7.8

CVE-2008-2664

The rb_str_format function in Ruby 1.8.4 and earlier, 1.8.5 before 1.8.5-p231, 1.8.6 before 1.8.6-p230, 1.8.7 before 1.8.7-p22, and 1.9.0 before 1.9.0-2 allows context-dependent attackers to trigger memory corruption via unspecified vectors related to alloca, a different issue than CVE-2008-2662, CVE-2008-2663, and CVE-2008-2725.  NOTE: as of 20080624, there has been inconsistent usage of multiple CVE identifiers related to Ruby. The CVE description should be regarded as authoritative, although it is likely to change.

Data is provided by the National Vulnerability Database (NVD)
Ruby-lang ≫ Ruby Version <= 1.8.4
Ruby-lang ≫ Ruby Version > 1.8.5 < 1.8.5.231
Ruby-lang ≫ Ruby Version >= 1.8.6 < 1.8.6.230
Ruby-lang ≫ Ruby Version >= 1.8.7 < 1.8.7.22
Ruby-lang ≫ Ruby Version >= 1.9.0 < 1.9.0.2
Debian ≫ Debian Linux Version4.0
Canonical ≫ Ubuntu Linux Version6.06 SwEditionlts
Canonical ≫ Ubuntu Linux Version7.04
Canonical ≫ Ubuntu Linux Version7.10
Canonical ≫ Ubuntu Linux Version8.04 SwEditionlts
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Type Source Score Percentile
EPSS FIRST.org 4.02% 0.88
CVSS Metriken
Source Base Score Exploit Score Impact Score Vector string
nvd@nist.gov 7.8 10 6.9
AV:N/AC:L/Au:N/C:N/I:N/A:C
http://www.securityfocus.com/bid/29903
Third Party Advisory
VDB Entry
http://www.securitytracker.com/id?1020347
Third Party Advisory
VDB Entry