Description
The decode method in the OpenSSL::ASN1 module in Ruby before 2.2.8, 2.3.x before 2.3.5, and 2.4.x through 2.4.1 allows attackers to cause a denial of service (interpreter crash) via a crafted string.
Remediation
References
Related Vulnerabilities
Grafana Authentication Bypass by Spoofing Vulnerability (CVE-2022-35957)
PHP Permissions, Privileges, and Access Controls Vulnerability (CVE-2015-2348)
WordPress Plugin Kama WP Smiles Unspecified Vulnerability (1.8.1)
WordPress Plugin Car Demon Multiple Cross-Site Scripting Vulnerabilities (1.0.1)
WordPress Plugin DirectoryPress-Business Directory And Classified Ad Listing SQL Injection (3.6.10)