Lookup for vulnerabilities affecting packages.

Vulnerability_idVCID-1bdw-9rs5-6ycg
Summaryseveral
Aliases
0
alias CVE-2013-4164
1
alias GHSA-j98q-m2w8-57rc
2
alias OSV-100113
Fixed_packages
0
url pkg:deb/debian/ruby1.8@1.8.7.358-7.1%2Bdeb7u3
purl pkg:deb/debian/ruby1.8@1.8.7.358-7.1%2Bdeb7u3
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/ruby1.8@1.8.7.358-7.1%252Bdeb7u3
1
url pkg:deb/debian/ruby1.9.1@1.9.3.194-8.1%2Bdeb7u2
purl pkg:deb/debian/ruby1.9.1@1.9.3.194-8.1%2Bdeb7u2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-g7ju-q41v-wyhd
1
vulnerability VCID-k6dd-ykw2-nfh6
2
vulnerability VCID-rwak-wvuw-qbcg
3
vulnerability VCID-wzdf-d9fv-u3hh
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/ruby1.9.1@1.9.3.194-8.1%252Bdeb7u2
2
url pkg:ebuild/dev-lang/ruby@2.0.0_p598
purl pkg:ebuild/dev-lang/ruby@2.0.0_p598
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:ebuild/dev-lang/ruby@2.0.0_p598
Affected_packages
0
url pkg:deb/debian/ruby1.8@1.8.2-7sarge6
purl pkg:deb/debian/ruby1.8@1.8.2-7sarge6
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1bdw-9rs5-6ycg
1
vulnerability VCID-5xez-skrj-b3h4
2
vulnerability VCID-bjts-v9q2-9yg8
3
vulnerability VCID-g7ju-q41v-wyhd
4
vulnerability VCID-k6dd-ykw2-nfh6
5
vulnerability VCID-wzdf-d9fv-u3hh
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/ruby1.8@1.8.2-7sarge6
1
url pkg:deb/debian/ruby1.8@1.8.5-4
purl pkg:deb/debian/ruby1.8@1.8.5-4
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1bdw-9rs5-6ycg
1
vulnerability VCID-5xez-skrj-b3h4
2
vulnerability VCID-bjts-v9q2-9yg8
3
vulnerability VCID-g7ju-q41v-wyhd
4
vulnerability VCID-k6dd-ykw2-nfh6
5
vulnerability VCID-wzdf-d9fv-u3hh
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/ruby1.8@1.8.5-4
2
url pkg:deb/debian/ruby1.8@1.8.5-4etch5
purl pkg:deb/debian/ruby1.8@1.8.5-4etch5
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1bdw-9rs5-6ycg
1
vulnerability VCID-5xez-skrj-b3h4
2
vulnerability VCID-bjts-v9q2-9yg8
3
vulnerability VCID-g7ju-q41v-wyhd
4
vulnerability VCID-k6dd-ykw2-nfh6
5
vulnerability VCID-wzdf-d9fv-u3hh
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/ruby1.8@1.8.5-4etch5
3
url pkg:deb/debian/ruby1.8@1.8.7.72-3lenny1
purl pkg:deb/debian/ruby1.8@1.8.7.72-3lenny1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1bdw-9rs5-6ycg
1
vulnerability VCID-5xez-skrj-b3h4
2
vulnerability VCID-bjts-v9q2-9yg8
3
vulnerability VCID-g7ju-q41v-wyhd
4
vulnerability VCID-k6dd-ykw2-nfh6
5
vulnerability VCID-wzdf-d9fv-u3hh
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/ruby1.8@1.8.7.72-3lenny1
4
url pkg:deb/debian/ruby1.8@1.8.7.302-2squeeze1
purl pkg:deb/debian/ruby1.8@1.8.7.302-2squeeze1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1bdw-9rs5-6ycg
1
vulnerability VCID-5xez-skrj-b3h4
2
vulnerability VCID-bjts-v9q2-9yg8
3
vulnerability VCID-g7ju-q41v-wyhd
4
vulnerability VCID-k6dd-ykw2-nfh6
5
vulnerability VCID-wzdf-d9fv-u3hh
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/ruby1.8@1.8.7.302-2squeeze1
5
url pkg:deb/debian/ruby1.8@1.8.7.302-2squeeze2
purl pkg:deb/debian/ruby1.8@1.8.7.302-2squeeze2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1bdw-9rs5-6ycg
1
vulnerability VCID-5xez-skrj-b3h4
2
vulnerability VCID-bjts-v9q2-9yg8
3
vulnerability VCID-g7ju-q41v-wyhd
4
vulnerability VCID-k6dd-ykw2-nfh6
5
vulnerability VCID-wzdf-d9fv-u3hh
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/ruby1.8@1.8.7.302-2squeeze2
