Class: Dawn::Kb::CVE_2014_2525

Inherits:
Object
  • Object
show all
Includes:
ComboCheck
Defined in:
lib/dawn/kb/cve_2014_2525.rb

Overview

Automatically created with rake on 2014-03-31

Constant Summary

Constants included from BasicCheck

BasicCheck::ALLOWED_FAMILIES

Instance Attribute Summary

Attributes included from ComboCheck

#checks, #options, #vulnerable_checks

Attributes included from BasicCheck

#applies, #aux_links, #check_family, #cve, #cvss, #cwe, #debug, #evidences, #fixes_version, #kind, #message, #mitigated, #name, #osvdb, #owasp, #priority, #release_date, #remediation, #ruby_version, #ruby_vulnerable_versions, #severity, #status, #target_version, #title

Instance Method Summary collapse

Methods included from ComboCheck

#dump_status, find_vulnerable_checks_by_class, #vuln?

Methods included from BasicCheck

#applies_to?, #cve_link, #cvss_score, families, #family, #family=, #lint, #mitigated?, #nvd_link, #osvdb_link, #rubysec_advisories_link

Methods included from Utils

#__debug_me_and_return, #debug_me, #debug_me_and_return_false, #debug_me_and_return_true

Constructor Details

#initialize ⇒ CVE_2014_2525

Returns a new instance of CVE_2014_2525.



38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
 
# File 'lib/dawn/kb/cve_2014_2525.rb', line 38

def initialize
      message = ""

      super({
        :name=>"CVE-2014-2525",
        :cvss=>"",
        :release_date => Date.new(2014, 3, 28),
        :cwe=>"",
        :owasp=>"A9",
        :applies=>["rails", "sinatra", "padrino"],
        :kind=>Dawn::KnowledgeBase::COMBO_CHECK,
        :message=>message,
        :mitigation=>"Please upgrade your system libyaml or upgrade psych gem to version 2.0.5 or higher that is linked with a safe libyaml version.",
        :aux_links=>["https://www.ruby-lang.org/en/news/2014/03/29/heap-overflow-in-yaml-uri-escape-parsing-cve-2014-2525"],
        :severity=>:high,
        :prority=>:high,
        :checks=>[CVE_2014_2525_a.new, CVE_2014_2525_b.new]
      })
end