Approved changes feed: RSS · Atom

cpe:2.3:a:ruby-lang:ruby:1.8.7-p330:*:*:*:*:*:*:*

part: a version: 1.8.7-p330 update: *

VendorRuby Lang (5813a634-c286-5f1d-90d5-a1a352f78d39)
ProductRuby (48f7c14c-c576-5b15-be87-22eeb9add91e)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:github/ruby/ruby purl2cpe 2026-06-01 10:11:45.546524
pkg:ruby-lang/ruby purl2cpe 2026-06-01 10:11:45.546526

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2011-4815 vulnerable 2026-06-03 14:31:26.382525 Details available
Ruby (aka CRuby) before 1.8.7-p357 computes hash values without restricting the ability to trigger hash collisions predictably, which allows context-dependent attackers to cause a denial of service (CPU consumption) via crafted input to an application that maintains a hash table.
Published: 2011-12-30T01:00:00.000Z
Updated: 2024-08-07T00:16:35.050Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.