NVD

Id
32832  
Name
CVE-2014-4975  
Description
Off-by-one error in the encodes function in pack.c in Ruby 1.9.3 and earlier, and 2.x through 2.1.2, when using certain format string specifiers, allows context-dependent attackers to cause a denial of service (segmentation fault) via vectors that trigger a stack-based buffer overflow.  
Reject
 
CVSS Version
2  
CVSS Score
5  
Severity
Medium  
CVSS Base Score
5  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:N/A:N)  
Pub Date
2017-01-19  
Published
2014-11-15  
Modified Date
2016-12-12  
Seq
2014-4975  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
172461 32832 CVE-2014-4975 http://advisories.mageia.org/MGASA-2014-0472.html  View
172462 32832 CVE-2014-4975 RHSA-2014:1912  View
172463 32832 CVE-2014-4975 RHSA-2014:1913  View
172464 32832 CVE-2014-4975 RHSA-2014:1914  View
172465 32832 CVE-2014-4975 http://svn.ruby-lang.org/cgi-bin/viewvc.cgi?view=revision&revision=46778  View
172466 32832 CVE-2014-4975 DSA-3157  View
172467 32832 CVE-2014-4975 MDVSA-2015:129  View
172468 32832 CVE-2014-4975 [oss-security] 20140709 Fwd: [ruby-core:63604] [ruby-trunk - Bug #10019] [Open] segmentation fault/buffer overrun in pack.c (encodes)  View
172469 32832 CVE-2014-4975 http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html  View
172470 32832 CVE-2014-4975 68474  View
172471 32832 CVE-2014-4975 USN-2397-1  View
172472 32832 CVE-2014-4975 ruby-cve20144975-bo(94706)  View
172473 32832 CVE-2014-4975 https://bugs.ruby-lang.org/issues/10019  View
172474 32832 CVE-2014-4975 https://bugzilla.redhat.com/show_bug.cgi?id=1118158  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
16590 JVNDB-2014-005465 Ruby の pack.c のエンコード関数におけるサービス運用妨害 (DoS) の脆弱性 Ruby の pack.c のエンコード関数には、特定のフォーマットストリング指定子を使用する場合、一つずれエラー (Off-by-One error) により、サービス運用妨害 (セグメンテーション違反) 状態にされる脆弱性が存在します。 CVE-2014-4975 72264 CVE-2014-4975 32832 5 http://jvndb.jvn.jp/ja/contents/2014/JVNDB-2014-005465.html 2014-07-11 2015-06-08 View