Description
The decode method in the OpenSSL::ASN1 module in Ruby before 2.2.8, 2.3.x before 2.3.5, and 2.4.x through 2.4.1 allows attackers to cause a denial of service (interpreter crash) via a crafted string.
Remediation
References
Related Vulnerabilities
WordPress Plugin YITH WooCommerce Order Tracking Security Bypass (1.2.10)
WordPress 4.0.x Multiple Vulnerabilities (4.0 - 4.0.30)
Moodle Permissions, Privileges, and Access Controls Vulnerability (CVE-2014-7846)
GlassFish CVE-2012-0081 Vulnerability (CVE-2012-0081)
WordPress Plugin MC4WP:Mailchimp for WordPress Cross-Site Scripting (2.2.7)