CVE catalog

CVE-2004-0983

ruby - infinite loop

[CVE catalog]

Severity
Unknown
Published
Updated
Source
[NVD] · [CVE record]
EPSS
1.90% · Oct 27, 2026

The CGI module in Ruby 1.6 before 1.6.8, and 1.8 before 1.8.2, allows remote attackers to cause a denial of service (infinite loop and CPU consumption) via a certain HTTP request. security flaw

Vulnerable and fixed packages

Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.

DistributionPackageReleaseVersionStatus
Debianruby3.01.6.7-3woody4fixed

Fixed-version evidence

DistributionPackageTypeReleaseFixed versionUrgencyOriginBugs
Debianrubydeb3.01.6.7-3woody4Not reportedDSA-586-1Not reported

OpenFactory catalog packages

No matching packages in this catalog.

Observed:

References