Vulnerabilities (CVE)

Join the Common Vulnerabilities and Exposures (CVE) community and start to get notified about new vulnerabilities.

  1. Reconshell
  2. Vulnerabilities (CVE)
Filtered by vendor Bindata Project Subscribe
Filtered by product Bindata
Total 1 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2021-32823 2 Bindata Project, Gitlab 2 Bindata, Gitlab 2022-10-25 4.3 MEDIUM 3.7 LOW
In the bindata RubyGem before version 2.4.10 there is a potential denial-of-service vulnerability. In affected versions it is very slow for certain classes in BinData to be created. For example BinData::Bit100000, BinData::Bit100001, BinData::Bit100002, BinData::Bit<N>. In combination with <user_input>.constantize there is a potential for a CPU-based DoS. In version 2.4.10 bindata improved the creation time of Bits and Integers.