CVE-2013-4164
Fixed in a distro release EPSS 35%
Heap-based buffer overflow in Ruby 1.8, 1.9 before 1.9.3-p484, 2.0 before 2.0.0-p353, 2.1 before 2.1.0 preview2, and trunk before revision 43780 allows context-dependent attackers to cause a denial of service (segmentation fault) and possibly execute arbitrary code via a string that is converted to a floating point value, as demonstrated using (1) the to_f method or (2) JSON.parse.
Products: ruby-lang ruby
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 6.0 | ruby1.8 | 1.8.7.302-2squeeze2 |
| Debian 6.0 | ruby1.9.1 | 1.9.2.0-2+deb6u2 |
| Debian 7 | ruby1.8 | 1.8.7.358-7.1+deb7u1 |
| Debian 7 | ruby1.9.1 | 1.9.3.194-8.1+deb7u2 |
| Red Hat cloudforms managementengine 5 | cfme | 0:5.2.2.3-1.el6cf |
| Red Hat cloudforms managementengine 5 | cfme-appliance | 0:5.2.2.3-1.el6cf |
| Red Hat cloudforms managementengine 5 | cfme-debuginfo | 0:5.2.2.3-1.el6cf |
| Red Hat cloudforms managementengine 5 | cfme-lib | 0:5.2.2.3-1.el6cf |
| Red Hat cloudforms managementengine 5 | mingw32-cfme-host | 0:5.2.2.3-1.el6cf |
| Red Hat cloudforms managementengine 5 | ruby193-ruby | 0:1.9.3.448-40.1.el6 |
| Red Hat cloudforms managementengine 5 | ruby193-ruby-debuginfo | 0:1.9.3.448-40.1.el6 |
| Red Hat cloudforms managementengine 5 | ruby193-ruby-devel | 0:1.9.3.448-40.1.el6 |
| Red Hat cloudforms managementengine 5 | ruby193-ruby-irb | 0:1.9.3.448-40.1.el6 |
| Red Hat cloudforms managementengine 5 | ruby193-ruby-libs | 0:1.9.3.448-40.1.el6 |
| Red Hat cloudforms managementengine 5 | ruby193-ruby-tcltk | 0:1.9.3.448-40.1.el6 |
| Red Hat cloudforms managementengine 5 | ruby193-rubygem-actionpack | 1:3.2.13-5.el6cf |
| Red Hat cloudforms managementengine 5 | ruby193-rubygem-amq-protocol | 0:1.9.2-3.el6cf |
| Red Hat cloudforms managementengine 5 | ruby193-rubygem-amq-protocol-doc | 0:1.9.2-3.el6cf |
| Red Hat cloudforms managementengine 5 | ruby193-rubygem-bigdecimal | 0:1.1.0-40.1.el6 |
| Red Hat cloudforms managementengine 5 | ruby193-rubygem-bunny | 0:1.0.7-1.el6cf |
| Red Hat cloudforms managementengine 5 | ruby193-rubygem-bunny-doc | 0:1.0.7-1.el6cf |
| Red Hat cloudforms managementengine 5 | ruby193-rubygem-excon | 0:0.31.0-1.el6cf |
| Red Hat cloudforms managementengine 5 | ruby193-rubygem-fog | 0:1.19.0-1.el6cf |
| Red Hat cloudforms managementengine 5 | ruby193-rubygem-io-console | 0:0.3-40.1.el6 |
| Red Hat cloudforms managementengine 5 | ruby193-rubygem-linux_admin | 0:0.7.0-1.el6cf |
