CVE-2013-4164

Published: Nov 23, 2013Modified: Apr 29, 2026

6.8

Vector

AV:N/AC:M/Au:N/C:P/I:P/A:P

Exploitability: 8.6 / Impact: 6.4

Source: NVD

Description

Heap-based buffer overflow in Ruby 1.8, 1.9 before 1.9.3-p484, 2.0 before 2.0.0-p353, 2.1 before 2.1.0 preview2, and trunk before revision 43780 allows context-dependent attackers to cause a denial of service (segmentation fault) and possibly execute arbitrary code via a string that is converted to a floating point value, as demonstrated using (1) the to_f method or (2) JSON.parse.

Affected (7)

Products: Ruby Lang: Ruby

1 product

Configuration A

7 vulnerable

Vulnerable Software	Affected Versions
Ruby Lang Ruby	Version 1.8
Ruby Lang Ruby	Version 1.9.1
Ruby Lang Ruby	Version 1.9.2
Ruby Lang Ruby	Version 1.9.3
Ruby Lang Ruby	Version 1.9
Ruby Lang Ruby	Version 2.0.0
Ruby Lang Ruby	Version 2.1 preview1

Related CWEs

Improper Restriction of Operations within the Bounds of a Memory Buffer

The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.

References (44)

http://archives.neohapsis.com/archives/bugtraq/2014-04/0134.html

Source: secalert@redhat.com

http://archives.neohapsis.com/archives/bugtraq/2014-10/0103.html

Source: secalert@redhat.com

http://lists.opensuse.org/opensuse-security-announce/2013-12/msg00009.html

Source: secalert@redhat.com

http://lists.opensuse.org/opensuse-updates/2013-12/msg00027.html

Source: secalert@redhat.com

http://lists.opensuse.org/opensuse-updates/2013-12/msg00028.html

Source: secalert@redhat.com

http://osvdb.org/100113

Source: secalert@redhat.com

http://rhn.redhat.com/errata/RHSA-2013-1763.html

Source: secalert@redhat.com

http://rhn.redhat.com/errata/RHSA-2013-1764.html

Source: secalert@redhat.com

http://rhn.redhat.com/errata/RHSA-2013-1767.html

Source: secalert@redhat.com

http://rhn.redhat.com/errata/RHSA-2014-0011.html

Source: secalert@redhat.com

http://rhn.redhat.com/errata/RHSA-2014-0215.html

Source: secalert@redhat.com

http://secunia.com/advisories/55787

Source: secalert@redhat.com

Vendor Advisory

http://secunia.com/advisories/57376

Source: secalert@redhat.com

http://www.debian.org/security/2013/dsa-2809

Source: secalert@redhat.com

http://www.debian.org/security/2013/dsa-2810

Source: secalert@redhat.com

http://www.securityfocus.com/bid/63873

Source: secalert@redhat.com

http://www.ubuntu.com/usn/USN-2035-1

Source: secalert@redhat.com

https://puppet.com/security/cve/cve-2013-4164

Source: secalert@redhat.com

https://support.apple.com/kb/HT6536

Source: secalert@redhat.com

https://www.ruby-lang.org/en/news/2013/11/22/heap-overflow-in-floating-point-parsing-cve-2013-4164

Source: secalert@redhat.com

Exploit

https://www.ruby-lang.org/en/news/2013/11/22/ruby-1-9-3-p484-is-released

Source: secalert@redhat.com

https://www.ruby-lang.org/en/news/2013/11/22/ruby-2-0-0-p353-is-released

Source: secalert@redhat.com

Patch

http://archives.neohapsis.com/archives/bugtraq/2014-04/0134.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://archives.neohapsis.com/archives/bugtraq/2014-10/0103.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://lists.opensuse.org/opensuse-security-announce/2013-12/msg00009.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://lists.opensuse.org/opensuse-updates/2013-12/msg00027.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://lists.opensuse.org/opensuse-updates/2013-12/msg00028.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://osvdb.org/100113

Source: af854a3a-2127-422b-91ae-364da2661108

http://rhn.redhat.com/errata/RHSA-2013-1763.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://rhn.redhat.com/errata/RHSA-2013-1764.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://rhn.redhat.com/errata/RHSA-2013-1767.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://rhn.redhat.com/errata/RHSA-2014-0011.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://rhn.redhat.com/errata/RHSA-2014-0215.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/55787

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

http://secunia.com/advisories/57376

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.debian.org/security/2013/dsa-2809

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.debian.org/security/2013/dsa-2810

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securityfocus.com/bid/63873

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.ubuntu.com/usn/USN-2035-1

Source: af854a3a-2127-422b-91ae-364da2661108

https://puppet.com/security/cve/cve-2013-4164

Source: af854a3a-2127-422b-91ae-364da2661108

https://support.apple.com/kb/HT6536

Source: af854a3a-2127-422b-91ae-364da2661108

https://www.ruby-lang.org/en/news/2013/11/22/heap-overflow-in-floating-point-parsing-cve-2013-4164

Source: af854a3a-2127-422b-91ae-364da2661108

Exploit

https://www.ruby-lang.org/en/news/2013/11/22/ruby-1-9-3-p484-is-released

Source: af854a3a-2127-422b-91ae-364da2661108

https://www.ruby-lang.org/en/news/2013/11/22/ruby-2-0-0-p353-is-released

Source: af854a3a-2127-422b-91ae-364da2661108

Patch

Timeline

No history available yet.