Django REST framework

Vulnerability Instance

Lookup for vulnerabilities affecting packages.

Vulnerability_idVCID-5bte-uex2-f7du
Summary
Multiple vulnerabilities have been discovered in Ruby that allow for
    attacks including arbitrary code execution and Denial of Service.
Aliases
0
alias CVE-2008-2664
1
alias GHSA-c4h6-p7gp-39x2
2
alias OSV-46552
Fixed_packages
0
url pkg:ebuild/dev-lang/ruby@1.8.6_p287-r1
purl pkg:ebuild/dev-lang/ruby@1.8.6_p287-r1
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:ebuild/dev-lang/ruby@1.8.6_p287-r1
Affected_packages
0
url pkg:rpm/redhat/ruby@1.6.4-6?arch=el2
purl pkg:rpm/redhat/ruby@1.6.4-6?arch=el2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-5bte-uex2-f7du
1
vulnerability VCID-9gp6-pvw1-ufhs
2
vulnerability VCID-c9sy-czbr-tfer
3
vulnerability VCID-kfgm-et3n-ckg6
4
vulnerability VCID-mzqm-gc4w-fbfp
5
vulnerability VCID-nsa4-b31c-37g2
resource_url http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/ruby@1.6.4-6%3Farch=el2
1
url pkg:rpm/redhat/ruby@1.6.8-12?arch=el3
purl pkg:rpm/redhat/ruby@1.6.8-12?arch=el3
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-5bte-uex2-f7du
1
vulnerability VCID-9gp6-pvw1-ufhs
2
vulnerability VCID-c9sy-czbr-tfer
3
vulnerability VCID-kfgm-et3n-ckg6
4
vulnerability VCID-mzqm-gc4w-fbfp
5
vulnerability VCID-nsa4-b31c-37g2
resource_url http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/ruby@1.6.8-12%3Farch=el3
2
url pkg:rpm/redhat/ruby@1.8.1-7.el4_6?arch=1
purl pkg:rpm/redhat/ruby@1.8.1-7.el4_6?arch=1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-5bte-uex2-f7du
1
vulnerability VCID-9gp6-pvw1-ufhs
2
vulnerability VCID-c9sy-czbr-tfer
3
vulnerability VCID-jx79-wpg7-2yaa
4
vulnerability VCID-mzqm-gc4w-fbfp
5
vulnerability VCID-nsa4-b31c-37g2
resource_url http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/ruby@1.8.1-7.el4_6%3Farch=1
3
url pkg:rpm/redhat/ruby@1.8.5-5.el5_2?arch=3
purl pkg:rpm/redhat/ruby@1.8.5-5.el5_2?arch=3
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-5bte-uex2-f7du
1
vulnerability VCID-9gp6-pvw1-ufhs
2
vulnerability VCID-c9sy-czbr-tfer
3
vulnerability VCID-jx79-wpg7-2yaa
4
vulnerability VCID-mzqm-gc4w-fbfp
5
vulnerability VCID-nsa4-b31c-37g2
resource_url http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/ruby@1.8.5-5.el5_2%3Farch=3
4
url pkg:ruby/ruby@1.8.6
purl pkg:ruby/ruby@1.8.6
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-5bte-uex2-f7du
1
vulnerability VCID-8e2m-f1fg-ffdy
2
vulnerability VCID-9gp6-pvw1-ufhs
3
vulnerability VCID-c9sy-czbr-tfer
4
vulnerability VCID-ea13-mua4-1fb9
5
vulnerability VCID-jx79-wpg7-2yaa
6
vulnerability VCID-mzqm-gc4w-fbfp
resource_url http://public2.vulnerablecode.io/packages/pkg:ruby/ruby@1.8.6
5
url pkg:ruby/ruby@1.8.7
purl pkg:ruby/ruby@1.8.7
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-4yvc-uzev-wua4
1
vulnerability VCID-5bte-uex2-f7du
2
vulnerability VCID-8fbf-8fea-27d9
3
vulnerability VCID-94vg-kqhg-qfdv
4
vulnerability VCID-9gp6-pvw1-ufhs
5
vulnerability VCID-9ukz-9357-aqb6
6
vulnerability VCID-a15m-bcma-vfa7
7
vulnerability VCID-bv9s-j5yk-m3aw
8
vulnerability VCID-c9sy-czbr-tfer
9
vulnerability VCID-ea13-mua4-1fb9
10
vulnerability VCID-fw7k-88kf-1kgg
11
vulnerability VCID-jx79-wpg7-2yaa
12
vulnerability VCID-mzqm-gc4w-fbfp
13
vulnerability VCID-nsa4-b31c-37g2
14
vulnerability VCID-pegr-f5mh-ekdz
15
vulnerability VCID-qjwb-ph9u-bubf
16
vulnerability VCID-xtny-ychb-fff1
17
vulnerability VCID-ynyp-ybd9-57df
resource_url http://public2.vulnerablecode.io/packages/pkg:ruby/ruby@1.8.7
6
url pkg:ruby/ruby@1.8.8
purl pkg:ruby/ruby@1.8.8
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-2ww6-w1k6-xqbp
1
vulnerability VCID-4yvc-uzev-wua4
2
vulnerability VCID-5bte-uex2-f7du
3
vulnerability VCID-8fbf-8fea-27d9
4
vulnerability VCID-9gp6-pvw1-ufhs
5
vulnerability VCID-9ukz-9357-aqb6
6
vulnerability VCID-a15m-bcma-vfa7
7
