Buffer overrun in CGI.escape_html
Date: 2021-12
Affected: rubygems/cgi, rubygems/cgi, rubygems/cgi
Attack vector: other
Category: vulnerability-disclosure
Severity: Critical
CVE: CVE-2021-41816
CWE: CWE-190
CVSS: 9.8 (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)

A buffer overrun vulnerability was discovered in CGI.escape_html. This can lead to a buffer overflow when a user passes a very large string (> 700 MB) to CGI.escape_html on a platform where long type takes 4 bytes, typically, Windows.


Mitigations:

Architectural layers (MAESTRO):