CVE-2019-16201 in Ruby Programming Language and Debian Products
Published on November 26, 2019
WEBrick::HTTPAuth::DigestAuth in Ruby through 2.4.7, 2.5.x through 2.5.6, and 2.6.x through 2.6.4 has a regular expression Denial of Service cause by looping/backtracking. A victim must expose a WEBrick server that uses DigestAuth to the Internet or a untrusted network.
Products Associated with CVE-2019-16201
You can be notified by email with stack.watch whenever vulnerabilities like CVE-2019-16201 are published in these products:
Exploit Probability
EPSS
0.61%
Percentile
69.08%
EPSS (Exploit Prediction Scoring System) scores estimate the probability that a vulnerability will be exploited in the wild within the next 30 days. The percentile shows you how this score compares to all other vulnerabilities.