Lucene search

RubySecRUBY:RUBY-2008-2376

HistoryJun 29, 2008 - 8:00 p.m.

More ruby integer overflows (rb_ary_fill / Array#fill)

2008-06-2920:00:00

RubySec

www.openwall.com

CVSS2

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

JSON

Integer overflow in the rb_ary_fill function in array.c in Ruby before
revision 17756 allows context-dependent attackers to cause a denial of
service (crash) or possibly have unspecified other impact via a call to the
Array#fill method with a start (aka beg) argument greater than ARY_MAX_SIZE.
NOTE: this issue exists because of an incomplete fix for other closely
related integer overflows.

Affected configurations

Vulners

Node

rubyrubyRange1.8.0–1.8.6.286

rubyrubyRange1.8.0–1.8.7.71

rubyrubyRange≤1.9.0

VendorProductVersionCPE
rubyruby*cpe:2.3:a:ruby:ruby:*:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
ruby	ruby	*	cpe:2.3:a:ruby:ruby::::::::

References

www.openwall.com/lists/oss-security/2008/07/02/3

CVSS2

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

JSON

Related for RUBY:RUBY-2008-2376