ruby: memory corruption in BigDecimal on 64bit platforms
Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).
| Vendor | Product | Default status | Versions | ||||||
|---|---|---|---|---|---|---|---|---|---|
| n/a | n/a | affected |
|
Configuration 1 [-]
| AND |
|
| Package | CPE | Advisory | Released Date |
|---|---|---|---|
| Red Hat Enterprise Linux 4 | |||
| ruby-0:1.8.1-16.el4 | cpe:/o:redhat:enterprise_linux:4 | RHSA-2011:0908 | 2011-06-28T00:00:00Z |
| Red Hat Enterprise Linux 5 | |||
| ruby-0:1.8.5-19.el5_6.1 | cpe:/o:redhat:enterprise_linux:5 | RHSA-2011:0909 | 2011-06-28T00:00:00Z |
| Red Hat Enterprise Linux 6 | |||
| ruby-0:1.8.7.299-7.el6_1.1 | cpe:/o:redhat:enterprise_linux:6 | RHSA-2011:0910 | 2011-06-28T00:00:00Z |
No data available yet.
| Source | ID | Title |
|---|---|---|
Debian DLA |
DLA-88-1 | ruby1.8 security update |
Debian DLA |
DLA-235-1 | ruby1.9.1 security update |
EUVD |
EUVD-2011-0214 | The VpMemAlloc function in bigdecimal.c in the BigDecimal class in Ruby 1.9.2-p136 and earlier, as used on Apple Mac OS X before 10.6.7 and other platforms, does not properly allocate memory, which allows context-dependent attackers to execute arbitrary code or cause a denial of service (application crash) via vectors involving creation of a large BigDecimal value within a 64-bit process, related to an "integer truncation issue." |
Ubuntu USN |
USN-1377-1 | Ruby vulnerabilities |
No CVSS v4.0
No CVSS v3.1
No CVSS v3.0
This CVE is not in the KEV list.
Exploit prediction score: 3.0% (3.025% probability within 30 days)
Key SSVC decision points have not yet been added.
No history.