NetSight
IP …
medium5.0

CVE-2014-4975

Off-by-one error in the encodes function in pack.c in Ruby 1.9.3 and earlier, and 2.x through 2.1.2, when using certain format string specifiers, allows contex…

Impact

Off-by-one error in the encodes function in pack.c in Ruby 1.9.3 and earlier, and 2.x through 2.1.2, when using certain format string specifiers, allows context-dependent attackers to cause a denial of service (segmentation fault) via vectors that trigger a stack-based buffer overflow.

Affected products

VendorProductAffected versions
Ruby-LangRuby
through 1.9.3
Versions 2.0, 2.0.0, 2.1, 2.1.1, 2.1.2
RedhatEnterprise Linux Desktop
Version 7.0
RedhatEnterprise Linux Hpc Node
Version 7.0
RedhatEnterprise Linux Server
Version 7.0
RedhatEnterprise Linux Workstation
Version 7.0
DebianDebian Linux
Versions 7.0, 8.0
CanonicalUbuntu Linux
Versions 12.04, 14.04, 14.10

Weakness classification

CWE-119

References