Every CVE Search/ Get API key

CVE-2014-8090

The REXML parser in Ruby 1.9.x before 1.9.3 patchlevel 551, 2.0.x before 2.0.0 patchlevel 598,...

5.0 MediumFix available

The REXML parser in Ruby 1.9.x before 1.9.3 patchlevel 551, 2.0.x before 2.0.0 patchlevel 598, and 2.1.x before 2.1.5 allows remote attackers to cause a denial of service (CPU and memory consumption) a crafted XML document containing an empty string in an entity that is used in a large number of nested entity references, aka an XML Entity Expansion (XEE) attack. NOTE: this vulnerability exists because of an incomplete fix for CVE-2013-1821 and CVE-2014-8080.

Exploit likelihood

5.71%Up 1.3 points since Feb 4, 2022
90%50%10%1%

What each source reports

NVD Score used 5.0

The REXML parser in Ruby 1.9.x before 1.9.3 patchlevel 551, 2.0.x before 2.0.0 patchlevel 598, and 2.1.x before 2.1.5 allows remote attackers to cause a denial of service (CPU and memory consumption) a crafted XML document containing an empty string in an entity that is used in a large number of nested entity references, aka an XML Entity Expansion (XEE) attack. NOTE: this vulnerability exists because of an incomplete fix for CVE-2013-1821 and CVE-2014-8080.

Record
CVE-2014-8090
CVSS 2.0
5.0 MediumAV:N/AC:L/Au:N/C:N/I:N/A:P
Updated
2026-11-02
CVE List No score

The REXML parser in Ruby 1.9.x before 1.9.3 patchlevel 551, 2.0.x before 2.0.0 patchlevel 598, and 2.1.x before 2.1.5 allows remote attackers to cause a denial of service (CPU and memory consumption) a crafted XML document containing an empty string in an entity that is used in a large number of nested entity references, aka an XML Entity Expansion (XEE) attack. NOTE: this vulnerability exists because of an incomplete fix for CVE-2013-1821 and CVE-2014-8080.

Record
CVE-2014-8090
Updated
2026-11-02
EUVDEUVD-2014-7937 No score

The REXML parser in Ruby 1.9.x before 1.9.3 patchlevel 551, 2.0.x before 2.0.0 patchlevel 598, and 2.1.x before 2.1.5 allows remote attackers to cause a denial of service (CPU and memory consumption) a crafted XML document containing an empty string in an entity that is used in a large number of nested entity references, aka an XML Entity Expansion (XEE) attack. NOTE: this vulnerability exists because of an incomplete fix for CVE-2013-1821 and CVE-2014-8080.

Record
EUVD-2014-7937
Updated
2026-11-03
GitHub AdvisoriesGHSA-2x97-vvh4-m4q4 No score

The REXML parser in Ruby 1.9.x before 1.9.3 patchlevel 551, 2.0.x before 2.0.0 patchlevel 598,...

The REXML parser in Ruby 1.9.x before 1.9.3 patchlevel 551, 2.0.x before 2.0.0 patchlevel 598, and 2.1.x before 2.1.5 allows remote attackers to cause a denial of service (CPU and memory consumption) a crafted XML document containing an empty string in an entity that is used in a large number of nested entity references, aka an XML Entity Expansion (XEE) attack. NOTE: this vulnerability exists because of an incomplete fix for CVE-2013-1821 and CVE-2014-8080.

Record
GHSA-2x97-vvh4-m4q4
Updated
2026-11-02
OSVRHSA-2026:7305 7.5

Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update

Record
RHSA-2026:7305
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
Updated
2026-11-02
OSVRHSA-2026:7307 7.5

Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update

Record
RHSA-2026:7307
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
Updated
2026-11-02
Show 4 moreShow less
OSVRHSA-2026:8838 7.5

Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update

Record
RHSA-2026:8838
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
Updated
2026-11-02
OSVMGASA-2014-0472 No score

Updated ruby packages fix security vulnerabilities

Will Wood discovered that Ruby incorrectly handled the encodes() function. An attacker could possibly use this issue to cause Ruby to crash, resulting in a denial of service, or possibly execute arbitrary code. The default compiler options for affected releases should reduce the vulnerability to a denial of service (CVE-2014-4975).

Due to an incomplete fix for CVE-2014-8080, 100% CPU utilization can occur as a result of recursive expansion with an empty String. When reading text nodes from an XML document, the REXML parser in Ruby can be coerced into allocating extremely large string objects which can consume all of the memory on a machine, causing a denial of service (CVE-2014-8090).

Record
MGASA-2014-0472
Updated
2026-11-02
OSVUBUNTU-CVE-2014-8090 No score

The REXML parser in Ruby 1.9.x before 1.9.3 patchlevel 551, 2.0.x before 2.0.0 patchlevel 598, and 2.1.x before 2.1.5 allows remote attackers to cause a denial of service (CPU and memory consumption) a crafted XML document containing an empty string in an entity that is used in a large number of nested entity references, aka an XML Entity Expansion (XEE) attack. NOTE: this vulnerability exists because of an incomplete fix for CVE-2013-1821 and CVE-2014-8080.

Record
UBUNTU-CVE-2014-8090
Updated
2026-11-02
OSVUSN-2412-1 No score

ruby1.8, ruby1.9.1, ruby2.0, ruby2.1 vulnerability

Tomas Hoger discovered that Ruby incorrectly handled XML entity expansion. An attacker could use this flaw to cause Ruby to consume large amounts of resources, resulting in a denial of service.

