Oval Definition:	oval:org.opensuse.security:def:20130269
Revision Date: 2021-08-15 Version: 1 Title: CVE-2013-0269 Description: The JSON gem before 1.5.5, 1.6.x before 1.6.8, and 1.7.x before 1.7.7 for Ruby allows remote attackers to cause a denial of service (resource consumption) or bypass the mass assignment protection mechanism via a crafted JSON document that triggers the creation of arbitrary Ruby symbols or certain internal objects, as demonstrated by conducting a SQL injection attack against Ruby on Rails, aka "Unsafe Object Creation Vulnerability." Family: unix Class: vulnerability Status: Reference(s): CVE-2013-0269 Mitre CVE-2013-0269 SUSE CVE-2013-0269 openSUSE-SU-2013:0603-1 openSUSE-SU-2013:0603-1 SUSE-SU-2013:0609-1 SUSE-SU-2013:0609-1 SUSE-SU-2013:0609-2 SUSE-SU-2013:0609-2 SUSE-SU-2013:0612-1 SUSE-SU-2013:0612-1 SUSE-SU-2013:0615-1 SUSE-SU-2013:0615-1 SUSE-SU-2013:0647-1 SUSE-SU-2013:0647-1 SUSE-SU-2013:1036-1 SUSE-SU-2013:1036-1 Platform(s): openSUSE 12.1 openSUSE 12.1 Update openSUSE 12.2 Update openSUSE 12.3 Update SUSE Cloud 1.0 SUSE Cloud Compute Node for SUSE Linux Enterprise 12 5 SUSE Lifecycle Management Server 1.3 SUSE Linux Enterprise Desktop 11 SP2 SUSE Linux Enterprise Desktop 11 SP4 SUSE Linux Enterprise Server 11 SP2 SUSE Linux Enterprise Server 11 SP4 SUSE Linux Enterprise Server for SAP Applications 11 SP2 SUSE Linux Enterprise Server for SAP Applications 11 SP4 SUSE Linux Enterprise Software Development Kit 11 SP2 SUSE Linux Enterprise Software Development Kit 11 SP4 SUSE OpenStack Cloud 6 SUSE Studio Extension for System z 1.2 SUSE Studio Onsite 1.2 [Appliance - Studio] SUSE Studio Onsite 1.3 SUSE Studio Standard Edition 1.2 WebYaST 1.2 WebYaST 1.3 Product(s): Definition Synopsis SUSE Linux Enterprise Software Development Kit 11 SP2 is installed AND rubygem-json_pure-1.2.0-0.4.4 is installed Definition Synopsis Release Information SUSE Linux Enterprise Software Development Kit 11 SP2 is installed OR SUSE Linux Enterprise Software Development Kit 11 SP4 is installed AND rubygem-json_pure-1.2.0-0.4 is installed Definition Synopsis SUSE Cloud Compute Node for SUSE Linux Enterprise 12 5 is installed AND Package Information ruby2.1-rubygem-chef-10.32.2-3 is installed OR rubygem-chef-10.32.2-3 is installed Definition Synopsis SUSE OpenStack Cloud 6 is installed AND Package Information ruby2.1-rubygem-chef-10.32.2-3 is installed OR ruby2.1-rubygem-chef-expander-10.32.2-1 is installed OR ruby2.1-rubygem-chef-server-10.32.2-1 is installed OR ruby2.1-rubygem-chef-server-api-10.32.2-4 is installed OR ruby2.1-rubygem-chef-solr-10.32.2-1 is installed OR rubygem-chef-10.32.2-3 is installed OR rubygem-chef-expander-10.32.2-1 is installed OR rubygem-chef-server-api-10.32.2-4 is installed OR rubygem-chef-solr-10.32.2-1 is installed Definition Synopsis Release Information SUSE Linux Enterprise Software Development Kit 11 SP4 is installed AND rubygem-json_pure-1.2.0-0.4.4 is installed OR Package Information SUSE Linux Enterprise Software Development Kit 11 SP2 is installed AND rubygem-json_pure-1.2.0-0.4.4 is installed
BACK