6
url pkg:deb/debian/ruby1.8@1.8.7.302-2squeeze5
purl pkg:deb/debian/ruby1.8@1.8.7.302-2squeeze5
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1bdw-9rs5-6ycg
1
vulnerability VCID-5xez-skrj-b3h4
2
vulnerability VCID-bjts-v9q2-9yg8
3
vulnerability VCID-g7ju-q41v-wyhd
4
vulnerability VCID-k6dd-ykw2-nfh6
5
vulnerability VCID-wzdf-d9fv-u3hh
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/ruby1.8@1.8.7.302-2squeeze5
7
url pkg:deb/debian/ruby1.9.1@1.9.2.0-2
purl pkg:deb/debian/ruby1.9.1@1.9.2.0-2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1bdw-9rs5-6ycg
1
vulnerability VCID-5xez-skrj-b3h4
2
vulnerability VCID-bjts-v9q2-9yg8
3
vulnerability VCID-g7ju-q41v-wyhd
4
vulnerability VCID-k6dd-ykw2-nfh6
5
vulnerability VCID-rwak-wvuw-qbcg
6
vulnerability VCID-wzdf-d9fv-u3hh
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/ruby1.9.1@1.9.2.0-2
8
url pkg:deb/debian/ruby1.9.1@1.9.2.0-2%2Bdeb6u2
purl pkg:deb/debian/ruby1.9.1@1.9.2.0-2%2Bdeb6u2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1bdw-9rs5-6ycg
1
vulnerability VCID-5xez-skrj-b3h4
2
vulnerability VCID-bjts-v9q2-9yg8
3
vulnerability VCID-g7ju-q41v-wyhd
4
vulnerability VCID-k6dd-ykw2-nfh6
5
vulnerability VCID-rwak-wvuw-qbcg
6
vulnerability VCID-wzdf-d9fv-u3hh
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/ruby1.9.1@1.9.2.0-2%252Bdeb6u2
9
url pkg:deb/debian/ruby1.9.1@1.9.2.0-2%2Bdeb6u7
purl pkg:deb/debian/ruby1.9.1@1.9.2.0-2%2Bdeb6u7
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1bdw-9rs5-6ycg
1
vulnerability VCID-5xez-skrj-b3h4
2
vulnerability VCID-bjts-v9q2-9yg8
3
vulnerability VCID-g7ju-q41v-wyhd
4
vulnerability VCID-k6dd-ykw2-nfh6
5
vulnerability VCID-rwak-wvuw-qbcg
6
vulnerability VCID-wzdf-d9fv-u3hh
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/ruby1.9.1@1.9.2.0-2%252Bdeb6u7
10
url pkg:rpm/redhat/cfme@5.2.2.3-1?arch=el6cf
purl pkg:rpm/redhat/cfme@5.2.2.3-1?arch=el6cf
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1bdw-9rs5-6ycg
1
vulnerability VCID-3wtf-uu89-2qe5
2
vulnerability VCID-bv8s-3wu9-mfa8
3
vulnerability VCID-er1e-c57c-t3fk
4
vulnerability VCID-mep3-6sub-ykdk
resource_url http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/cfme@5.2.2.3-1%3Farch=el6cf
11
url pkg:rpm/redhat/ruby@1.8.7.352-13?arch=el6
purl pkg:rpm/redhat/ruby@1.8.7.352-13?arch=el6
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1bdw-9rs5-6ycg
resource_url http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/ruby@1.8.7.352-13%3Farch=el6
12
url pkg:rpm/redhat/ruby@1.8.7.352-13?arch=el6_2
purl pkg:rpm/redhat/ruby@1.8.7.352-13?arch=el6_2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1bdw-9rs5-6ycg
resource_url http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/ruby@1.8.7.352-13%3Farch=el6_2
13
url pkg:rpm/redhat/ruby@1.8.7.352-13?arch=el6_4
purl pkg:rpm/redhat/ruby@1.8.7.352-13?arch=el6_4
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1bdw-9rs5-6ycg
resource_url http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/ruby@1.8.7.352-13%3Farch=el6_4
14
url pkg:rpm/redhat/ruby@1.8.7.352-13?arch=el6_3
purl pkg:rpm/redhat/ruby@1.8.7.352-13?arch=el6_3
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1bdw-9rs5-6ycg
resource_url http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/ruby@1.8.7.352-13%3Farch=el6_3
15
url pkg:rpm/redhat/ruby193-ruby@1.9.3.448-40.1?arch=el6