Record
USN-2412-1
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
ruby1.9.1
Debian:6.0
From an advisory covering 3 CVEs
 before 1.9.2.0-2+deb6u3, plus listed versions
1.9.2.0-21.9.2.0-2+armhf
1.9.2.0-2+deb6u3
ruby1.8
Debian:6.0
From an advisory covering 6 CVEs
 before 1.8.7.302-2squeeze3, plus listed versions
1.8.7.302-21.8.7.302-2squeeze11.8.7.302-2squeeze2
1.8.7.302-2squeeze3
ruby1.9.1
Debian:7
From an advisory covering 3 CVEs
 before 1.9.3.194-8.1+deb7u3, plus listed versions
1.9.3.194-8.11.9.3.194-8.1+deb7u11.9.3.194-8.1+deb7u2
1.9.3.194-8.1+deb7u3
ruby1.8
Debian:7
From an advisory covering 2 CVEs
 before 1.8.7.358-7.1+deb7u2, plus listed versions
1.8.7.358-71.8.7.358-7.11.8.7.358-7.1+deb7u1
1.8.7.358-7.1+deb7u2
ruby
Mageia:3
From an advisory covering 2 CVEs
 before 1.9.3.p551-1.mga3
1.9.3.p551-1.mga3
ruby
Mageia:4
From an advisory covering 2 CVEs
 before 2.0.0.p598-1.mga4
2.0.0.p598-1.mga4
ruby
Red Hat:enterprise_linux:6::client
From an advisory covering 2 CVEs
 before 0:1.8.7.374-3.el6_6
0:1.8.7.374-3.el6_6
ruby-debuginfo
Red Hat:enterprise_linux:6::client
From an advisory covering 2 CVEs
 before 0:1.8.7.374-3.el6_6
0:1.8.7.374-3.el6_6
ruby-devel
Red Hat:enterprise_linux:6::client
From an advisory covering 2 CVEs
 before 0:1.8.7.374-3.el6_6
0:1.8.7.374-3.el6_6
ruby-irb
Red Hat:enterprise_linux:6::client
From an advisory covering 2 CVEs
 before 0:1.8.7.374-3.el6_6
0:1.8.7.374-3.el6_6
Show 182 moreShow less
Affected packages
PackageAffectedFixed
ruby-libs
Red Hat:enterprise_linux:6::client
From an advisory covering 2 CVEs
 before 0:1.8.7.374-3.el6_6
0:1.8.7.374-3.el6_6
ruby-rdoc
Red Hat:enterprise_linux:6::client
From an advisory covering 2 CVEs
 before 0:1.8.7.374-3.el6_6
0:1.8.7.374-3.el6_6
ruby-docs
Red Hat:enterprise_linux:6::client
From an advisory covering 2 CVEs
 before 0:1.8.7.374-3.el6_6
0:1.8.7.374-3.el6_6
ruby-ri
Red Hat:enterprise_linux:6::client
From an advisory covering 2 CVEs
 before 0:1.8.7.374-3.el6_6
0:1.8.7.374-3.el6_6
ruby-static
Red Hat:enterprise_linux:6::client
From an advisory covering 2 CVEs
 before 0:1.8.7.374-3.el6_6
0:1.8.7.374-3.el6_6
ruby-tcltk
Red Hat:enterprise_linux:6::client
From an advisory covering 2 CVEs
 before 0:1.8.7.374-3.el6_6
0:1.8.7.374-3.el6_6
ruby
Red Hat:enterprise_linux:6::computenode
From an advisory covering 2 CVEs
 before 0:1.8.7.374-3.el6_6
0:1.8.7.374-3.el6_6
ruby-debuginfo
Red Hat:enterprise_linux:6::computenode
From an advisory covering 2 CVEs
 before 0:1.8.7.374-3.el6_6
0:1.8.7.374-3.el6_6
ruby-devel
Red Hat:enterprise_linux:6::computenode
From an advisory covering 2 CVEs
 before 0:1.8.7.374-3.el6_6
0:1.8.7.374-3.el6_6
ruby-irb
Red Hat:enterprise_linux:6::computenode
From an advisory covering 2 CVEs
 before 0:1.8.7.374-3.el6_6
0:1.8.7.374-3.el6_6
ruby-libs
Red Hat:enterprise_linux:6::computenode
From an advisory covering 2 CVEs
 before 0:1.8.7.374-3.el6_6
0:1.8.7.374-3.el6_6
ruby-rdoc
Red Hat:enterprise_linux:6::computenode
From an advisory covering 2 CVEs
 before 0:1.8.7.374-3.el6_6
0:1.8.7.374-3.el6_6
ruby-docs
Red Hat:enterprise_linux:6::computenode
From an advisory covering 2 CVEs
 before 0:1.8.7.374-3.el6_6
0:1.8.7.374-3.el6_6
ruby-ri
Red Hat:enterprise_linux:6::computenode
From an advisory covering 2 CVEs
 before 0:1.8.7.374-3.el6_6
0:1.8.7.374-3.el6_6
ruby-static
Red Hat:enterprise_linux:6::computenode
From an advisory covering 2 CVEs
 before 0:1.8.7.374-3.el6_6
0:1.8.7.374-3.el6_6
ruby-tcltk
Red Hat:enterprise_linux:6::computenode
From an advisory covering 2 CVEs
 before 0:1.8.7.374-3.el6_6
0:1.8.7.374-3.el6_6
ruby
Red Hat:enterprise_linux:6::server
From an advisory covering 2 CVEs
 before 0:1.8.7.374-3.el6_6
0:1.8.7.374-3.el6_6
ruby-debuginfo