vulnerability VCID-ar57-vndq-yka6
8
vulnerability VCID-bjts-v9q2-9yg8
9
vulnerability VCID-bv9s-j5yk-m3aw
10
vulnerability VCID-c9sy-czbr-tfer
11
vulnerability VCID-ea13-mua4-1fb9
12
vulnerability VCID-fw7k-88kf-1kgg
13
vulnerability VCID-jx79-wpg7-2yaa
14
vulnerability VCID-mzqm-gc4w-fbfp
15
vulnerability VCID-nsa4-b31c-37g2
16
vulnerability VCID-nxub-6qsu-hbhk
17
vulnerability VCID-pegr-f5mh-ekdz
18
vulnerability VCID-qjwb-ph9u-bubf
19
vulnerability VCID-r8r3-3x8p-ebh5
20
vulnerability VCID-rh8q-s45v-xbhg
21
vulnerability VCID-weh8-bs3g-a3hp
22
vulnerability VCID-xtny-ychb-fff1
resource_url http://public2.vulnerablecode.io/packages/pkg:ruby/ruby@1.8.8
References
0
reference_url http://blog.phusion.nl/2008/06/23/ruby-186-p230187-broke-your-app-ruby-enterprise-edition-to-the-rescue/
reference_id
reference_type
scores
url http://blog.phusion.nl/2008/06/23/ruby-186-p230187-broke-your-app-ruby-enterprise-edition-to-the-rescue/
1
reference_url http://lists.apple.com/archives/security-announce/2008//Jun/msg00002.html
reference_id
reference_type
scores
url http://lists.apple.com/archives/security-announce/2008//Jun/msg00002.html
2
reference_url http://lists.opensuse.org/opensuse-security-announce/2008-08/msg00006.html
reference_id
reference_type
scores
url http://lists.opensuse.org/opensuse-security-announce/2008-08/msg00006.html
3
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2008-2664.json
reference_id
reference_type
scores
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2008-2664.json
4
reference_url https://api.first.org/data/v1/epss?cve=CVE-2008-2664
reference_id
reference_type
scores
0
value 0.06265
scoring_system epss
scoring_elements 0.90945
published_at 2026-04-18T12:55:00Z
1
value 0.06265
scoring_system epss
scoring_elements 0.90872
published_at 2026-04-01T12:55:00Z
2
value 0.06265
scoring_system epss
scoring_elements 0.90877
published_at 2026-04-02T12:55:00Z
3
value 0.06265
scoring_system epss
scoring_elements 0.90887
published_at 2026-04-04T12:55:00Z
4
value 0.06265
scoring_system epss
scoring_elements 0.90897
published_at 2026-04-07T12:55:00Z
5
value 0.06265
scoring_system epss
scoring_elements 0.90908
published_at 2026-04-08T12:55:00Z
6
value 0.06265
scoring_system epss
scoring_elements 0.90915
published_at 2026-04-09T12:55:00Z
7
value 0.06265
scoring_system epss
scoring_elements 0.90924
published_at 2026-04-12T12:55:00Z
8
value 0.06265
scoring_system epss
scoring_elements 0.90922
published_at 2026-04-13T12:55:00Z
9
value 0.06265
scoring_system epss
scoring_elements 0.90947
published_at 2026-04-16T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2008-2664
5
reference_url http://secunia.com/advisories/30802
reference_id
reference_type
scores
url http://secunia.com/advisories/30802
6
reference_url http://secunia.com/advisories/30831
reference_id
reference_type
scores
url http://secunia.com/advisories/30831
7
reference_url http://secunia.com/advisories/30867
reference_id
reference_type
scores
url http://secunia.com/advisories/30867
8
reference_url http://secunia.com/advisories/30875
reference_id
reference_type
scores
url http://secunia.com/advisories/30875
9
reference_url http://secunia.com/advisories/30894
reference_id
reference_type
scores
url http://secunia.com/advisories/30894
10
reference_url http://secunia.com/advisories/31062
reference_id
reference_type
scores
url http://secunia.com/advisories/31062
11
reference_url http://secunia.com/advisories/31090
reference_id
reference_type
scores
url http://secunia.com/advisories/31090
12
reference_url http://secunia.com/advisories/31181
reference_id
reference_type
scores
url http://secunia.com/advisories/31181
13
reference_url http://secunia.com/advisories/31256
reference_id
reference_type
scores
url http://secunia.com/advisories/31256
14
reference_url http://secunia.com/advisories/31687
reference_id
reference_type
scores
