Skip to content

Commit 0ced7e8

Browse files
committed
Sync with GitHub Security Advisories
* Add CVE-2022-4064 for dalli
1 parent 094a479 commit 0ced7e8

1 file changed

Lines changed: 19 additions & 0 deletions

File tree

gems/dalli/CVE-2022-4064.yml

Lines changed: 19 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,19 @@
1+
---
2+
gem: dalli
3+
cve: 2022-4064
4+
ghsa: 3xg8-cc8f-9wv2
5+
url: https://github.com/petergoldstein/dalli/issues/932
6+
title: Unsanitized input leading to code injection in Dalli
7+
date: 2022-11-19
8+
description: |
9+
A vulnerability was found in Dalli. Affected is the function self.meta_set
10+
of the file lib/dalli/protocol/meta/request_formatter.rb of the component Meta Protocol
11+
Handler. The manipulation leads to injection. The exploit has been disclosed to
12+
the public and may be used. The name of the patch is 48d594dae55934476fec61789e7a7c3700e0f50d.
13+
It is recommended to apply a patch to fix this issue.
14+
patched_versions:
15+
- ">= 3.2.3"
16+
related:
17+
url:
18+
- https://github.com/petergoldstein/dalli/pull/933
19+
- https://github.com/petergoldstein/dalli/commit/48d594dae55934476fec61789e7a7c3700e0f50d

0 commit comments

Comments
 (0)