Red Hat:enterprise_linux:6::server
From an advisory covering 2 CVEs
 before 0:1.8.7.374-3.el6_6
0:1.8.7.374-3.el6_6
ruby-devel
Red Hat:enterprise_linux:6::server
From an advisory covering 2 CVEs
 before 0:1.8.7.374-3.el6_6
0:1.8.7.374-3.el6_6
ruby-irb
Red Hat:enterprise_linux:6::server
From an advisory covering 2 CVEs
 before 0:1.8.7.374-3.el6_6
0:1.8.7.374-3.el6_6
ruby-libs
Red Hat:enterprise_linux:6::server
From an advisory covering 2 CVEs
 before 0:1.8.7.374-3.el6_6
0:1.8.7.374-3.el6_6
ruby-rdoc
Red Hat:enterprise_linux:6::server
From an advisory covering 2 CVEs
 before 0:1.8.7.374-3.el6_6
0:1.8.7.374-3.el6_6
ruby-docs
Red Hat:enterprise_linux:6::server
From an advisory covering 2 CVEs
 before 0:1.8.7.374-3.el6_6
0:1.8.7.374-3.el6_6
ruby-ri
Red Hat:enterprise_linux:6::server
From an advisory covering 2 CVEs
 before 0:1.8.7.374-3.el6_6
0:1.8.7.374-3.el6_6
ruby-static
Red Hat:enterprise_linux:6::server
From an advisory covering 2 CVEs
 before 0:1.8.7.374-3.el6_6
0:1.8.7.374-3.el6_6
ruby-tcltk
Red Hat:enterprise_linux:6::server
From an advisory covering 2 CVEs
 before 0:1.8.7.374-3.el6_6
0:1.8.7.374-3.el6_6
ruby
Red Hat:enterprise_linux:6::workstation
From an advisory covering 2 CVEs
 before 0:1.8.7.374-3.el6_6
0:1.8.7.374-3.el6_6
ruby-debuginfo
Red Hat:enterprise_linux:6::workstation
From an advisory covering 2 CVEs
 before 0:1.8.7.374-3.el6_6
0:1.8.7.374-3.el6_6
ruby-devel
Red Hat:enterprise_linux:6::workstation
From an advisory covering 2 CVEs
 before 0:1.8.7.374-3.el6_6
0:1.8.7.374-3.el6_6
ruby-irb
Red Hat:enterprise_linux:6::workstation
From an advisory covering 2 CVEs
 before 0:1.8.7.374-3.el6_6
0:1.8.7.374-3.el6_6
ruby-libs
Red Hat:enterprise_linux:6::workstation
From an advisory covering 2 CVEs
 before 0:1.8.7.374-3.el6_6
0:1.8.7.374-3.el6_6
ruby-rdoc
Red Hat:enterprise_linux:6::workstation
From an advisory covering 2 CVEs
 before 0:1.8.7.374-3.el6_6
0:1.8.7.374-3.el6_6
ruby-docs
Red Hat:enterprise_linux:6::workstation
From an advisory covering 2 CVEs
 before 0:1.8.7.374-3.el6_6
0:1.8.7.374-3.el6_6
ruby-ri
Red Hat:enterprise_linux:6::workstation
From an advisory covering 2 CVEs
 before 0:1.8.7.374-3.el6_6
0:1.8.7.374-3.el6_6
ruby-static
Red Hat:enterprise_linux:6::workstation
From an advisory covering 2 CVEs
 before 0:1.8.7.374-3.el6_6
0:1.8.7.374-3.el6_6
ruby-tcltk
Red Hat:enterprise_linux:6::workstation
From an advisory covering 2 CVEs
 before 0:1.8.7.374-3.el6_6
0:1.8.7.374-3.el6_6
ruby
Red Hat:enterprise_linux:7::client
From an advisory covering 3 CVEs
 before 0:2.0.0.353-22.el7_0
0:2.0.0.353-22.el7_0
ruby-debuginfo
Red Hat:enterprise_linux:7::client
From an advisory covering 3 CVEs
 before 0:2.0.0.353-22.el7_0
0:2.0.0.353-22.el7_0
ruby-irb
Red Hat:enterprise_linux:7::client
From an advisory covering 3 CVEs
 before 0:2.0.0.353-22.el7_0
0:2.0.0.353-22.el7_0
ruby-libs
Red Hat:enterprise_linux:7::client
From an advisory covering 3 CVEs
 before 0:2.0.0.353-22.el7_0
0:2.0.0.353-22.el7_0
rubygem-bigdecimal
Red Hat:enterprise_linux:7::client
From an advisory covering 3 CVEs
 before 0:1.2.0-22.el7_0
0:1.2.0-22.el7_0
rubygem-io-console
Red Hat:enterprise_linux:7::client
From an advisory covering 3 CVEs
 before 0:0.4.2-22.el7_0
0:0.4.2-22.el7_0
rubygem-json
Red Hat:enterprise_linux:7::client
From an advisory covering 3 CVEs
 before 0:1.7.7-22.el7_0
0:1.7.7-22.el7_0
rubygem-psych
Red Hat:enterprise_linux:7::client
From an advisory covering 3 CVEs
 before 0:2.0.0-22.el7_0
0:2.0.0-22.el7_0
rubygem-rdoc
Red Hat:enterprise_linux:7::client
From an advisory covering 3 CVEs
 before 0:4.0.0-22.el7_0
0:4.0.0-22.el7_0
rubygems
Red Hat:enterprise_linux:7::client
From an advisory covering 3 CVEs
 before 0:2.0.14-22.el7_0
0:2.0.14-22.el7_0
