CVE-2019-16892
In Rubyzip before 1.3.0, a crafted ZIP file can bypass application checks on ZIP entry sizes because data about the uncompressed size can be spoofed. This allows attackers to cause a denial of service (disk consumption).
- Score
- 5.5 medium
- Published
- 2019-09-25
- Links
- NVD · cve.org