High severity7.5NVD Advisory· Published Apr 3, 2017· Updated Jun 17, 2026

CVE-2017-6181

Description

The parse_char_class function in regparse.c in the Onigmo (aka Oniguruma-mod) regular expression library, as used in Ruby 2.4.0, allows remote attackers to cause a denial of service (deep recursion and application crash) via a crafted regular expression.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Ruby Lang/Ruby
cpe:2.3:a:ruby-lang:ruby:2.4.0:*:*:*:*:*:*:*
ruby-git/ruby-gitllm-fuzzy
Range: = 2.4.0
Onigmo/Onigmollm-fuzzy

Patches

Vulnerability mechanics

References

www.securityfocus.com/bid/97304nvdThird Party AdvisoryVDB Entry
bugs.ruby-lang.org/issues/13234nvdIssue TrackingVendor Advisory
bugs.ruby-lang.org/projects/ruby-trunk/repository/revisions/57660nvdIssue TrackingVendor Advisory

News mentions

No linked articles in our index yet.

cvss	0.488
epss	0.003
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000