ByteOS Network

CVE Vulnerability Details :

CVE-2008-2376

PUBLISHED

More Info Official Page

Assigner-redhat

Assigner Org ID-53f830b8-0a3f-465b-8143-3b8a9948e749

Published At-09 Jul, 2008 | 00:00

Updated At-07 Aug, 2024 | 08:58

▼CVE Numbering Authority (CNA)

Integer overflow in the rb_ary_fill function in array.c in Ruby before revision 17756 allows context-dependent attackers to cause a denial of service (crash) or possibly have unspecified other impact via a call to the Array#fill method with a start (aka beg) argument greater than ARY_MAX_SIZE. NOTE: this issue exists because of an incomplete fix for other closely related integer overflows.

Affected Products

Vendor

n/a

Product

n/a

Versions

Affected

Problem Types

Type	CWE ID	Description
text	N/A	n/a

References

Hyperlink	Resource
http://secunia.com/advisories/31090	third-party-advisory x_refsource_SECUNIA
https://usn.ubuntu.com/651-1/	vendor-advisory x_refsource_UBUNTU
http://www.mandriva.com/security/advisories?name=MDVSA-2008:141	vendor-advisory x_refsource_MANDRIVA
http://lists.apple.com/archives/security-announce//2008/Sep/msg00005.html	vendor-advisory x_refsource_APPLE
http://secunia.com/advisories/31006	third-party-advisory x_refsource_SECUNIA
https://www.redhat.com/archives/fedora-package-announce/2008-July/msg00112.html	vendor-advisory x_refsource_FEDORA
http://www.debian.org/security/2008/dsa-1618	vendor-advisory x_refsource_DEBIAN
http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0218	x_refsource_CONFIRM
http://www.us-cert.gov/cas/techalerts/TA08-260A.html	third-party-advisory x_refsource_CERT
http://www.vupen.com/english/advisories/2008/2584	vdb-entry x_refsource_VUPEN
http://secunia.com/advisories/31062	third-party-advisory x_refsource_SECUNIA
https://issues.rpath.com/browse/RPL-2639	x_refsource_CONFIRM
http://secunia.com/advisories/31256	third-party-advisory x_refsource_SECUNIA
https://www.redhat.com/archives/fedora-package-announce/2008-July/msg00161.html	vendor-advisory x_refsource_FEDORA
http://secunia.com/advisories/32219	third-party-advisory x_refsource_SECUNIA
http://www.openwall.com/lists/oss-security/2008/07/02/3	mailing-list x_refsource_MLIST
http://www.mandriva.com/security/advisories?name=MDVSA-2008:140	vendor-advisory x_refsource_MANDRIVA
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9863	vdb-entry signature x_refsource_OVAL
http://wiki.rpath.com/Advisories:rPSA-2008-0218	x_refsource_CONFIRM
http://www.redhat.com/support/errata/RHSA-2008-0561.html	vendor-advisory x_refsource_REDHAT
http://svn.ruby-lang.org/cgi-bin/viewvc.cgi?view=rev&revision=17756	x_refsource_CONFIRM
http://www.debian.org/security/2008/dsa-1612	vendor-advisory x_refsource_DEBIAN
http://security.gentoo.org/glsa/glsa-200812-17.xml	vendor-advisory x_refsource_GENTOO
http://secunia.com/advisories/33178	third-party-advisory x_refsource_SECUNIA
http://secunia.com/advisories/30927	third-party-advisory x_refsource_SECUNIA
http://www.securityfocus.com/archive/1/494104/100/0/threaded	mailing-list x_refsource_BUGTRAQ
http://www.mandriva.com/security/advisories?name=MDVSA-2008:142	vendor-advisory x_refsource_MANDRIVA
http://secunia.com/advisories/31181	third-party-advisory x_refsource_SECUNIA

▼Authorized Data Publishers (ADP)

CVE Program Container

References

Hyperlink	Resource
http://secunia.com/advisories/31090	third-party-advisory x_refsource_SECUNIA x_transferred
https://usn.ubuntu.com/651-1/	vendor-advisory x_refsource_UBUNTU x_transferred
http://www.mandriva.com/security/advisories?name=MDVSA-2008:141	vendor-advisory x_refsource_MANDRIVA x_transferred
http://lists.apple.com/archives/security-announce//2008/Sep/msg00005.html	vendor-advisory x_refsource_APPLE x_transferred
http://secunia.com/advisories/31006	third-party-advisory x_refsource_SECUNIA x_transferred
https://www.redhat.com/archives/fedora-package-announce/2008-July/msg00112.html	vendor-advisory x_refsource_FEDORA x_transferred
http://www.debian.org/security/2008/dsa-1618	vendor-advisory x_refsource_DEBIAN x_transferred
http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0218	x_refsource_CONFIRM x_transferred
http://www.us-cert.gov/cas/techalerts/TA08-260A.html	third-party-advisory x_refsource_CERT x_transferred
http://www.vupen.com/english/advisories/2008/2584	vdb-entry x_refsource_VUPEN x_transferred
http://secunia.com/advisories/31062	third-party-advisory x_refsource_SECUNIA x_transferred
https://issues.rpath.com/browse/RPL-2639	x_refsource_CONFIRM x_transferred
http://secunia.com/advisories/31256	third-party-advisory x_refsource_SECUNIA x_transferred
https://www.redhat.com/archives/fedora-package-announce/2008-July/msg00161.html	vendor-advisory x_refsource_FEDORA x_transferred
http://secunia.com/advisories/32219	third-party-advisory x_refsource_SECUNIA x_transferred
http://www.openwall.com/lists/oss-security/2008/07/02/3	mailing-list x_refsource_MLIST x_transferred
http://www.mandriva.com/security/advisories?name=MDVSA-2008:140	vendor-advisory x_refsource_MANDRIVA x_transferred
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9863	vdb-entry signature x_refsource_OVAL x_transferred
http://wiki.rpath.com/Advisories:rPSA-2008-0218	x_refsource_CONFIRM x_transferred
http://www.redhat.com/support/errata/RHSA-2008-0561.html	vendor-advisory x_refsource_REDHAT x_transferred
http://svn.ruby-lang.org/cgi-bin/viewvc.cgi?view=rev&revision=17756	x_refsource_CONFIRM x_transferred
http://www.debian.org/security/2008/dsa-1612	vendor-advisory x_refsource_DEBIAN x_transferred
http://security.gentoo.org/glsa/glsa-200812-17.xml	vendor-advisory x_refsource_GENTOO x_transferred
http://secunia.com/advisories/33178	third-party-advisory x_refsource_SECUNIA x_transferred
http://secunia.com/advisories/30927	third-party-advisory x_refsource_SECUNIA x_transferred
http://www.securityfocus.com/archive/1/494104/100/0/threaded	mailing-list x_refsource_BUGTRAQ x_transferred
http://www.mandriva.com/security/advisories?name=MDVSA-2008:142	vendor-advisory x_refsource_MANDRIVA x_transferred
http://secunia.com/advisories/31181	third-party-advisory x_refsource_SECUNIA x_transferred

Affected Products

Affected

Problem Types

Metrics

Metrics Other Info

Impacts

Solutions

Configurations

Workarounds

Exploits

Credits

Timeline

Replaced By

Rejected Reason

References

Affected Products

Metrics

Metrics Other Info

Impacts

Solutions

Configurations

Workarounds

Exploits

Credits

Timeline

Replaced By

Rejected Reason

References