curb Gem for Ruby Empty http_put Body Handling Remote DoS
Published: August 12, 2010
SECURITY IDENTIFIERS
- OSVDB: OSVDB-114600
- Vendor Advisory: https://my.diffend.io/gems/curb/versions/0.6.4.0
GEM
PATCHED VERSIONS
>= 0.7.8
DESCRIPTION
curb Gem for Ruby contains a flaw that is triggered when handling an empty http_put body. This may allow a remote attacker to crash an application linked against the library.