rubyzipproject rubyzip CVE-2019-16892 vulnerability in Rubyzipproject and Other Products
Published on September 25, 2019

product logo product logo product logo
In Rubyzip before 1.3.0, a crafted ZIP file can bypass application checks on ZIP entry sizes because data about the uncompressed size can be spoofed. This allows attackers to cause a denial of service (disk consumption).

Vendor Advisory Vendor Advisory Vendor Advisory Vendor Advisory Vendor Advisory NVD


Products Associated with CVE-2019-16892

You can be notified by email with stack.watch whenever vulnerabilities like CVE-2019-16892 are published in these products:

Rubyzipproject Rubyzip
 
Fedora Project Fedora
 
Red Hat Cloudforms
 

Exploit Probability

EPSS
0.18%
Percentile
39.43%

EPSS (Exploit Prediction Scoring System) scores estimate the probability that a vulnerability will be exploited in the wild within the next 30 days. The percentile shows you how this score compares to all other vulnerabilities.