems » Version: 2.0.5

cpe:2.3:a:rubygems:rubygems:2.0.5
Rubygems » Rubygems » Version: 2.0.6

cpe:2.3:a:rubygems:rubygems:2.0.6
Rubygems » Rubygems » Version: 2.0.7

cpe:2.3:a:rubygems:rubygems:2.0.7
Rubygems » Rubygems » Version: 2.1.0

cpe:2.3:a:rubygems:rubygems:2.1.0
Redhat » Enterprise Linux » Version: 6.0

cpe:2.3:o:redhat:enterprise_linux:6.0

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2013-4287

Products

Pricing

Contact Us