url http://secunia.com/advisories/31687
15
reference_url http://secunia.com/advisories/33178
reference_id
reference_type
scores
url http://secunia.com/advisories/33178
16
reference_url http://security.gentoo.org/glsa/glsa-200812-17.xml
reference_id
reference_type
scores
url http://security.gentoo.org/glsa/glsa-200812-17.xml
17
reference_url https://exchange.xforce.ibmcloud.com/vulnerabilities/43348
reference_id
reference_type
scores
url https://exchange.xforce.ibmcloud.com/vulnerabilities/43348
18
reference_url https://issues.rpath.com/browse/RPL-2626
reference_id
reference_type
scores
url https://issues.rpath.com/browse/RPL-2626
19
reference_url http://slackware.com/security/viewer.php?l=slackware-security&y=2008&m=slackware-security.429562
reference_id
reference_type
scores
url http://slackware.com/security/viewer.php?l=slackware-security&y=2008&m=slackware-security.429562
20
reference_url https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9646
reference_id
reference_type
scores
url https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9646
21
reference_url http://support.apple.com/kb/HT2163
reference_id
reference_type
scores
url http://support.apple.com/kb/HT2163
22
reference_url https://www.redhat.com/archives/fedora-package-announce/2008-June/msg00937.html
reference_id
reference_type
scores
url https://www.redhat.com/archives/fedora-package-announce/2008-June/msg00937.html
23
reference_url https://www.ruby-lang.org/en/news/2008/06/20/arbitrary-code-execution-vulnerabilities
reference_id
reference_type
scores
url https://www.ruby-lang.org/en/news/2008/06/20/arbitrary-code-execution-vulnerabilities
24
reference_url http://weblog.rubyonrails.org/2008/6/21/multiple-ruby-security-vulnerabilities
reference_id
reference_type
scores
url http://weblog.rubyonrails.org/2008/6/21/multiple-ruby-security-vulnerabilities
25
reference_url http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0206
reference_id
reference_type
scores
url http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0206
26
reference_url http://www.debian.org/security/2008/dsa-1612
reference_id
reference_type
scores
url http://www.debian.org/security/2008/dsa-1612
27
reference_url http://www.debian.org/security/2008/dsa-1618
reference_id
reference_type
scores
url http://www.debian.org/security/2008/dsa-1618
28
reference_url http://www.mandriva.com/security/advisories?name=MDVSA-2008:140
reference_id
reference_type
scores
url http://www.mandriva.com/security/advisories?name=MDVSA-2008:140
29
reference_url http://www.mandriva.com/security/advisories?name=MDVSA-2008:141
reference_id
reference_type
scores
url http://www.mandriva.com/security/advisories?name=MDVSA-2008:141
30
reference_url http://www.mandriva.com/security/advisories?name=MDVSA-2008:142
reference_id
reference_type
scores
url http://www.mandriva.com/security/advisories?name=MDVSA-2008:142
31
reference_url http://www.matasano.com/log/1070/updates-on-drew-yaos-terrible-ruby-vulnerabilities/
reference_id
reference_type
scores
url http://www.matasano.com/log/1070/updates-on-drew-yaos-terrible-ruby-vulnerabilities/
32
reference_url http://www.redhat.com/support/errata/RHSA-2008-0561.html
reference_id
reference_type
scores
url http://www.redhat.com/support/errata/RHSA-2008-0561.html
33
reference_url http://www.ruby-forum.com/topic/157034
reference_id
reference_type
scores
url http://www.ruby-forum.com/topic/157034
34
reference_url http://www.rubyinside.com/june-2008-ruby-security-vulnerabilities-927.html
reference_id
reference_type
scores
url http://www.rubyinside.com/june-2008-ruby-security-vulnerabilities-927.html
35
reference_url http://www.ruby-lang.org/en/news/2008/06/20/arbitrary-code-execution-vulnerabilities/
reference_id
reference_type
scores
url http://www.ruby-lang.org/en/news/2008/06/20/arbitrary-code-execution-vulnerabilities/
36
