CVE-2018-8777

CVE-2018-8777 describes a denial-of-service vulnerability affecting Ruby versions prior to 2.2.10, 2.3.7, 2.4.4, 2.5.1, and 2.6.0-preview1, specifically impacting the WEBrick server component. An unauthenticated attacker can exploit this by sending a large, crafted HTTP header or body, leading to excessive memory consumption and a denial of service. With a CVSS score of 7.5 (High), this vulnerability is easily exploitable over the network with low attack complexity and no user interaction required. Currently, there is no evidence of active exploitation, publicly available exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage.