Staging Environment: Content and features may be unstable or change without notice.

Advisory Weakness Curation

CVE-2014-9490

Progress 0 / 0

Advisory Summaries

github_osv/GHSA-c9c5-9fpr-m882

sentry-raven allows remote attackers to cause a denial of service via a large exponent value in a scientific number The `numtok` function in `lib/raven/okjson.rb` in the raven-ruby gem before 0.12.2 for Ruby allows remote attackers to cause a denial of service via a large exponent value in a scientific number.

gitlab/gem/sentry-raven/CVE-2014-9490

Denial of Service Sentry raven-ruby contains a flaw in the lib/raven/okjson.rb script that is triggered when large numeric values are stored as an exponent or in scientific notation. With a specially crafted request, an attacker can cause the software to consume excessive resources resulting in a denial of service.