| Red Hat cloudforms managementengine 5 | ruby193-rubygem-more_core_extensions | 0:1.1.2-1.el6cf |
| Red Hat cloudforms managementengine 5 | ruby193-rubygem-nokogiri | 0:1.5.6-3.el6cf |
| Red Hat cloudforms managementengine 5 | ruby193-rubygem-nokogiri-debuginfo | 0:1.5.6-3.el6cf |
| Red Hat cloudforms managementengine 5 | ruby193-rubygems | 0:1.8.23-40.1.el6 |
| Red Hat cloudforms managementengine 5 | ruby193-rubygems-devel | 0:1.8.23-40.1.el6 |
| Red Hat Enterprise Linux 6 | ruby | 0:1.8.7.352-13.el6 |
| Red Hat Enterprise Linux 6 | ruby-debuginfo | 0:1.8.7.352-13.el6 |
| Red Hat Enterprise Linux 6 | ruby-devel | 0:1.8.7.352-13.el6 |
| Red Hat Enterprise Linux 6 | ruby-docs | 0:1.8.7.352-13.el6 |
| Red Hat Enterprise Linux 6 | ruby-irb | 0:1.8.7.352-13.el6 |
| Red Hat Enterprise Linux 6 | ruby-libs | 0:1.8.7.352-13.el6 |
| Red Hat Enterprise Linux 6 | ruby-rdoc | 0:1.8.7.352-13.el6 |
| Red Hat Enterprise Linux 6 | ruby-ri | 0:1.8.7.352-13.el6 |
| Red Hat Enterprise Linux 6 | ruby-static | 0:1.8.7.352-13.el6 |
| Red Hat Enterprise Linux 6 | ruby-tcltk | 0:1.8.7.352-13.el6 |
| Red Hat openstack 3 | ruby193-ruby | 0:1.9.3.448-40.1.el6 |
| Red Hat openstack 3 | ruby193-ruby-debuginfo | 0:1.9.3.448-40.1.el6 |
| Red Hat openstack 3 | ruby193-ruby-devel | 0:1.9.3.448-40.1.el6 |
| Red Hat openstack 3 | ruby193-ruby-doc | 0:1.9.3.448-40.1.el6 |
| Red Hat openstack 3 | ruby193-ruby-irb | 0:1.9.3.448-40.1.el6 |
| Red Hat openstack 3 | ruby193-ruby-libs | 0:1.9.3.448-40.1.el6 |
| Red Hat openstack 3 | ruby193-ruby-tcltk | 0:1.9.3.448-40.1.el6 |
| Red Hat openstack 3 | ruby193-rubygem-bigdecimal | 0:1.1.0-40.1.el6 |
| Red Hat openstack 3 | ruby193-rubygem-io-console | 0:0.3-40.1.el6 |
| Red Hat openstack 3 | ruby193-rubygem-json | 0:1.5.5-40.1.el6 |
| Red Hat openstack 3 | ruby193-rubygem-minitest | 0:2.5.1-40.1.el6 |
| Red Hat openstack 3 | ruby193-rubygem-rake | 0:0.9.2.2-40.1.el6 |
| Red Hat rhel eus 6.2 | ruby | 0:1.8.7.352-13.el6_2 |
| Red Hat rhel eus 6.2 | ruby-debuginfo | 0:1.8.7.352-13.el6_2 |
| Red Hat rhel eus 6.2 | ruby-devel | 0:1.8.7.352-13.el6_2 |
| Red Hat rhel eus 6.2 | ruby-docs | 0:1.8.7.352-13.el6_2 |
| Red Hat rhel eus 6.2 | ruby-irb | 0:1.8.7.352-13.el6_2 |
| Red Hat rhel eus 6.2 | ruby-libs | 0:1.8.7.352-13.el6_2 |
| Red Hat rhel eus 6.2 | ruby-rdoc | 0:1.8.7.352-13.el6_2 |
| Red Hat rhel eus 6.2 | ruby-ri | 0:1.8.7.352-13.el6_2 |
| Red Hat rhel eus 6.2 | ruby-static | 0:1.8.7.352-13.el6_2 |
| Red Hat rhel eus 6.2 | ruby-tcltk | 0:1.8.7.352-13.el6_2 |
| Red Hat rhel eus 6.3 | ruby | 0:1.8.7.352-13.el6_3 |
