Description
In Ruby before 2.2.10, 2.3.x before 2.3.7, 2.4.x before 2.4.4, 2.5.x before 2.5.1, and 2.6.0-preview1, an attacker can pass a large HTTP request with a crafted header to WEBrick server or a crafted body to WEBrick server/handler and cause a denial of service (memory consumption).
Remediation
References
Related Vulnerabilities
Drupal Core 4.6.x Arbitrary Code Execution (4.6.0 - 4.6.6)
OpenSSL Improper Input Validation Vulnerability (CVE-2014-3567)
WordPress Plugin User Activation Email Cross-Site Scripting (1.3.0)
WordPress Plugin TablePress XML External Entity Injection (1.8)
Moodle Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2014-7838)