CVE-2008-2663

🗓️ 24 Jun 2008 19:00:41Reported by [email protected]Type

Multiple integer overflows in Ruby 1.8.4 and earlier versions allow attackers to execute arbitrary code and cause denial of service

Reporter	Title	Published	Views	Family All 119
Prion	Integer overflow	24 Jun 200819:41	–	prion
Prion	Memory corruption	24 Jun 200819:41	–	prion
Prion	Integer overflow	24 Jun 200819:41	–	prion
Prion	Integer overflow	24 Jun 200819:41	–	prion
Prion	Design/Logic Flaw	2 Sep 200814:24	–	prion
NVD	CVE-2008-2664	24 Jun 200819:41	–	nvd
NVD	CVE-2008-2662	24 Jun 200819:41	–	nvd
NVD	CVE-2008-2725	24 Jun 200819:41	–	nvd
NVD	CVE-2008-2727	2 Sep 200814:24	–	nvd
RubySec	CVE-2008-2664 ruby: Unsafe use of alloca in rb_str_format()	19 Jun 200820:00	–	rubygems

Nvd

Node

ruby-lang rubyRange≤1.8.4

ruby-lang rubyRange1.8.5–1.8.5.231

ruby-lang rubyRange1.8.6–1.8.6.230

ruby-lang rubyRange1.8.7–1.8.7.22

Node

debian debian_linuxMatch4.0

Node

canonical ubuntu_linuxMatch6.06lts

canonical ubuntu_linuxMatch7.04

canonical ubuntu_linuxMatch7.10

canonical ubuntu_linuxMatch8.04lts

Source	Link
debian	www.debian.org/security/2008/dsa-1618
mandriva	www.mandriva.com/security/advisories
secunia	www.secunia.com/advisories/31687
ubuntu	www.ubuntu.com/usn/usn-621-1
issues	www.issues.rpath.com/browse/RPL-2626
secunia	www.secunia.com/advisories/31181
secunia	www.secunia.com/advisories/31256
mandriva	www.mandriva.com/security/advisories
ruby-forum	www.ruby-forum.com/topic/157034
oval	www.oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10524

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

24 Jun 2008 19:41Current

7.2High risk

Vulners AI Score7.2

CVSS210.0

EPSS0.007

CWE-190