Lucene search

K
freebsdFreeBSDEAB8C3BD-E50C-11DE-9CD0-001A926C7637
HistoryNov 30, 2009 - 12:00 a.m.

ruby -- heap overflow vulnerability

2009-11-3000:00:00
vuxml.freebsd.org
11

10 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

0.013 Low

EPSS

Percentile

85.6%

The official ruby site reports:

There is a heap overflow vulnerability in String#ljust,
String#center and String#rjust. This has allowed an attacker to run
arbitrary code in some rare cases.

OSVersionArchitecturePackageVersionFilename
FreeBSDanynoarchruby=Β 1.9.1,1UNKNOWN
FreeBSDanynoarchruby<Β 1.9.1.376,1UNKNOWN

10 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

0.013 Low

EPSS

Percentile

85.6%

Related for EAB8C3BD-E50C-11DE-9CD0-001A926C7637