purl pkg:rpm/redhat/ruby193-ruby@1.9.3.448-40.1?arch=el6
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1bdw-9rs5-6ycg
1
vulnerability VCID-3wtf-uu89-2qe5
2
vulnerability VCID-bv8s-3wu9-mfa8
3
vulnerability VCID-er1e-c57c-t3fk
4
vulnerability VCID-mep3-6sub-ykdk
resource_url http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/ruby193-ruby@1.9.3.448-40.1%3Farch=el6
16
url pkg:rpm/redhat/ruby193-rubygem-actionpack@1:3.2.13-5?arch=el6cf
purl pkg:rpm/redhat/ruby193-rubygem-actionpack@1:3.2.13-5?arch=el6cf
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1bdw-9rs5-6ycg
1
vulnerability VCID-3wtf-uu89-2qe5
2
vulnerability VCID-bv8s-3wu9-mfa8
3
vulnerability VCID-er1e-c57c-t3fk
4
vulnerability VCID-mep3-6sub-ykdk
resource_url http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/ruby193-rubygem-actionpack@1:3.2.13-5%3Farch=el6cf
17
url pkg:rpm/redhat/ruby193-rubygem-amq-protocol@1.9.2-3?arch=el6cf
purl pkg:rpm/redhat/ruby193-rubygem-amq-protocol@1.9.2-3?arch=el6cf
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1bdw-9rs5-6ycg
1
vulnerability VCID-3wtf-uu89-2qe5
2
vulnerability VCID-5sfa-s7xw-cyeg
3
vulnerability VCID-bv8s-3wu9-mfa8
4
vulnerability VCID-er1e-c57c-t3fk
5
vulnerability VCID-mep3-6sub-ykdk
6
vulnerability VCID-wyku-upny-vuhk
resource_url http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/ruby193-rubygem-amq-protocol@1.9.2-3%3Farch=el6cf
18
url pkg:rpm/redhat/ruby193-rubygem-bunny@1.0.7-1?arch=el6cf
purl pkg:rpm/redhat/ruby193-rubygem-bunny@1.0.7-1?arch=el6cf
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1bdw-9rs5-6ycg
1
vulnerability VCID-3wtf-uu89-2qe5
2
vulnerability VCID-5sfa-s7xw-cyeg
3
vulnerability VCID-bv8s-3wu9-mfa8
4
vulnerability VCID-er1e-c57c-t3fk
5
vulnerability VCID-mep3-6sub-ykdk
6
vulnerability VCID-wyku-upny-vuhk
resource_url http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/ruby193-rubygem-bunny@1.0.7-1%3Farch=el6cf
19
url pkg:rpm/redhat/ruby193-rubygem-excon@0.31.0-1?arch=el6cf
purl pkg:rpm/redhat/ruby193-rubygem-excon@0.31.0-1?arch=el6cf
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1bdw-9rs5-6ycg
1
vulnerability VCID-3wtf-uu89-2qe5
2
vulnerability VCID-5sfa-s7xw-cyeg
3
vulnerability VCID-bv8s-3wu9-mfa8
4
vulnerability VCID-er1e-c57c-t3fk
5
vulnerability VCID-mep3-6sub-ykdk
6
vulnerability VCID-wyku-upny-vuhk
resource_url http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/ruby193-rubygem-excon@0.31.0-1%3Farch=el6cf
20
url pkg:rpm/redhat/ruby193-rubygem-fog@1.19.0-1?arch=el6cf
purl pkg:rpm/redhat/ruby193-rubygem-fog@1.19.0-1?arch=el6cf
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1bdw-9rs5-6ycg
1
vulnerability VCID-3wtf-uu89-2qe5
2
vulnerability VCID-5sfa-s7xw-cyeg
3
vulnerability VCID-bv8s-3wu9-mfa8
4
vulnerability VCID-er1e-c57c-t3fk
5
vulnerability VCID-mep3-6sub-ykdk
6
vulnerability VCID-wyku-upny-vuhk
resource_url http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/ruby193-rubygem-fog@1.19.0-1%3Farch=el6cf
21
url pkg:rpm/redhat/ruby193-rubygem-linux_admin@0.7.0-1?arch=el6cf
purl pkg:rpm/redhat/ruby193-rubygem-linux_admin@0.7.0-1?arch=el6cf
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1bdw-9rs5-6ycg
1
vulnerability VCID-3wtf-uu89-2qe5
2
vulnerability VCID-bv8s-3wu9-mfa8
3
vulnerability VCID-er1e-c57c-t3fk
4
vulnerability VCID-mep3-6sub-ykdk
resource_url http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/ruby193-rubygem-linux_admin@0.7.0-1%3Farch=el6cf
