Most recent entries from all

Withdrawn: BELL-CVE-2008-2376 — CVE-2008-2376 does not affect BellSoft software

2026-10-03T14:50:02.793247+00:00

Withdrawn by the publisher.

certa-2008-avi-364 — Une vulnérabilité d'une fonction du langage Ruby permet à une personne distante malintentionnée de réaliser un déni de…

2026-10-03T14:50:02.793286+00:00

certa-2008-avi-364

EUVD-2026-127583

2026-10-03T14:50:02.793304+00:00

EUVD-2026-127583

fkie_cve-2008-2376

2026-10-03T14:50:02.793316+00:00

Integer overflow in the rb_ary_fill function in array.c in Ruby before revision 17756 allows context-dependent attackers to cause a denial of service (crash) or possibly have unspecified other impact via a call to the Array#fill method with a start (aka beg) argument greater than ARY_MAX_SIZE. NOTE: this issue exists because of an incomplete fix for other closely related integer overflows.

GHSA-f7wf-fwmg-r7g3

2026-10-03T14:50:02.793342+00:00

gsd-2008-2376

2026-10-03T14:50:02.793358+00:00

gsd-2008-2376

RHSA-2008:0561 — Red Hat Security Advisory: ruby security update

2026-10-03T14:50:02.793369+00:00

ruby: integer overflows in rb_ary_fill() / Array#fill ruby: Integer overflows in rb_str_buf_append() ruby: Integer overflows in rb_ary_store() ruby: Unsafe use of alloca in rb_str_format() ruby: integer overflow in rb_ary_splice/update/replace() - REALLOC_N ruby: integer overflow in rb_ary_splice/update/replace() - beg + rlen