CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2014-8080

The REXML parser in Ruby 1.9.x before 1.9.3-p550, 2.0.x before 2.0.0-p594, and 2.1.x before 2.1.4 allows remote attackers to cause a denial of service (memory consumption) via a crafted XML document, aka an XML Entity Expansion (XEE) attack.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.164

EPSS Ranking 94.6%

CVSS Severity

CVSS v2 Score 5.0

References

Products affected by CVE-2014-8080

Ruby-Lang » Ruby » Version: Any

cpe:2.3:a:ruby-lang:ruby:*
Ruby-Lang » Ruby » Version: 1.9.3

cpe:2.3:a:ruby-lang:ruby:1.9.3
Ruby-Lang » Ruby » Version: 2.0.0

cpe:2.3:a:ruby-lang:ruby:2.0.0
Ruby-Lang » Ruby » Version: 2.1.1

cpe:2.3:a:ruby-lang:ruby:2.1.1
Ruby-Lang » Ruby » Version: 2.1.2

cpe:2.3:a:ruby-lang:ruby:2.1.2
Ruby-Lang » Ruby » Version: 2.1.3

cpe:2.3:a:ruby-lang:ruby:2.1.3
Canonical » Ubuntu Linux » Version: 12.04

cpe:2.3:o:canonical:ubuntu_linux:12.04
Canonical » Ubuntu Linux » Version: 14.04

cpe:2.3:o:canonical:ubuntu_linux:14.04
Canonical » Ubuntu Linux » Version: 14.10

cpe:2.3:o:canonical:ubuntu_linux:14.10
Opensuse » Opensuse » Version: 12.3

cpe:2.3:o:opensuse:opensuse:12.3
Opensuse » Opensuse » Version: 13.1

cpe:2.3:o:opensuse:opensuse:13.1
Redhat » Enterprise Linux » Version: 6.0

cpe:2.3:o:redhat:enterprise_linux:6.0
Redhat » Enterprise Linux » Version: 7.0

cpe:2.3:o:redhat:enterprise_linux:7.0

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2014-8080

Products

Pricing

Contact Us