| Package | Affected versions | Patched versions |
|---|---|---|
| rails | = 1.9.3= 2.0.0= 2.1.0 |
The str_buf_cat function in string.c in Ruby 1.9.3, 2.0.0, and 2.1 allows context-dependent attackers to cause a denial of service (segmentation fault and crash) via a long string.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free