In the bindata RubyGem before version 2.4.10 there is a potential denial-of-service vulnerability. In affected versions it is very slow for certain classes in BinData to be created. For example BinData::Bit100000, BinData::Bit100001, BinData::Bit100002, BinData::Bit<N>. In combination with <user_input>.constantize there is a potential for a CPU-based DoS. In version 2.4.10 bindata improved the creation time of Bits and Integers.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - In the bindata RubyGem before version 2.4.10 there is a potential denial-of-service vulnerability. In     affected versions it is very slow for certain classes in BinData to be created. For example     BinData::Bit100000, BinData::Bit100001, BinData::Bit100002, BinData::Bit<N>. In combination with     <user_input>.constantize there is a potential for a CPU-based DoS. In version 2.4.10 bindata improved the     creation time of Bits and Integers. (CVE-2021-32823)

Note that Nessus relies on the presence of the package as reported by the vendor.

There are packages installed that are affected by a vulnerability referenced in the following CVE:

  - In the bindata RubyGem before version 2.4.10 there is a potential denial-of-service vulnerability. In
    affected versions it is very slow for certain classes in BinData to be created. For example
    BinData::Bit100000, BinData::Bit100001, BinData::Bit100002, BinData::Bit<N>. In combination with
    <user_input>.constantize there is a potential for a CPU-based DoS. In version 2.4.10 bindata improved the
    creation time of Bits and Integers. (CVE-2021-32823)

ID	Name	Product	Family	Severity
223856	Linux Distros Unpatched Vulnerability : CVE-2021-32823	Nessus	Misc.	low
415798	SCA: security update for bindata (GHSA-hj56-84jw-67h6)	Tenable Cloud Security	SCA Checks	medium
415798	SCA: security update for bindata (GHSA-hj56-84jw-67h6)	Tenable Self-Hosted Container Security	SCA Checks	medium

Detections

Analytics

CVE-2021-32823

medium

Tenable Plugins

low

medium

medium