Lucene search
RubySecRUBY:RUBY-2014-4975-108971HistoryJul 09, 2014 - 12:00 a.m.
CVE-2014-4975 ruby: off-by-one stack-based buffer overflow in the encodes() function
2014-07-0900:00:00
RubySec
rubysec.com
11
Off-by-one error in the encodes function in pack.c in Ruby 1.9.3 and
earlier, and 2.x through 2.1.2, when using certain format string specifiers, allows
context-dependent attackers to cause a denial of service (segmentation fault) via
vectors that trigger a stack-based buffer overflow.
References
Related
veracode
veracode
Denial Of Service (DoS)
2019-01-15 09:03:14
prion
prion
Stack overflow
2014-11-15 20:59:00
ubuntucve
ubuntucve
CVE-2014-4975
2014-07-17 00:00:00
cve
cve
CVE-2014-4975
2014-11-15 20:59:00
openvas
openvas
Ruby 'encodes' function Denial-of-Service Vulnerability - Windows
2014-11-20 00:00:00
Ubuntu: Security Advisory (USN-2397-1)
2014-11-05 00:00:00
Mageia: Security Advisory (MGASA-2014-0472)
2022-01-28 00:00:00
ubuntu
ubuntu
Ruby vulnerabilities
2014-11-04 00:00:00
nessus
nessus
Ubuntu 14.04 LTS : Ruby vulnerabilities (USN-2397-1)
2014-11-05 00:00:00
Fedora 21 : ruby-2.1.4-24.fc21 (2014-14096)
2014-11-11 00:00:00
CentOS 7 : ruby (CESA-2014:1912)
2014-12-02 00:00:00
fedora
fedora
[SECURITY] Fedora 21 Update: ruby-2.1.4-24.fc21
2014-11-10 06:32:27
oraclelinux
oraclelinux
ruby193-ruby security update
2016-02-04 00:00:00
ruby security update
2014-11-26 00:00:00
redhat
redhat
(RHSA-2014:1914) Moderate: ruby200-ruby security update
2014-11-26 00:00:00
(RHSA-2014:1912) Moderate: ruby security update
2014-11-26 00:00:00
(RHSA-2014:1913) Moderate: ruby193-ruby security update
2014-11-26 00:00:00
securityvulns
securityvulns
Ruby DoS
2014-11-24 00:00:00
osv
osv
ruby1.9.1 - security update
2015-02-09 00:00:00
ruby1.9.1 - security update
2015-04-15 00:00:00
debian
debian
[SECURITY] [DSA 3157-1] ruby1.9.1 security update
2015-02-09 17:10:22
[SECURITY] [DLA 200-1] ruby1.9.1 security update
2015-04-15 18:17:59
centos
centos
ruby, rubygem, rubygems security update
2014-12-01 13:45:48
mageia
mageia
Updated ruby packages fix security vulnerabilities
2014-11-21 15:44:16
suse
suse
Security update for ruby2.1 (important)
2017-04-28 18:11:28
Security update for ruby2.1 (important)
2017-04-20 12:08:57
Related for RUBY:RUBY-2014-4975-108971