ruby-devel
Red Hat:enterprise_linux:7::client
From an advisory covering 3 CVEs
 before 0:2.0.0.353-22.el7_0
0:2.0.0.353-22.el7_0
ruby-doc
Red Hat:enterprise_linux:7::client
From an advisory covering 3 CVEs
 before 0:2.0.0.353-22.el7_0
0:2.0.0.353-22.el7_0
ruby-tcltk
Red Hat:enterprise_linux:7::client
From an advisory covering 3 CVEs
 before 0:2.0.0.353-22.el7_0
0:2.0.0.353-22.el7_0
rubygem-minitest
Red Hat:enterprise_linux:7::client
From an advisory covering 3 CVEs
 before 0:4.3.2-22.el7_0
0:4.3.2-22.el7_0
rubygem-rake
Red Hat:enterprise_linux:7::client
From an advisory covering 3 CVEs
 before 0:0.9.6-22.el7_0
0:0.9.6-22.el7_0
rubygems-devel
Red Hat:enterprise_linux:7::client
From an advisory covering 3 CVEs
 before 0:2.0.14-22.el7_0
0:2.0.14-22.el7_0
ruby
Red Hat:enterprise_linux:7::computenode
From an advisory covering 3 CVEs
 before 0:2.0.0.353-22.el7_0
0:2.0.0.353-22.el7_0
ruby-debuginfo
Red Hat:enterprise_linux:7::computenode
From an advisory covering 3 CVEs
 before 0:2.0.0.353-22.el7_0
0:2.0.0.353-22.el7_0
ruby-irb
Red Hat:enterprise_linux:7::computenode
From an advisory covering 3 CVEs
 before 0:2.0.0.353-22.el7_0
0:2.0.0.353-22.el7_0
ruby-libs
Red Hat:enterprise_linux:7::computenode
From an advisory covering 3 CVEs
 before 0:2.0.0.353-22.el7_0
0:2.0.0.353-22.el7_0
rubygem-bigdecimal
Red Hat:enterprise_linux:7::computenode
From an advisory covering 3 CVEs
 before 0:1.2.0-22.el7_0
0:1.2.0-22.el7_0
rubygem-io-console
Red Hat:enterprise_linux:7::computenode
From an advisory covering 3 CVEs
 before 0:0.4.2-22.el7_0
0:0.4.2-22.el7_0
rubygem-json
Red Hat:enterprise_linux:7::computenode
From an advisory covering 3 CVEs
 before 0:1.7.7-22.el7_0
0:1.7.7-22.el7_0
rubygem-psych
Red Hat:enterprise_linux:7::computenode
From an advisory covering 3 CVEs
 before 0:2.0.0-22.el7_0
0:2.0.0-22.el7_0
rubygem-rdoc
Red Hat:enterprise_linux:7::computenode
From an advisory covering 3 CVEs
 before 0:4.0.0-22.el7_0
0:4.0.0-22.el7_0
rubygems
Red Hat:enterprise_linux:7::computenode
From an advisory covering 3 CVEs
 before 0:2.0.14-22.el7_0
0:2.0.14-22.el7_0
ruby-devel
Red Hat:enterprise_linux:7::computenode
From an advisory covering 3 CVEs
 before 0:2.0.0.353-22.el7_0
0:2.0.0.353-22.el7_0
ruby-doc
Red Hat:enterprise_linux:7::computenode
From an advisory covering 3 CVEs
 before 0:2.0.0.353-22.el7_0
0:2.0.0.353-22.el7_0
ruby-tcltk
Red Hat:enterprise_linux:7::computenode
From an advisory covering 3 CVEs
 before 0:2.0.0.353-22.el7_0
0:2.0.0.353-22.el7_0
rubygem-minitest
Red Hat:enterprise_linux:7::computenode
From an advisory covering 3 CVEs
 before 0:4.3.2-22.el7_0
0:4.3.2-22.el7_0
rubygem-rake
Red Hat:enterprise_linux:7::computenode
From an advisory covering 3 CVEs
 before 0:0.9.6-22.el7_0
0:0.9.6-22.el7_0
rubygems-devel
Red Hat:enterprise_linux:7::computenode
From an advisory covering 3 CVEs
 before 0:2.0.14-22.el7_0
0:2.0.14-22.el7_0
ruby
Red Hat:enterprise_linux:7::server
From an advisory covering 3 CVEs
 before 0:2.0.0.353-22.el7_0
0:2.0.0.353-22.el7_0
ruby-debuginfo
Red Hat:enterprise_linux:7::server
From an advisory covering 3 CVEs
 before 0:2.0.0.353-22.el7_0
0:2.0.0.353-22.el7_0
ruby-irb
Red Hat:enterprise_linux:7::server
From an advisory covering 3 CVEs
 before 0:2.0.0.353-22.el7_0
0:2.0.0.353-22.el7_0
ruby-libs
Red Hat:enterprise_linux:7::server
From an advisory covering 3 CVEs
 before 0:2.0.0.353-22.el7_0
0:2.0.0.353-22.el7_0
rubygem-bigdecimal
Red Hat:enterprise_linux:7::server
From an advisory covering 3 CVEs
 before 0:1.2.0-22.el7_0
0:1.2.0-22.el7_0
rubygem-io-console
Red Hat:enterprise_linux:7::server
From an advisory covering 3 CVEs
 before 0:0.4.2-22.el7_0
0:0.4.2-22.el7_0
rubygem-json
Red Hat:enterprise_linux:7::server
