Description
RubyGems version Ruby 2.2 series: 2.2.9 and earlier, Ruby 2.3 series: 2.3.6 and earlier, Ruby 2.4 series: 2.4.3 and earlier, Ruby 2.5 series: 2.5.0 and earlier, prior to trunk revision 62422 contains a infinite loop caused by negative size vulnerability in ruby gem package tar header that can result in a negative size could cause an infinite loop.. This vulnerability appears to have been fixed in 2.7.6.
Remediation
References
Related Vulnerabilities
WordPress Plugin WPML (WordPress Multilingual) Cross-Site Scripting (3.2.6)
MySQL CVE-2013-0367 Vulnerability (CVE-2013-0367)
Joomla! Core 1.5.x Information Disclosure (1.5.0 - 1.5.14)
WordPress Plugin eCommerce Product Catalog for WordPress Cross-Site Request Forgery (2.9.43)
WordPress Plugin Bing Site Verification using Meta Tag Cross-Site Scripting (1.0)