The str_buf_cat function in string.c in Ruby 1.9.3, 2.0.0, and 2.1 allows context-dependent attackers to cause a denial of service (segmentation fault and crash) via a long string.
| Software | From | Fixed in |
|---|---|---|
| rubyonrails / rails | 1.9.3 | 1.9.3.x |
| rubyonrails / rails | 2.1.0 | 2.1.0.x |
| rubyonrails / rails | 2.0.0 | 2.0.0.x |