From an advisory covering 3 CVEs
 before 0:1.7.7-22.el7_0
0:1.7.7-22.el7_0
rubygem-psych
Red Hat:enterprise_linux:7::server
From an advisory covering 3 CVEs
 before 0:2.0.0-22.el7_0
0:2.0.0-22.el7_0
rubygem-rdoc
Red Hat:enterprise_linux:7::server
From an advisory covering 3 CVEs
 before 0:4.0.0-22.el7_0
0:4.0.0-22.el7_0
rubygems
Red Hat:enterprise_linux:7::server
From an advisory covering 3 CVEs
 before 0:2.0.14-22.el7_0
0:2.0.14-22.el7_0
ruby-devel
Red Hat:enterprise_linux:7::server
From an advisory covering 3 CVEs
 before 0:2.0.0.353-22.el7_0
0:2.0.0.353-22.el7_0
ruby-doc
Red Hat:enterprise_linux:7::server
From an advisory covering 3 CVEs
 before 0:2.0.0.353-22.el7_0
0:2.0.0.353-22.el7_0
ruby-tcltk
Red Hat:enterprise_linux:7::server
From an advisory covering 3 CVEs
 before 0:2.0.0.353-22.el7_0
0:2.0.0.353-22.el7_0
rubygem-minitest
Red Hat:enterprise_linux:7::server
From an advisory covering 3 CVEs
 before 0:4.3.2-22.el7_0
0:4.3.2-22.el7_0
rubygem-rake
Red Hat:enterprise_linux:7::server
From an advisory covering 3 CVEs
 before 0:0.9.6-22.el7_0
0:0.9.6-22.el7_0
rubygems-devel
Red Hat:enterprise_linux:7::server
From an advisory covering 3 CVEs
 before 0:2.0.14-22.el7_0
0:2.0.14-22.el7_0
ruby
Red Hat:enterprise_linux:7::workstation
From an advisory covering 3 CVEs
 before 0:2.0.0.353-22.el7_0
0:2.0.0.353-22.el7_0
ruby-debuginfo
Red Hat:enterprise_linux:7::workstation
From an advisory covering 3 CVEs
 before 0:2.0.0.353-22.el7_0
0:2.0.0.353-22.el7_0
ruby-irb
Red Hat:enterprise_linux:7::workstation
From an advisory covering 3 CVEs
 before 0:2.0.0.353-22.el7_0
0:2.0.0.353-22.el7_0
ruby-libs
Red Hat:enterprise_linux:7::workstation
From an advisory covering 3 CVEs
 before 0:2.0.0.353-22.el7_0
0:2.0.0.353-22.el7_0
rubygem-bigdecimal
Red Hat:enterprise_linux:7::workstation
From an advisory covering 3 CVEs
 before 0:1.2.0-22.el7_0
0:1.2.0-22.el7_0
rubygem-io-console
Red Hat:enterprise_linux:7::workstation
From an advisory covering 3 CVEs
 before 0:0.4.2-22.el7_0
0:0.4.2-22.el7_0
rubygem-json
Red Hat:enterprise_linux:7::workstation
From an advisory covering 3 CVEs
 before 0:1.7.7-22.el7_0
0:1.7.7-22.el7_0
rubygem-psych
Red Hat:enterprise_linux:7::workstation
From an advisory covering 3 CVEs
 before 0:2.0.0-22.el7_0
0:2.0.0-22.el7_0
rubygem-rdoc
Red Hat:enterprise_linux:7::workstation
From an advisory covering 3 CVEs
 before 0:4.0.0-22.el7_0
0:4.0.0-22.el7_0
rubygems
Red Hat:enterprise_linux:7::workstation
From an advisory covering 3 CVEs
 before 0:2.0.14-22.el7_0
0:2.0.14-22.el7_0
ruby-devel
Red Hat:enterprise_linux:7::workstation
From an advisory covering 3 CVEs
 before 0:2.0.0.353-22.el7_0
0:2.0.0.353-22.el7_0
ruby-doc
Red Hat:enterprise_linux:7::workstation
From an advisory covering 3 CVEs
 before 0:2.0.0.353-22.el7_0
0:2.0.0.353-22.el7_0
ruby-tcltk
Red Hat:enterprise_linux:7::workstation
From an advisory covering 3 CVEs
 before 0:2.0.0.353-22.el7_0
0:2.0.0.353-22.el7_0
rubygem-minitest
Red Hat:enterprise_linux:7::workstation
From an advisory covering 3 CVEs
 before 0:4.3.2-22.el7_0
0:4.3.2-22.el7_0
rubygem-rake
Red Hat:enterprise_linux:7::workstation
From an advisory covering 3 CVEs
 before 0:0.9.6-22.el7_0
0:0.9.6-22.el7_0
rubygems-devel
Red Hat:enterprise_linux:7::workstation
From an advisory covering 3 CVEs
 before 0:2.0.14-22.el7_0
0:2.0.14-22.el7_0
ruby193-ruby
Red Hat:rhel_software_collections:1::el6
From an advisory covering 3 CVEs
 before 0:1.9.3.484-50.el6
0:1.9.3.484-50.el6
ruby193-ruby-debuginfo
Red Hat:rhel_software_collections:1::el6
From an advisory covering 3 CVEs
 before 0:1.9.3.484-50.el6
0:1.9.3.484-50.el6
ruby193-ruby-devel
Red Hat:rhel_software_collections:1::el6
From an advisory covering 3 CVEs
 before 0:1.9.3.484-50.el6
