UBUNTU-CVE-2013-4389

Advisory lineage Upstream: 1 Downstream: 0
Upstream
CVE-2013-4389
Published: 17 Oct 2013, 00:55
Last modified:16 Jul 2025, 07:31

Vulnerability Summary

Overall Risk (default)
minimal
0/100
CVSS Score
No data
EPSS Score
No data
KEV
Not listed
Ransomware
No reports
Public exploits
None found
Dark Web
Not detected

Timeline

17 Oct 2013, 00:55
Published
Vulnerability first disclosed
16 Jul 2025, 07:31
Last Modified
Vulnerability information updated

Description

Multiple format string vulnerabilities in log_subscriber.rb files in the log subscriber component in Action Mailer in Ruby on Rails 3.x before 3.2.15 allow remote attackers to cause a denial of service via a crafted e-mail address that is improperly handled during construction of a log message.

Affected Systems

  • ubuntu•ruby-actionmailer-3.2

    < 3.2.16-1

References (3)