Django REST framework

Vulnerability Instance

Lookup for vulnerabilities affecting packages.

Vulnerability_idVCID-3uaa-r5vu-2fg9
Summaryruby: DoS via long string in str_buf_cat()
Aliases
0
alias CVE-2014-3916
1
alias GHSA-252h-69rw-g2rp
2
alias OSV-107478
Fixed_packages
Affected_packages
0
url pkg:ruby/ruby@2.0.1
purl pkg:ruby/ruby@2.0.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1bdw-9rs5-6ycg
1
vulnerability VCID-3uaa-r5vu-2fg9
2
vulnerability VCID-cvs2-zecm-z3h8
3
vulnerability VCID-g7ju-q41v-wyhd
4
vulnerability VCID-k6dd-ykw2-nfh6
5
vulnerability VCID-pkg9-61ah-kbex
6
vulnerability VCID-wzdf-d9fv-u3hh
resource_url http://public2.vulnerablecode.io/packages/pkg:ruby/ruby@2.0.1
1
url pkg:ruby/ruby@2.2
purl pkg:ruby/ruby@2.2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1bdw-9rs5-6ycg
1
vulnerability VCID-3uaa-r5vu-2fg9
2
vulnerability VCID-cvs2-zecm-z3h8
3
vulnerability VCID-k6dd-ykw2-nfh6
4
vulnerability VCID-rwak-wvuw-qbcg
resource_url http://public2.vulnerablecode.io/packages/pkg:ruby/ruby@2.2
2
url pkg:ruby/ruby@2.3
purl pkg:ruby/ruby@2.3
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1cad-uybu-2uau
1
vulnerability VCID-3uaa-r5vu-2fg9
2
vulnerability VCID-91b7-xx8t-rqhr
3
vulnerability VCID-bad1-7aa4-cugv
4
vulnerability VCID-beub-d11r-nbe4
5
vulnerability VCID-cvs2-zecm-z3h8
6
vulnerability VCID-fapg-pt6b-rfb2
7
vulnerability VCID-qyz5-zmnt-qucy
8
vulnerability VCID-rdme-1q3s-43d8
9
vulnerability VCID-rwak-wvuw-qbcg
10
vulnerability VCID-xkd6-jvma-skfk
11
vulnerability VCID-y29u-wpkt-rkgp
12
vulnerability VCID-zwxw-299r-wfgx
13
vulnerability VCID-zybm-uuxu-67gh
resource_url http://public2.vulnerablecode.io/packages/pkg:ruby/ruby@2.3
References
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-3916.json
reference_id
reference_type
scores
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-3916.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2014-3916
reference_id
reference_type
scores
0
value 0.0049
scoring_system epss
scoring_elements 0.65608
published_at 2026-04-21T12:55:00Z
1
value 0.0049
scoring_system epss
scoring_elements 0.65491
published_at 2026-04-01T12:55:00Z
2
value 0.0049
scoring_system epss
scoring_elements 0.6554
published_at 2026-04-02T12:55:00Z
3
value 0.0049
scoring_system epss
scoring_elements 0.6557
published_at 2026-04-04T12:55:00Z
4
value 0.0049
scoring_system epss
scoring_elements 0.65536
published_at 2026-04-07T12:55:00Z
5
value 0.0049
scoring_system epss
scoring_elements 0.65588
published_at 2026-04-08T12:55:00Z
6
value 0.0049
scoring_system epss
scoring_elements 0.656
published_at 2026-04-09T12:55:00Z
7
value 0.0049
scoring_system epss
scoring_elements 0.65619
published_at 2026-04-11T12:55:00Z
8
value 0.0049
scoring_system epss
scoring_elements 0.65605
published_at 2026-04-12T12:55:00Z
9
value 0.0049
scoring_system epss
scoring_elements 0.65577
published_at 2026-04-13T12:55:00Z
10
value 0.0049
scoring_system epss
scoring_elements 0.65612
published_at 2026-04-16T12:55:00Z
11
value 0.0049
scoring_system epss
scoring_elements 0.65625
published_at 2026-04-18T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2014-3916
2
reference_url https://bugs.ruby-lang.org/issues/9709
reference_id
reference_type
scores
url https://bugs.ruby-lang.org/issues/9709
3
reference_url http://seclists.org/oss-sec/2014/q2/362
reference_id
reference_type
scores
url http://seclists.org/oss-sec/2014/q2/362
4
reference_url http://seclists.org/oss-sec/2014/q2/375
reference_id
reference_type
scores
url http://seclists.org/oss-sec/2014/q2/375
5
reference_url https://exchange.xforce.ibmcloud.com/vulnerabilities/93505
reference_id
reference_type
scores
url https://exchange.xforce.ibmcloud.com/vulnerabilities/93505
6
reference_url https://vulners.com/rubygems/RUBY:RUBY-2014-3916-107478
reference_id
reference_type
scores
url https://vulners.com/rubygems/RUBY:RUBY-2014-3916-107478
7
reference_url http://www.securityfocus.com/bid/67705
reference_id
reference_type
scores
url http://www.securityfocus.com/bid/67705
8
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=1164844
reference_id 1164844
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=1164844
9
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:rubyonrails:rails:1.9.3:*:*:*:*:*:*:*
reference_id cpe:2.3:a:rubyonrails:rails:1.9.3:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:rubyonrails:rails:1.9.3:*:*:*:*:*:*:*
10
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:rubyonrails:rails:2.0.0:*:*:*:*:*:*:*
reference_id cpe:2.3:a:rubyonrails:rails:2.0.0:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:rubyonrails:rails:2.0.0:*:*:*:*:*:*:*
11
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:rubyonrails:rails:2.1.0:*:*:*:*:*:*:*
reference_id cpe:2.3:a:rubyonrails:rails:2.1.0:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:rubyonrails:rails:2.1.0:*:*:*:*:*:*:*
12
reference_url https://nvd.nist.gov/vuln/detail/CVE-2014-3916
reference_id CVE-2014-3916
reference_type
scores
0
value 5.0
scoring_system cvssv2
scoring_elements AV:N/AC:L/Au:N/C:N/I:N/A:P
url https://nvd.nist.gov/vuln/detail/CVE-2014-3916
Weaknesses
0
cwe_id 119
name Improper Restriction of Operations within the Bounds of a Memory Buffer
description The product performs operations on a memory buffer, but it can read from or write to a memory location that is outside of the intended boundary of the buffer.
1
cwe_id 19
name Data Processing Errors
description Weaknesses in this category are typically found in functionality that processes data. Data processing is the manipulation of input to retrieve or save information.
Exploits
Severity_range_score5.0 - 5.0
Exploitability0.5
Weighted_severity4.5
Risk_score2.2
Resource_urlhttp://public2.vulnerablecode.io/vulnerabilities/VCID-3uaa-r5vu-2fg9