NVD

Id
39819  
Name
CVE-2013-4164  
Description
Heap-based buffer overflow in Ruby 1.8, 1.9 before 1.9.3-p484, 2.0 before 2.0.0-p353, 2.1 before 2.1.0 preview2, and trunk before revision 43780 allows context-dependent attackers to cause a denial of service (segmentation fault) and possibly execute arbitrary code via a string that is converted to a floating point value, as demonstrated using (1) the to_f method or (2) JSON.parse.  
Reject
 
CVSS Version
2  
CVSS Score
6.8  
Severity
Medium  
CVSS Base Score
6.8  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-18  
Published
2013-11-23  
Modified Date
2016-12-30  
Seq
2013-4164  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
202572 39819 CVE-2013-4164 APPLE-SA-2014-04-22-1  View
202573 39819 CVE-2013-4164 APPLE-SA-2014-10-16-3  View
202574 39819 CVE-2013-4164 openSUSE-SU-2013:1834  View
202575 39819 CVE-2013-4164 openSUSE-SU-2013:1835  View
202576 39819 CVE-2013-4164 RHSA-2013:1763  View
202577 39819 CVE-2013-4164 RHSA-2013:1764  View
202578 39819 CVE-2013-4164 RHSA-2013:1767  View
202579 39819 CVE-2013-4164 RHSA-2014:0011  View
202580 39819 CVE-2013-4164 RHSA-2014:0215  View
202581 39819 CVE-2013-4164 DSA-2809  View
202582 39819 CVE-2013-4164 DSA-2810  View
202583 39819 CVE-2013-4164 63873  View
202584 39819 CVE-2013-4164 https://support.apple.com/kb/HT6536  View
202585 39819 CVE-2013-4164 https://www.ruby-lang.org/en/news/2013/11/22/heap-overflow-in-floating-point-parsing-cve-2013-4164  View
202586 39819 CVE-2013-4164 https://www.ruby-lang.org/en/news/2013/11/22/ruby-1-9-3-p484-is-released  View
202587 39819 CVE-2013-4164 https://www.ruby-lang.org/en/news/2013/11/22/ruby-2-0-0-p353-is-released  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
23682 JVNDB-2013-005257 Ruby におけるヒープベースのバッファオーバーフローの脆弱性 Ruby には、ヒープベースのバッファオーバーフローの脆弱性が存在します。 CVE-2013-4164 64106 CVE-2013-4164 39819 6.8 http://jvndb.jvn.jp/ja/contents/2013/JVNDB-2013-005257.html 2013-11-22 2015-08-10 View