| Red Hat rhel eus 6.3 | ruby-debuginfo | 0:1.8.7.352-13.el6_3 |
| Red Hat rhel eus 6.3 | ruby-devel | 0:1.8.7.352-13.el6_3 |
| Red Hat rhel eus 6.3 | ruby-docs | 0:1.8.7.352-13.el6_3 |
| Red Hat rhel eus 6.3 | ruby-irb | 0:1.8.7.352-13.el6_3 |
| Red Hat rhel eus 6.3 | ruby-libs | 0:1.8.7.352-13.el6_3 |
| Red Hat rhel eus 6.3 | ruby-rdoc | 0:1.8.7.352-13.el6_3 |
| Red Hat rhel eus 6.3 | ruby-ri | 0:1.8.7.352-13.el6_3 |
| Red Hat rhel eus 6.3 | ruby-static | 0:1.8.7.352-13.el6_3 |
| Red Hat rhel eus 6.3 | ruby-tcltk | 0:1.8.7.352-13.el6_3 |
| Red Hat rhel eus 6.4 | ruby | 0:1.8.7.352-13.el6_4 |
| Red Hat rhel eus 6.4 | ruby-debuginfo | 0:1.8.7.352-13.el6_4 |
| Red Hat rhel eus 6.4 | ruby-devel | 0:1.8.7.352-13.el6_4 |
| Red Hat rhel eus 6.4 | ruby-docs | 0:1.8.7.352-13.el6_4 |
| Red Hat rhel eus 6.4 | ruby-irb | 0:1.8.7.352-13.el6_4 |
| Red Hat rhel eus 6.4 | ruby-libs | 0:1.8.7.352-13.el6_4 |
| Red Hat rhel eus 6.4 | ruby-rdoc | 0:1.8.7.352-13.el6_4 |
| Red Hat rhel eus 6.4 | ruby-ri | 0:1.8.7.352-13.el6_4 |
| Red Hat rhel eus 6.4 | ruby-static | 0:1.8.7.352-13.el6_4 |
| Red Hat rhel eus 6.4 | ruby-tcltk | 0:1.8.7.352-13.el6_4 |
| Red Hat rhel software collections 1 | ruby193-ruby | 0:1.9.3.448-40.1.el6 |
| Red Hat rhel software collections 1 | ruby193-ruby-debuginfo | 0:1.9.3.448-40.1.el6 |
| Red Hat rhel software collections 1 | ruby193-ruby-devel | 0:1.9.3.448-40.1.el6 |
| Red Hat rhel software collections 1 | ruby193-ruby-doc | 0:1.9.3.448-40.1.el6 |
| Red Hat rhel software collections 1 | ruby193-ruby-irb | 0:1.9.3.448-40.1.el6 |
| Red Hat rhel software collections 1 | ruby193-ruby-libs | 0:1.9.3.448-40.1.el6 |
| Red Hat rhel software collections 1 | ruby193-ruby-tcltk | 0:1.9.3.448-40.1.el6 |
| Red Hat rhel software collections 1 | ruby193-rubygem-bigdecimal | 0:1.1.0-40.1.el6 |
| Red Hat rhel software collections 1 | ruby193-rubygem-io-console | 0:0.3-40.1.el6 |
| Red Hat rhel software collections 1 | ruby193-rubygem-json | 0:1.5.5-40.1.el6 |
| Red Hat rhel software collections 1 | ruby193-rubygem-minitest | 0:2.5.1-40.1.el6 |
| Red Hat rhel software collections 1 | ruby193-rubygem-rake | 0:0.9.2.2-40.1.el6 |
| Red Hat rhel software collections 1 | ruby193-rubygem-rdoc | 0:3.9.5-40.1.el6 |
| Red Hat rhel software collections 1 | ruby193-rubygems | 0:1.8.23-40.1.el6 |
| Red Hat rhel software collections 1 | ruby193-rubygems-devel | 0:1.8.23-40.1.el6 |
| Ubuntu 14.04 LTS | ruby1.9.1 | 1.9.3.448-1ubuntu2 |
| Ubuntu 14.04 LTS | ruby2.0 | 2.0.0.343-1ubuntu1 |