ADVISORIES

• OSVDB-114600
• Vendor Advisory

GEM

curb

PATCHED VERSIONS

• >= 0.7.8

DESCRIPTION

curb Gem for Ruby contains a flaw that is triggered when handling an empty http_put body. This may allow a remote attacker to crash an application linked against the library.

RELATED

• https://my.diffend.io/gems/curb/versions/0.6.4.0
• https://my.diffend.io/gems/curb/0.7.7.1/0.7.8
• http://osvdb.org/show/osvdb/114600