Django REST framework

Vulnerability Instance

Lookup for vulnerabilities affecting packages.

Vulnerability_idVCID-mtmk-9yt6-s3gv
Summaryruby: Heap-based buffer overflow in the rb_str_justify() function
Aliases
0
alias CVE-2009-4124
1
alias GHSA-9mvm-2xp2-9wmw
2
alias OSV-60880
Fixed_packages
Affected_packages
0
url pkg:ruby/ruby@1.9
purl pkg:ruby/ruby@1.9
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-5e5v-pmb2-zkba
1
vulnerability VCID-e58n-x5ra-6ybq
2
vulnerability VCID-ggcn-qfts-rbeu
3
vulnerability VCID-m6vt-b9kt-93hw
4
vulnerability VCID-mtmk-9yt6-s3gv
resource_url http://public2.vulnerablecode.io/packages/pkg:ruby/ruby@1.9
References
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2009-4124.json
reference_id
reference_type
scores
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2009-4124.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2009-4124
reference_id
reference_type
scores
0
value 0.01934
scoring_system epss
scoring_elements 0.83332
published_at 2026-04-01T12:55:00Z
1
value 0.01934
scoring_system epss
scoring_elements 0.83347
published_at 2026-04-02T12:55:00Z
2
value 0.01934
scoring_system epss
scoring_elements 0.83362
published_at 2026-04-04T12:55:00Z
3
value 0.01934
scoring_system epss
scoring_elements 0.83361
published_at 2026-04-07T12:55:00Z
4
value 0.01934
scoring_system epss
scoring_elements 0.83385
published_at 2026-04-08T12:55:00Z
5
value 0.01934
scoring_system epss
scoring_elements 0.83394
published_at 2026-04-09T12:55:00Z
6
value 0.01934
scoring_system epss
scoring_elements 0.83409
published_at 2026-04-11T12:55:00Z
7
value 0.01934
scoring_system epss
scoring_elements 0.83404
published_at 2026-04-12T12:55:00Z
8
value 0.01934
scoring_system epss
scoring_elements 0.83399
published_at 2026-04-13T12:55:00Z
9
value 0.01934
scoring_system epss
scoring_elements 0.83435
published_at 2026-04-16T12:55:00Z
10
value 0.01934
scoring_system epss
scoring_elements 0.83436
published_at 2026-04-21T12:55:00Z
11
value 0.01934
scoring_system epss
scoring_elements 0.83459
published_at 2026-04-24T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2009-4124
2
reference_url https://www.ruby-lang.org/en/news/2009/12/07/heap-overflow-in-string
reference_id
reference_type
scores
url https://www.ruby-lang.org/en/news/2009/12/07/heap-overflow-in-string
3
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=959916
reference_id 959916
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=959916
4
reference_url https://usn.ubuntu.com/900-1/
reference_id USN-900-1
reference_type
scores
url https://usn.ubuntu.com/900-1/
Weaknesses
0
cwe_id 122
name Heap-based Buffer Overflow
description A heap overflow condition is a buffer overflow, where the buffer that can be overwritten is allocated in the heap portion of memory, generally meaning that the buffer was allocated using a routine such as malloc().
Exploits
Severity_range_scorenull
Exploitability0.5
Weighted_severity0.0
Risk_scorenull
Resource_urlhttp://public2.vulnerablecode.io/vulnerabilities/VCID-mtmk-9yt6-s3gv