0:1.9.3.484-50.el6
ruby193-ruby-doc
Red Hat:rhel_software_collections:1::el6
From an advisory covering 3 CVEs
 before 0:1.9.3.484-50.el6
0:1.9.3.484-50.el6
ruby193-ruby-irb
Red Hat:rhel_software_collections:1::el6
From an advisory covering 3 CVEs
 before 0:1.9.3.484-50.el6
0:1.9.3.484-50.el6
ruby193-ruby-libs
Red Hat:rhel_software_collections:1::el6
From an advisory covering 3 CVEs
 before 0:1.9.3.484-50.el6
0:1.9.3.484-50.el6
ruby193-ruby-tcltk
Red Hat:rhel_software_collections:1::el6
From an advisory covering 3 CVEs
 before 0:1.9.3.484-50.el6
0:1.9.3.484-50.el6
ruby193-rubygem-bigdecimal
Red Hat:rhel_software_collections:1::el6
From an advisory covering 3 CVEs
 before 0:1.1.0-50.el6
0:1.1.0-50.el6
ruby193-rubygem-io-console
Red Hat:rhel_software_collections:1::el6
From an advisory covering 3 CVEs
 before 0:0.3-50.el6
0:0.3-50.el6
ruby193-rubygem-json
Red Hat:rhel_software_collections:1::el6
From an advisory covering 3 CVEs
 before 0:1.5.5-50.el6
0:1.5.5-50.el6
ruby193-rubygem-minitest
Red Hat:rhel_software_collections:1::el6
From an advisory covering 3 CVEs
 before 0:2.5.1-50.el6
0:2.5.1-50.el6
ruby193-rubygem-rake
Red Hat:rhel_software_collections:1::el6
From an advisory covering 3 CVEs
 before 0:0.9.2.2-50.el6
0:0.9.2.2-50.el6
ruby193-rubygem-rdoc
Red Hat:rhel_software_collections:1::el6
From an advisory covering 3 CVEs
 before 0:3.9.5-50.el6
0:3.9.5-50.el6
ruby193-rubygems
Red Hat:rhel_software_collections:1::el6
From an advisory covering 3 CVEs
 before 0:1.8.23-50.el6
0:1.8.23-50.el6
ruby193-rubygems-devel
Red Hat:rhel_software_collections:1::el6
From an advisory covering 3 CVEs
 before 0:1.8.23-50.el6
0:1.8.23-50.el6
ruby193-ruby
Red Hat:rhel_software_collections:1::el7
From an advisory covering 3 CVEs
 before 0:1.9.3.484-50.el7
0:1.9.3.484-50.el7
ruby193-ruby-debuginfo
Red Hat:rhel_software_collections:1::el7
From an advisory covering 3 CVEs
 before 0:1.9.3.484-50.el7
0:1.9.3.484-50.el7
ruby193-ruby-devel
Red Hat:rhel_software_collections:1::el7
From an advisory covering 3 CVEs
 before 0:1.9.3.484-50.el7
0:1.9.3.484-50.el7
ruby193-ruby-doc
Red Hat:rhel_software_collections:1::el7
From an advisory covering 3 CVEs
 before 0:1.9.3.484-50.el7
0:1.9.3.484-50.el7
ruby193-ruby-irb
Red Hat:rhel_software_collections:1::el7
From an advisory covering 3 CVEs
 before 0:1.9.3.484-50.el7
0:1.9.3.484-50.el7
ruby193-ruby-libs
Red Hat:rhel_software_collections:1::el7
From an advisory covering 3 CVEs
 before 0:1.9.3.484-50.el7
0:1.9.3.484-50.el7
ruby193-ruby-tcltk
Red Hat:rhel_software_collections:1::el7
From an advisory covering 3 CVEs
 before 0:1.9.3.484-50.el7
0:1.9.3.484-50.el7
ruby193-rubygem-bigdecimal
Red Hat:rhel_software_collections:1::el7
From an advisory covering 3 CVEs
 before 0:1.1.0-50.el7
0:1.1.0-50.el7
ruby193-rubygem-io-console
Red Hat:rhel_software_collections:1::el7
From an advisory covering 3 CVEs
 before 0:0.3-50.el7
0:0.3-50.el7
ruby193-rubygem-json
Red Hat:rhel_software_collections:1::el7
From an advisory covering 3 CVEs
 before 0:1.5.5-50.el7
0:1.5.5-50.el7
ruby193-rubygem-minitest
Red Hat:rhel_software_collections:1::el7
From an advisory covering 3 CVEs
 before 0:2.5.1-50.el7
0:2.5.1-50.el7
ruby193-rubygem-rake
Red Hat:rhel_software_collections:1::el7
From an advisory covering 3 CVEs
 before 0:0.9.2.2-50.el7
0:0.9.2.2-50.el7
ruby193-rubygem-rdoc
Red Hat:rhel_software_collections:1::el7
From an advisory covering 3 CVEs
 before 0:3.9.5-50.el7
0:3.9.5-50.el7
ruby193-rubygems
Red Hat:rhel_software_collections:1::el7
From an advisory covering 3 CVEs
 before 0:1.8.23-50.el7
0:1.8.23-50.el7
ruby193-rubygems-devel
Red Hat:rhel_software_collections:1::el7
From an advisory covering 3 CVEs
 before 0:1.8.23-50.el7
