High severity7.5NVD Advisory· Published Apr 3, 2017· Updated May 13, 2026
CVE-2017-6181
CVE-2017-6181
Description
The parse_char_class function in regparse.c in the Onigmo (aka Oniguruma-mod) regular expression library, as used in Ruby 2.4.0, allows remote attackers to cause a denial of service (deep recursion and application crash) via a crafted regular expression.
Affected products
1Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
3- www.securityfocus.com/bid/97304nvdThird Party AdvisoryVDB Entry
- bugs.ruby-lang.org/issues/13234nvdIssue TrackingVendor Advisory
- bugs.ruby-lang.org/projects/ruby-trunk/repository/revisions/57660nvdIssue TrackingVendor Advisory
News mentions
0No linked articles in our index yet.