tags 678512 + security
thanks

I'm not certain, but I have an inkling this is caused by the bug fixed
in https://github.com/eventmachine/eventmachine/pull/502 which
introduced a memory leak which was fixed in
https://github.com/eventmachine/eventmachine/pull/586

We are seeing identical overflows in beef when configured to use IPv6
on Kali. See https://github.com/beefproject/beef/issues/1187

Regardless, it looks to me as though Jessie and Wheezy's
ruby-eventmachine packages (1.0.3-6+b2 and 0.12.10-3 respectively) are
missing patches for what is said upsteam to be a remotely exploitable
security issue - see
https://github.com/eventmachine/eventmachine/issues/501#issuecomment-37307556

--
Justin

Reply via email to