0:1.8.23-50.el7
ruby200-ruby
Red Hat:rhel_software_collections:1::el6
From an advisory covering 3 CVEs
 before 0:2.0.0.353-24.el6
0:2.0.0.353-24.el6
ruby200-ruby-debuginfo
Red Hat:rhel_software_collections:1::el6
From an advisory covering 3 CVEs
 before 0:2.0.0.353-24.el6
0:2.0.0.353-24.el6
ruby200-ruby-devel
Red Hat:rhel_software_collections:1::el6
From an advisory covering 3 CVEs
 before 0:2.0.0.353-24.el6
0:2.0.0.353-24.el6
ruby200-ruby-doc
Red Hat:rhel_software_collections:1::el6
From an advisory covering 3 CVEs
 before 0:2.0.0.353-24.el6
0:2.0.0.353-24.el6
ruby200-ruby-irb
Red Hat:rhel_software_collections:1::el6
From an advisory covering 3 CVEs
 before 0:2.0.0.353-24.el6
0:2.0.0.353-24.el6
ruby200-ruby-libs
Red Hat:rhel_software_collections:1::el6
From an advisory covering 3 CVEs
 before 0:2.0.0.353-24.el6
0:2.0.0.353-24.el6
ruby200-ruby-tcltk
Red Hat:rhel_software_collections:1::el6
From an advisory covering 3 CVEs
 before 0:2.0.0.353-24.el6
0:2.0.0.353-24.el6
ruby200-rubygem-bigdecimal
Red Hat:rhel_software_collections:1::el6
From an advisory covering 3 CVEs
 before 0:1.2.0-24.el6
0:1.2.0-24.el6
ruby200-rubygem-io-console
Red Hat:rhel_software_collections:1::el6
From an advisory covering 3 CVEs
 before 0:0.4.2-24.el6
0:0.4.2-24.el6
ruby200-rubygem-json
Red Hat:rhel_software_collections:1::el6
From an advisory covering 3 CVEs
 before 0:1.7.7-24.el6
0:1.7.7-24.el6
ruby200-rubygem-minitest
Red Hat:rhel_software_collections:1::el6
From an advisory covering 3 CVEs
 before 0:4.3.2-24.el6
0:4.3.2-24.el6
ruby200-rubygem-psych
Red Hat:rhel_software_collections:1::el6
From an advisory covering 3 CVEs
 before 0:2.0.0-24.el6
0:2.0.0-24.el6
ruby200-rubygem-rake
Red Hat:rhel_software_collections:1::el6
From an advisory covering 3 CVEs
 before 0:0.9.6-24.el6
0:0.9.6-24.el6
ruby200-rubygem-rdoc
Red Hat:rhel_software_collections:1::el6
From an advisory covering 3 CVEs
 before 0:4.0.0-24.el6
0:4.0.0-24.el6
ruby200-rubygems
Red Hat:rhel_software_collections:1::el6
From an advisory covering 3 CVEs
 before 0:2.0.14-24.el6
0:2.0.14-24.el6
ruby200-rubygems-devel
Red Hat:rhel_software_collections:1::el6
From an advisory covering 3 CVEs
 before 0:2.0.14-24.el6
0:2.0.14-24.el6
ruby200-ruby
Red Hat:rhel_software_collections:1::el7
From an advisory covering 3 CVEs
 before 0:2.0.0.353-24.el7
0:2.0.0.353-24.el7
ruby200-ruby-debuginfo
Red Hat:rhel_software_collections:1::el7
From an advisory covering 3 CVEs
 before 0:2.0.0.353-24.el7
0:2.0.0.353-24.el7
ruby200-ruby-devel
Red Hat:rhel_software_collections:1::el7
From an advisory covering 3 CVEs
 before 0:2.0.0.353-24.el7
0:2.0.0.353-24.el7
ruby200-ruby-doc
Red Hat:rhel_software_collections:1::el7
From an advisory covering 3 CVEs
 before 0:2.0.0.353-24.el7
0:2.0.0.353-24.el7
ruby200-ruby-irb
Red Hat:rhel_software_collections:1::el7
From an advisory covering 3 CVEs
 before 0:2.0.0.353-24.el7
0:2.0.0.353-24.el7
ruby200-ruby-libs
Red Hat:rhel_software_collections:1::el7
From an advisory covering 3 CVEs
 before 0:2.0.0.353-24.el7
0:2.0.0.353-24.el7
ruby200-ruby-tcltk
Red Hat:rhel_software_collections:1::el7
From an advisory covering 3 CVEs
 before 0:2.0.0.353-24.el7
0:2.0.0.353-24.el7
ruby200-rubygem-bigdecimal
Red Hat:rhel_software_collections:1::el7
From an advisory covering 3 CVEs
 before 0:1.2.0-24.el7
0:1.2.0-24.el7
ruby200-rubygem-io-console
Red Hat:rhel_software_collections:1::el7
From an advisory covering 3 CVEs
 before 0:0.4.2-24.el7
0:0.4.2-24.el7
ruby200-rubygem-json
Red Hat:rhel_software_collections:1::el7
From an advisory covering 3 CVEs
 before 0:1.7.7-24.el7
0:1.7.7-24.el7
ruby200-rubygem-minitest
Red Hat:rhel_software_collections:1::el7
From an advisory covering 3 CVEs
