Homepage
About Snyk

Out-of-bounds Write Affecting ruby2.3 package, versions <2.3.0-1

0.0
critical

Snyk CVSS

    Attack Complexity Low
    Confidentiality High
    Integrity High
    Availability High

    Threat Intelligence

    EPSS 0.86% (83rd percentile)
Expand this section
NVD
9.8 critical
Expand this section
Red Hat
9.8 critical

Do your applications use this vulnerable package?

In a few clicks we can analyze your entire application and see what components are vulnerable in your application, and suggest you quick fixes.

Test your applications
  • Snyk ID SNYK-DEBIAN9-RUBY23-561037
  • published 24 Mar 2020
  • disclosed 29 Sep 2022
Report a new vulnerability Found a mistake?

Introduced: 24 Mar 2020

CVE-2016-2338 Open this link in a new tab
CWE-787 Open this link in a new tab

How to fix?

Upgrade Debian:9 ruby2.3 to version 2.3.0-1 or higher.

NVD Description

Note: Versions mentioned in the description apply only to the upstream ruby2.3 package and not the ruby2.3 package as distributed by Debian. See How to fix? for Debian:9 relevant fixed versions and status.

An exploitable heap overflow vulnerability exists in the Psych::Emitter start_document function of Ruby. In Psych::Emitter start_document function heap buffer "head" allocation is made based on tags array length. Specially constructed object passed as element of tags array can increase this array size after mentioned allocation and cause heap overflow.