Lucene search
PRIOn knowledge basePRION:CVE-2016-2339HistoryJan 06, 2017 - 9:59 p.m.
Heap overflow
2017-01-0621:59:00
PRIOn knowledge base
www.prio-n.com
6
An exploitable heap overflow vulnerability exists in the Fiddle::Function.new “initialize” function functionality of Ruby. In Fiddle::Function.new “initialize” heap buffer “arg_types” allocation is made based on args array length. Specially constructed object passed as element of args array can increase this array size after mentioned allocation and cause heap overflow.
Related
redhatcve
redhatcve
CVE-2016-2339
2017-01-12 14:50:43
nessus
nessus
Photon OS 1.0: Ruby PHSA-2017-0002 (deprecated)
2018-08-17 00:00:00
Photon OS 1.0: Ruby PHSA-2017-0002
2019-02-07 00:00:00
openSUSE Security Update : ruby2.2 / ruby2.3 (openSUSE-2017-435)
2017-04-06 00:00:00
talos
talos
Ruby Fiddle::Function.new Heap Overflow Vulnerability
2016-06-14 00:00:00
nvd
nvd
CVE-2016-2339
2017-01-06 21:59:00
cve
cve
CVE-2016-2339
2017-01-06 21:59:00
ubuntucve
ubuntucve
CVE-2016-2339
2017-01-06 00:00:00
osv
osv
CVE-2016-2339
2017-01-06 21:59:00
ruby2.1 - security update
2018-07-13 00:00:00
cvelist
cvelist
CVE-2016-2339
2017-01-06 21:00:00
debiancve
debiancve
CVE-2016-2339
2017-01-06 21:59:00
suse
suse
Security update for ruby19 (important)
2017-04-03 21:09:44
Security update for ruby2.2, ruby2.3 (important)
2017-04-05 15:08:17
Security update for ruby2.1 (important)
2017-04-20 12:08:57
seebug
seebug
Ruby Fiddle::Function.new Heap Overflow Vulnerability(CVE-2016-2339)
2017-10-20 00:00:00
openvas
openvas
openSUSE: Security Advisory for ruby2.2 (openSUSE-SU-2017:0933-1)
2017-04-06 00:00:00
Huawei EulerOS: Security Advisory for ruby (EulerOS-SA-2017-1051)
2020-01-23 00:00:00
Huawei EulerOS: Security Advisory for ruby (EulerOS-SA-2017-1050)
2020-01-23 00:00:00
mageia
mageia
Updated ruby packages fix security vulnerabilities
2017-08-20 12:10:44
ubuntu
ubuntu
Ruby vulnerabilities
2017-07-25 00:00:00
debian
debian
[SECURITY] [DLA 1421-1] ruby2.1 security update
2018-07-14 06:28:37