Candidate: CVE-2015-4411
PublicDate: 2020-02-20 17:15:00 UTC
References:
 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4411
 https://github.com/mongoid/moped/commit/dd5a7c14b5d2e466f7875d079af71ad19774609b#diff-3b93602f64c2fe46d38efd9f73ef5358R24
Description:
 The Moped::BSON::ObjecId.legal? method in mongodb/bson-ruby before 3.0.4 as
 used in rubygem-moped allows remote attackers to cause a denial of service
 (worker resource consumption) via a crafted string. NOTE: This issue is due
 to an incomplete fix to CVE-2015-4410.
Ubuntu-Description:
Notes:
Bugs:
Priority: medium
Discovered-by:
Assigned-to:
CVSS:
 nvd: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H [7.5 HIGH]

Patches_ruby-bson:
upstream_ruby-bson: needs-triage
precise_ruby-bson: DNE
precise/esm_ruby-bson: DNE
trusty_ruby-bson: not-affected (code not present)
trusty/esm_ruby-bson: DNE (trusty was not-affected [code not present])
utopic_ruby-bson: ignored (reached end-of-life)
vivid_ruby-bson: ignored (reached end-of-life)
vivid/stable-phone-overlay_ruby-bson: DNE
vivid/ubuntu-core_ruby-bson: DNE
wily_ruby-bson: ignored (reached end-of-life)
xenial_ruby-bson: not-affected (code not present)
yakkety_ruby-bson: ignored (reached end-of-life)
zesty_ruby-bson: ignored (reached end-of-life)
artful_ruby-bson: ignored (reached end-of-life)
bionic_ruby-bson: not-affected (code not present)
cosmic_ruby-bson: not-affected (code not present)
devel_ruby-bson: not-affected (code not present)