CVE-2017-14033

Priority
Description
The decode method in the OpenSSL::ASN1 module in Ruby before 2.2.8, 2.3.x
before 2.3.5, and 2.4.x through 2.4.1 allows attackers to cause a denial of
service (interpreter crash) via a crafted string.
Notes
Package
Upstream:needs-triage
Ubuntu 14.04 ESM:DNE (trusty was released [1.9.3.484-2ubuntu1.5])
Patches:
Package
Upstream:needs-triage
Ubuntu 14.04 ESM:DNE
Patches:
Package
Upstream:needs-triage
Ubuntu 16.04 ESM:released (2.3.1-2~16.04.5)
Ubuntu 14.04 ESM:DNE
Patches:
Other:https://github.com/ruby/openssl/commit/1648afef33c1d97fb203c82291b8a61269e85d3b
More Information

Updated: 2022-04-13 12:55:03 UTC (commit f411bd370d482ef4385c4e751d121a4055fbc009)