Get a demo
100% Signal 0% Noise Invicti Logo - The Largest Dynamic Application Security Solutions Provider In The World Get a demo
Ruby Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability - CVE-2014-4975 - Vulnerability Database
Ruby

Ruby Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability - CVE-2014-4975

Medium
Reference: CVE-2014-4975
NVD Link: https://nvd.nist.gov/vuln/detail/CVE-2014-4975
Title: Ruby Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability
Overview:

Off-by-one error in the encodes function in pack.c in Ruby 1.9.3 and earlier and 2.x through 2.1.2 when using certain format string specifiers allows context-dependent attackers to cause a denial of service (segmentation fault) via vectors that trigger a stack-based buffer overflow.