 before 0:4.3.2-24.el7
0:4.3.2-24.el7
ruby200-rubygem-psych
Red Hat:rhel_software_collections:1::el7
From an advisory covering 3 CVEs
 before 0:2.0.0-24.el7
0:2.0.0-24.el7
ruby200-rubygem-rake
Red Hat:rhel_software_collections:1::el7
From an advisory covering 3 CVEs
 before 0:0.9.6-24.el7
0:0.9.6-24.el7
ruby200-rubygem-rdoc
Red Hat:rhel_software_collections:1::el7
From an advisory covering 3 CVEs
 before 0:4.0.0-24.el7
0:4.0.0-24.el7
ruby200-rubygems
Red Hat:rhel_software_collections:1::el7
From an advisory covering 3 CVEs
 before 0:2.0.14-24.el7
0:2.0.14-24.el7
ruby200-rubygems-devel
Red Hat:rhel_software_collections:1::el7
From an advisory covering 3 CVEs
 before 0:2.0.14-24.el7
0:2.0.14-24.el7
ruby3.3
Red Hat:hummingbird:1
From an advisory covering 36 CVEs
 before 0:3.3.10-23.1.hum1
0:3.3.10-23.1.hum1
ruby3.3-bundled-gems
Red Hat:hummingbird:1
From an advisory covering 36 CVEs
 before 0:3.3.10-23.1.hum1
0:3.3.10-23.1.hum1
ruby3.3-default-gems
Red Hat:hummingbird:1
From an advisory covering 36 CVEs
 before 0:3.3.10-23.1.hum1
0:3.3.10-23.1.hum1
ruby3.3-devel
Red Hat:hummingbird:1
From an advisory covering 36 CVEs
 before 0:3.3.10-23.1.hum1
0:3.3.10-23.1.hum1
ruby3.3-doc
Red Hat:hummingbird:1
From an advisory covering 36 CVEs
 before 0:3.3.10-23.1.hum1
0:3.3.10-23.1.hum1
ruby3.3-libs
Red Hat:hummingbird:1
From an advisory covering 36 CVEs
 before 0:3.3.10-23.1.hum1
0:3.3.10-23.1.hum1
ruby3.4
Red Hat:hummingbird:1
From an advisory covering 36 CVEs
 before 0:3.4.8-31.1.hum1
0:3.4.8-31.1.hum1
ruby3.4-bundled-gems
Red Hat:hummingbird:1
From an advisory covering 36 CVEs
 before 0:3.4.8-31.1.hum1
0:3.4.8-31.1.hum1
ruby3.4-default-gems
Red Hat:hummingbird:1
From an advisory covering 36 CVEs
 before 0:3.4.8-31.1.hum1
0:3.4.8-31.1.hum1
ruby3.4-devel
Red Hat:hummingbird:1
From an advisory covering 36 CVEs
 before 0:3.4.8-31.1.hum1
0:3.4.8-31.1.hum1
ruby3.4-doc
Red Hat:hummingbird:1
From an advisory covering 36 CVEs
 before 0:3.4.8-31.1.hum1
0:3.4.8-31.1.hum1
ruby3.4-libs
Red Hat:hummingbird:1
From an advisory covering 36 CVEs
 before 0:3.4.8-31.1.hum1
0:3.4.8-31.1.hum1
ruby4.0
Red Hat:hummingbird:1
From an advisory covering 36 CVEs
 before 0:4.0.0-33.3.hum1
0:4.0.0-33.3.hum1
ruby4.0-bundled-gems
Red Hat:hummingbird:1
From an advisory covering 36 CVEs
 before 0:4.0.0-33.3.hum1
0:4.0.0-33.3.hum1
ruby4.0-default-gems
Red Hat:hummingbird:1
From an advisory covering 36 CVEs
 before 0:4.0.0-33.3.hum1
0:4.0.0-33.3.hum1
ruby4.0-devel
Red Hat:hummingbird:1
From an advisory covering 36 CVEs
 before 0:4.0.0-33.3.hum1
0:4.0.0-33.3.hum1
ruby4.0-doc
Red Hat:hummingbird:1
From an advisory covering 36 CVEs
 before 0:4.0.0-33.3.hum1
0:4.0.0-33.3.hum1
ruby4.0-libs
Red Hat:hummingbird:1
From an advisory covering 36 CVEs
 before 0:4.0.0-33.3.hum1
0:4.0.0-33.3.hum1
ruby1.9.1
Ubuntu:14.04:LTS
 before 1.9.3.484-2ubuntu1.2, plus listed versions
1.9.3.194-8.1ubuntu21.9.3.448-1ubuntu11.9.3.448-1ubuntu21.9.3.484-1ubuntu11.9.3.484-1ubuntu21.9.3.484-2ubuntu11.9.3.484-2ubuntu1.1
1.9.3.484-2ubuntu1.2
ruby2.0
Ubuntu:14.04:LTS
 before 2.0.0.484-1ubuntu2.2, plus listed versions
2.0.0.299-22.0.0.343-12.0.0.343-1ubuntu12.0.0.353-12.0.0.353-1ubuntu12.0.0.484-1ubuntu12.0.0.484-1ubuntu22.0.0.484-1ubuntu2.1
2.0.0.484-1ubuntu2.2

History

History
RecordedChangedSources
affected, facts
aliasesEUVD
first indexedCVE List, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2014-8090 is a medium vulnerability (CVSS 5.0) in Ruby-lang Ruby, published November 14, 2014. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 5.71%, the 93rd percentile. Fixed in ruby1.9.1 1.9.3.484-2ubuntu1.2.

References

Show 191 moreShow less
Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open