22
url pkg:rpm/redhat/ruby193-rubygem-more_core_extensions@1.1.2-1?arch=el6cf
purl pkg:rpm/redhat/ruby193-rubygem-more_core_extensions@1.1.2-1?arch=el6cf
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1bdw-9rs5-6ycg
1
vulnerability VCID-3wtf-uu89-2qe5
2
vulnerability VCID-bv8s-3wu9-mfa8
3
vulnerability VCID-er1e-c57c-t3fk
4
vulnerability VCID-mep3-6sub-ykdk
resource_url http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/ruby193-rubygem-more_core_extensions@1.1.2-1%3Farch=el6cf
23
url pkg:rpm/redhat/ruby193-rubygem-nokogiri@1.5.6-3?arch=el6cf
purl pkg:rpm/redhat/ruby193-rubygem-nokogiri@1.5.6-3?arch=el6cf
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1bdw-9rs5-6ycg
1
vulnerability VCID-3wtf-uu89-2qe5
2
vulnerability VCID-5sfa-s7xw-cyeg
3
vulnerability VCID-bv8s-3wu9-mfa8
4
vulnerability VCID-er1e-c57c-t3fk
5
vulnerability VCID-mep3-6sub-ykdk
6
vulnerability VCID-wyku-upny-vuhk
resource_url http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/ruby193-rubygem-nokogiri@1.5.6-3%3Farch=el6cf
24
url pkg:ruby/ruby@1.9.4
purl pkg:ruby/ruby@1.9.4
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1bdw-9rs5-6ycg
1
vulnerability VCID-5xez-skrj-b3h4
2
vulnerability VCID-bjts-v9q2-9yg8
3
vulnerability VCID-g7ju-q41v-wyhd
4
vulnerability VCID-ggcn-qfts-rbeu
5
vulnerability VCID-hunm-dpcd-r3ff
6
vulnerability VCID-jj3a-fpsa-a7at
7
vulnerability VCID-wzdf-d9fv-u3hh
resource_url http://public2.vulnerablecode.io/packages/pkg:ruby/ruby@1.9.4
25
url pkg:ruby/ruby@2.0.1
purl pkg:ruby/ruby@2.0.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1bdw-9rs5-6ycg
1
vulnerability VCID-3uaa-r5vu-2fg9
2
vulnerability VCID-cvs2-zecm-z3h8
3
vulnerability VCID-g7ju-q41v-wyhd
4
vulnerability VCID-k6dd-ykw2-nfh6
5
vulnerability VCID-pkg9-61ah-kbex
6
vulnerability VCID-wzdf-d9fv-u3hh
resource_url http://public2.vulnerablecode.io/packages/pkg:ruby/ruby@2.0.1
26
url pkg:ruby/ruby@2.2
purl pkg:ruby/ruby@2.2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1bdw-9rs5-6ycg
1
vulnerability VCID-3uaa-r5vu-2fg9
2
vulnerability VCID-cvs2-zecm-z3h8
3
vulnerability VCID-k6dd-ykw2-nfh6
4
vulnerability VCID-rwak-wvuw-qbcg
resource_url http://public2.vulnerablecode.io/packages/pkg:ruby/ruby@2.2
References
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-4164.json
reference_id
reference_type
scores
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-4164.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2013-4164
reference_id
reference_type
scores
0
value 0.11958
scoring_system epss
scoring_elements 0.9372
published_at 2026-04-01T12:55:00Z
1
value 0.11958
scoring_system epss
scoring_elements 0.93729
published_at 2026-04-02T12:55:00Z
2
value 0.11958
scoring_system epss
scoring_elements 0.9374
published_at 2026-04-04T12:55:00Z
3
value 0.11958
scoring_system epss
scoring_elements 0.93743
published_at 2026-04-07T12:55:00Z
4
value 0.11958
scoring_system epss
scoring_elements 0.93752
published_at 2026-04-08T12:55:00Z
5
value 0.11958
scoring_system epss
scoring_elements 0.93755
published_at 2026-04-09T12:55:00Z
6
value 0.11958
scoring_system epss
scoring_elements 0.93759
published_at 2026-04-13T12:55:00Z
7
value 0.11958
scoring_system epss
scoring_elements 0.93781
published_at 2026-04-16T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2013-4164
2
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1821
