CVE:CVE-2014-8080
CNNVD:CNNVD-201411-025
REXML是一个基于Ruby语言的XML工具包，它主要用于对XML文件进行解析。
Ruby的REXML解析器中存在安全漏洞。远程攻击者可借助特制的XML文档利用该漏洞造成拒绝服务（内存消耗）。以下版本受到影响：Ruby 1.9.3-p550之前1.9.x版本，2.0.0-p594之前2.0.x版本和2.1.4之前2.1.x版本。
solution:Upgrade opensuse opensuse to a higher version than 12.3,13.1,and avoid the version 12.3,13.1; Upgrade canonical ubuntu_linux to a higher version than 12.04,14.04,14.10,and avoid the version 12.04,14.04,14.10; Upgrade ruby-lang ruby to a higher version than *:p550,1.9.3,1.9.3:p0,1.9.3:p125,1.9.3:p194,1.9.3:p286,1.9.3:p383,1.9.3:p385,1.9.3:p392,1.9.3:p426,1.9.3:p429,1.9.3:p448,1.9.3:p545,1.9.3:p547,2.0.0,2.0.0:p0,2.0.0:p195,2.0.0:p247,2.0.0:p451,2.0.0:p481,2.0.0:p576,2.1.1,2.1.2,2.1.3,and avoid the version *:p550,1.9.3,1.9.3:p0,1.9.3:p125,1.9.3:p194,1.9.3:p286,1.9.3:p383,1.9.3:p385,1.9.3:p392,1.9.3:p426,1.9.3:p429,1.9.3:p448,1.9.3:p545,1.9.3:p547,2.0.0,2.0.0:p0,2.0.0:p195,2.0.0:p247,2.0.0:p451,2.0.0:p481,2.0.0:p576,2.1.1,2.1.2,2.1.3; Upgrade redhat enterprise_linux to a higher version than 6.0,7.0,and avoid the version 6.0,7.0