Most recent entries from all

EUVD-2026-100434

fkie_cve-2014-4975

Off-by-one error in the encodes function in pack.c in Ruby 1.9.3 and earlier, and 2.x through 2.1.2, when using certain format string specifiers, allows context-dependent attackers to cause a denial of service (segmentation fault) via vectors that trigger a stack-based buffer overflow.

GHSA-gxj7-mcpg-jpr6

gsd-2014-4975

RHSA-2014:1912 — Red Hat Security Advisory: ruby security update

ruby: off-by-one stack-based buffer overflow in the encodes() function ruby: REXML billion laughs attack via parameter entity expansion ruby: REXML incomplete fix for CVE-2014-8080

RHSA-2014:1913 — Red Hat Security Advisory: ruby193-ruby security update

ruby: off-by-one stack-based buffer overflow in the encodes() function ruby: REXML billion laughs attack via parameter entity expansion ruby: REXML incomplete fix for CVE-2014-8080

SUSE-SU-2017:1067-1 — Security update for ruby2.1

Security update for ruby2.1

UBUNTU-CVE-2014-4975

Affected: Ubuntu:14.04:LTS: ruby1.9.1, Ubuntu:14.04:LTS: ruby2.0

WID-SEC-W-2026-1417 — Ruby: Mehrere Schwachstellen

Ein Angreifer kann mehrere Schwachstellen in Ruby und Ubuntu Linux ausnutzen, um beliebigen Programmcode mit den Rechten des Dienstes auszuführen oder einen Denial of Service Angriff durchzuführen.