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1821
3
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4073
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4073
4
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4164
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4164
5
reference_url https://www.ruby-lang.org/en/news/2013/11/22/heap-overflow-in-floating-point-parsing-cve-2013-4164
reference_id
reference_type
scores
url https://www.ruby-lang.org/en/news/2013/11/22/heap-overflow-in-floating-point-parsing-cve-2013-4164
6
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=1033460
reference_id 1033460
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=1033460
7
reference_url https://security.gentoo.org/glsa/201412-27
reference_id GLSA-201412-27
reference_type
scores
url https://security.gentoo.org/glsa/201412-27
8
reference_url https://access.redhat.com/errata/RHSA-2013:1763
reference_id RHSA-2013:1763
reference_type
scores
url https://access.redhat.com/errata/RHSA-2013:1763
9
reference_url https://access.redhat.com/errata/RHSA-2013:1764
reference_id RHSA-2013:1764
reference_type
scores
url https://access.redhat.com/errata/RHSA-2013:1764
10
reference_url https://access.redhat.com/errata/RHSA-2013:1767
reference_id RHSA-2013:1767
reference_type
scores
url https://access.redhat.com/errata/RHSA-2013:1767
11
reference_url https://access.redhat.com/errata/RHSA-2014:0011
reference_id RHSA-2014:0011
reference_type
scores
url https://access.redhat.com/errata/RHSA-2014:0011
12
reference_url https://access.redhat.com/errata/RHSA-2014:0215
reference_id RHSA-2014:0215
reference_type
scores
url https://access.redhat.com/errata/RHSA-2014:0215
13
reference_url https://usn.ubuntu.com/2035-1/
reference_id USN-2035-1
reference_type
scores
url https://usn.ubuntu.com/2035-1/
Weaknesses
0
cwe_id 228
name Improper Handling of Syntactically Invalid Structure
description The product does not handle or incorrectly handles input that is not syntactically well-formed with respect to the associated specification.
1
cwe_id 122
name Heap-based Buffer Overflow
description A heap overflow condition is a buffer overflow, where the buffer that can be overwritten is allocated in the heap portion of memory, generally meaning that the buffer was allocated using a routine such as malloc().
Exploits
0
date_added null
description
When Ruby attempts to convert a string representation of a large floating point
          decimal number to its floating point equivalent, a heap-based buffer overflow
          can be triggered. This module has been tested successfully on a Ruby on Rails application
          using Ruby version 1.9.3-p448 with WebRick and Thin web servers, where the Rails application
          crashes with a segfault error. Other versions of Ruby are reported to be affected.
required_action null
due_date null
notes
Stability:
  - crash-service-down
SideEffects: []
Reliability: []
known_ransomware_campaign_use false
source_date_published 2013-11-22
exploit_type null
platform
source_date_updated null
data_source Metasploit
source_url https://github.com/rapid7/metasploit-framework/tree/master/modules/auxiliary/dos/http/rails_json_float_dos.rb
Severity_range_scorenull
Exploitability2.0
Weighted_severity0.1
Risk_score0.2
Resource_urlhttp://public2.vulnerablecode.io/vulnerabilities/VCID-1bdw-9rs5-6ycg