Denial Of Service (DoS)

2019-01-1509:03:14

Veracode Vulnerability Database

sca.analysiscenter.veracode.com

0.003 Low

EPSS

Percentile

69.2%

JSON

ruby193-ruby is vulnerable to denial of service (DoS) attacks. The vulnerability exists as an off-by-one error in the encodes function in pack.c in Ruby 1.9.3 and earlier, and 2.x through 2.1.2, when using certain format string specifiers, allows context-dependent attackers to cause a denial of service (segmentation fault) via vectors that trigger a stack-based buffer overflow.

CPENameOperatorVersion
ruby193-rubyeq1.9.3.429__34.2.el6ost
ruby193-rubyeq1.9.3.448__38.el6
ruby193-rubyeq1.9.3.429__34.el6
ruby193-rubyeq1.9.3.448__40.1.el6
ruby193-rubyeq1.9.3.194__23.el6
ruby193-rubyeq1.9.3.448__40.el6
ruby193-rubyeq1.9.3.327__28.el6
ruby193-rubyeq1.9.3.327__25.el6
ruby193-rubyeq1.9.3.484__49.el6
ruby200-rubyeq2.0.0.353__23.el6

Name	Operator	Version
ruby193-ruby	eq	1.9.3.429__34.2.el6ost
ruby193-ruby	eq	1.9.3.448__38.el6
ruby193-ruby	eq	1.9.3.429__34.el6
ruby193-ruby	eq	1.9.3.448__40.1.el6
ruby193-ruby	eq	1.9.3.194__23.el6
ruby193-ruby	eq	1.9.3.448__40.el6
ruby193-ruby	eq	1.9.3.327__28.el6
ruby193-ruby	eq	1.9.3.327__25.el6
ruby193-ruby	eq	1.9.3.484__49.el6
ruby200-ruby	eq	2.0.0.353__23.el6