Buffer Overflow

🗓️ 13 Apr 2022 07:35:02Reported by Veracode Vulnerability DatabaseType

veracode

veracode🔗 sca.analysiscenter.veracode.com👁 23 Views

Ruby String-to-Float Conversion Buffer Overflow Vulnerabilit

Reporter	Title	Published	Views	Family All 230
FreeBSD	Ruby -- Buffer overrun in String-to-Float conversion	12 Apr 202200:00	–	freebsd
Tenable Nessus	Amazon Linux 2 : ruby (ALAS-2022-1853)	10 Oct 202200:00	–	nessus
Tenable Nessus	Amazon Linux 2 : ruby (ALASRUBY2.6-2023-001)	27 Sep 202300:00	–	nessus
Tenable Nessus	Amazon Linux 2 : ruby (ALASRUBY3.0-2023-002)	27 Sep 202300:00	–	nessus
Tenable Nessus	Amazon Linux AMI : ruby20 (ALAS-2022-1638)	10 Oct 202200:00	–	nessus
Tenable Nessus	Alibaba Cloud Linux 3 : 0080: ruby:2.7 (ALINUX3-SA-2023:0080)	14 May 202500:00	–	nessus
Tenable Nessus	AlmaLinux 8 : ruby:2.7 (ALSA-2022:6447)	8 Oct 202200:00	–	nessus
Tenable Nessus	AlmaLinux 9 : ruby (ALSA-2022:6585)	16 Nov 202200:00	–	nessus
Tenable Nessus	CentOS 8 : ruby:2.6 (CESA-2022:5338)	11 Jul 202200:00	–	nessus
Tenable Nessus	CentOS 8 : ruby:2.7 (CESA-2022:6447)	13 Sep 202200:00	–	nessus

Vulners

Node

ruby rubyMatch3.0.2-r0os

AND

ruby rubyMatch3.0.3-r0os

AND

alpinelinux alpine_linuxMatch3.15

OR

ruby rubyMatch2.7.4-r0os

AND

ruby rubyMatch2.7.3-r1os

AND

ruby rubyMatch2.7.5-r0os

AND

alpinelinux alpine_linuxMatch3.14

OR

ruby rubyMatch2.6.6-r2os

AND

ruby rubyMatch3.0.3-r0os

AND

ruby rubyMatch2.7.1-r3os

AND

ruby rubyMatch2.7.2-r4os

AND

ruby rubyMatch2.7.2-r3os

AND

ruby rubyMatch2.7.3-r1os

AND

ruby rubyMatch2.7.4-r1os

AND

ruby rubyMatch2.6.5-r2os

AND

ruby rubyMatch3.1.1-r0os

AND

ruby rubyMatch2.7.3-r0os

AND

ruby rubyMatch3.0.2-r0os

AND

ruby rubyMatch2.7.4-r0os

AND

ruby rubyMatch2.6.6-r4os

AND

alpinelinux alpine_linuxMatchedge

OR

ruby rubyMatch2.7.2-r0os

AND

ruby rubyMatch2.7.4-r0os

AND

ruby rubyMatch2.7.3-r0os

AND

ruby rubyMatch2.7.2-r1os

AND

ruby rubyMatch2.7.5-r0os

AND

ruby rubyMatch2.7.1-r3os

AND

alpinelinux alpine_linuxMatch3.12

OR

ruby rubyMatch2.7.5-r0os

AND

ruby rubyMatch2.7.2-r3os

AND

ruby rubyMatch2.7.3-r0os

AND

ruby rubyMatch2.7.2-r4os

AND

ruby rubyMatch2.7.4-r0os

AND

alpinelinux alpine_linuxMatch3.13

OR

focal focalMatch2.7.0-5ubuntu1.2debian

AND

focal focalMatch2.7.0-5ubuntu1.1debian

AND

focal focalMatch2.7.0-5ubuntu1debian

AND

debian debian_linux

OR

google bionicMatch2.5.1-1ubuntu1debian

AND

google bionicMatch2.5.1-1ubuntu1.7debian

AND

google bionicMatch2.5.1-1ubuntu1.10debian

AND

google bionicMatch2.5.1-1ubuntu1.6debian

AND

debian debian_linux

OR

ruby2.5 ruby2.5Match2.5.5-3+deb10u3debian

AND

ruby2.5 ruby2.5Match2.5.5-3+deb10u2debian

AND

debian debian_linuxMatch10

OR

ruby2.7 ruby2.7Match2.7.2-3debian

AND

debian debian_linuxMatch11

Source	Link
seclists	www.seclists.org/fulldisclosure/2022/Oct/41
secdb	www.secdb.alpinelinux.org/v3.13/main.yaml
secdb	www.secdb.alpinelinux.org/v3.12/main.yaml
secdb	www.secdb.alpinelinux.org/v3.14/main.yaml
secdb	www.secdb.alpinelinux.org/edge/main.yaml
secdb	www.secdb.alpinelinux.org/v3.15/main.yaml
seclists	www.seclists.org/fulldisclosure/2022/Oct/28
seclists	www.seclists.org/fulldisclosure/2022/Oct/29
seclists	www.seclists.org/fulldisclosure/2022/Oct/30
seclists	www.seclists.org/fulldisclosure/2022/Oct/42

24 Jan 2024 06:21Current

6Medium risk

Vulners AI Score6

CVSS 24.3

CVSS 3.17.5

EPSS0.00306

ruby buffer overflow memory corruption string-to-float software