Re: libjson-ruby: catastrophic backtracking

[Josh Bressers <bressers () redhat com>]

----- "Michael Gilbert" <michael.s.gilbert () gmail com> wrote:

> hi all,
>
> should a cve id be issued for the following "catastrophic
> backtracking" issue in libjson-ruby?
>
> http://rubyforge.org/frs/shownotes.php?release_id=36363
> http://bugs.debian.org/555516 (note two separate issues fixed there)

Can someone elaborate on what "catastrophic backtracking" means? Is this a DoS?

Thanks.

-- 
    JB