From 582f147a1c9e8b1f6db1ea9fac199976007bf52c Mon Sep 17 00:00:00 2001 From: Reed Loden Date: Mon, 20 Jul 2015 19:19:05 -0700 Subject: [PATCH 1/3] Adding OSVDB-121500 for i18n --- gems/i18n/OSVDB-121500.yml | 11 +++++++++++ 1 file changed, 11 insertions(+) create mode 100644 gems/i18n/OSVDB-121500.yml diff --git a/gems/i18n/OSVDB-121500.yml b/gems/i18n/OSVDB-121500.yml new file mode 100644 index 0000000000..9d37ed89ee --- /dev/null +++ b/gems/i18n/OSVDB-121500.yml @@ -0,0 +1,11 @@ +--- +gem: i18n +osvdb: 121500 +url: http://osvdb.org/show/osvdb/121500 +title: i18n Gem for Ruby lib/i18n/core_ext/hash.rb Hash#slice() Function Hash Handling DoS +date: 2014-09-27 +description: | + i18n Gem for Ruby contains a flaw in the Hash#slice() function in + lib/i18n/core_ext/hash.rb that is triggered when calling a hash when + :some_key is in keep_keys but not in the hash. This may allow an attacker + to cause the program to crash. From 3a16c2b63e2d797e6d9940436672722e63a2a757 Mon Sep 17 00:00:00 2001 From: Reed Loden Date: Tue, 6 Nov 2018 08:43:58 -0800 Subject: [PATCH 2/3] Update and rename OSVDB-121500.yml to CVE-2014-10077.yml --- gems/i18n/{OSVDB-121500.yml => CVE-2014-10077.yml} | 7 +++++-- 1 file changed, 5 insertions(+), 2 deletions(-) rename gems/i18n/{OSVDB-121500.yml => CVE-2014-10077.yml} (79%) diff --git a/gems/i18n/OSVDB-121500.yml b/gems/i18n/CVE-2014-10077.yml similarity index 79% rename from gems/i18n/OSVDB-121500.yml rename to gems/i18n/CVE-2014-10077.yml index 9d37ed89ee..93a545fdba 100644 --- a/gems/i18n/OSVDB-121500.yml +++ b/gems/i18n/CVE-2014-10077.yml @@ -1,7 +1,7 @@ --- gem: i18n -osvdb: 121500 -url: http://osvdb.org/show/osvdb/121500 +cve: CVE-2014-10077 +url: https://github.com/svenfuchs/i18n/pull/289 title: i18n Gem for Ruby lib/i18n/core_ext/hash.rb Hash#slice() Function Hash Handling DoS date: 2014-09-27 description: | @@ -9,3 +9,6 @@ description: | lib/i18n/core_ext/hash.rb that is triggered when calling a hash when :some_key is in keep_keys but not in the hash. This may allow an attacker to cause the program to crash. + +patched_version: + - ">= 0.8.0" From 5da0cee8a40d392894cb52ab7eaf416a355a4882 Mon Sep 17 00:00:00 2001 From: Reed Loden Date: Tue, 6 Nov 2018 08:44:41 -0800 Subject: [PATCH 3/3] Update CVE-2014-10077.yml --- gems/i18n/CVE-2014-10077.yml | 4 ++++ 1 file changed, 4 insertions(+) diff --git a/gems/i18n/CVE-2014-10077.yml b/gems/i18n/CVE-2014-10077.yml index 93a545fdba..591bdd9c4a 100644 --- a/gems/i18n/CVE-2014-10077.yml +++ b/gems/i18n/CVE-2014-10077.yml @@ -12,3 +12,7 @@ description: | patched_version: - ">= 0.8.0" + +related: + osvdb: + - 121500