reference_url http://www.securityfocus.com/archive/1/493688/100/0/threaded
reference_id
reference_type
scores
url http://www.securityfocus.com/archive/1/493688/100/0/threaded
37
reference_url http://www.securityfocus.com/bid/29903
reference_id
reference_type
scores
url http://www.securityfocus.com/bid/29903
38
reference_url http://www.securitytracker.com/id?1020347
reference_id
reference_type
scores
url http://www.securitytracker.com/id?1020347
39
reference_url http://www.ubuntu.com/usn/usn-621-1
reference_id
reference_type
scores
url http://www.ubuntu.com/usn/usn-621-1
40
reference_url http://www.vupen.com/english/advisories/2008/1907/references
reference_id
reference_type
scores
url http://www.vupen.com/english/advisories/2008/1907/references
41
reference_url http://www.vupen.com/english/advisories/2008/1981/references
reference_id
reference_type
scores
url http://www.vupen.com/english/advisories/2008/1981/references
42
reference_url http://www.zedshaw.com/rants/the_big_ruby_vulnerabilities.html
reference_id
reference_type
scores
url http://www.zedshaw.com/rants/the_big_ruby_vulnerabilities.html
43
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=450834
reference_id 450834
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=450834
44
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:ruby-lang:ruby:*:*:*:*:*:*:*:*
reference_id cpe:2.3:a:ruby-lang:ruby:*:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:ruby-lang:ruby:*:*:*:*:*:*:*:*
45
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:canonical:ubuntu_linux:6.06:*:*:*:lts:*:*:*
reference_id cpe:2.3:o:canonical:ubuntu_linux:6.06:*:*:*:lts:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:canonical:ubuntu_linux:6.06:*:*:*:lts:*:*:*
46
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:canonical:ubuntu_linux:7.04:*:*:*:*:*:*:*
reference_id cpe:2.3:o:canonical:ubuntu_linux:7.04:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:canonical:ubuntu_linux:7.04:*:*:*:*:*:*:*
47
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:canonical:ubuntu_linux:7.10:*:*:*:*:*:*:*
reference_id cpe:2.3:o:canonical:ubuntu_linux:7.10:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:canonical:ubuntu_linux:7.10:*:*:*:*:*:*:*
48
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:canonical:ubuntu_linux:8.04:*:*:*:lts:*:*:*
reference_id cpe:2.3:o:canonical:ubuntu_linux:8.04:*:*:*:lts:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:canonical:ubuntu_linux:8.04:*:*:*:lts:*:*:*
49
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:debian:debian_linux:4.0:*:*:*:*:*:*:*
reference_id cpe:2.3:o:debian:debian_linux:4.0:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:debian:debian_linux:4.0:*:*:*:*:*:*:*
50
reference_url https://nvd.nist.gov/vuln/detail/CVE-2008-2664
reference_id CVE-2008-2664
reference_type
scores
0
value 7.8
scoring_system cvssv2
scoring_elements AV:N/AC:L/Au:N/C:N/I:N/A:C
url https://nvd.nist.gov/vuln/detail/CVE-2008-2664
51
reference_url https://security.gentoo.org/glsa/200812-17
reference_id GLSA-200812-17
reference_type
scores
url https://security.gentoo.org/glsa/200812-17
52
reference_url https://access.redhat.com/errata/RHSA-2008:0561
reference_id RHSA-2008:0561
reference_type
scores
url https://access.redhat.com/errata/RHSA-2008:0561
53
reference_url https://access.redhat.com/errata/RHSA-2008:0562
reference_id RHSA-2008:0562
reference_type
scores
url https://access.redhat.com/errata/RHSA-2008:0562
54
reference_url https://usn.ubuntu.com/621-1/
reference_id USN-621-1
reference_type
scores
url https://usn.ubuntu.com/621-1/
Weaknesses
0
cwe_id 399
name Resource Management Errors
description Weaknesses in this category are related to improper management of system resources.
Exploits
Severity_range_score7.8 - 7.8
Exploitability0.5
Weighted_severity7.0
Risk_score3.5
Resource_urlhttp://public2.vulnerablecode.io/vulnerabilities/VCID-5bte-uex2-f7du