Search for vulnerabilities
| Vulnerability ID | VCID-nsa4-b31c-37g2 |
| Aliases |
CVE-2008-2376
GHSA-f7wf-fwmg-r7g3 |
| Summary | Multiple vulnerabilities have been discovered in Ruby that allow for attacks including arbitrary code execution and Denial of Service. |
| Status | Published |
| Exploitability | 0.5 |
| Weighted Severity | 6.8 |
| Risk | 3.4 |
| Affected and Fixed Packages | Package Details |
| CWE-190 | Integer Overflow or Wraparound |
| CWE-189 | Numeric Errors |
| System | Score | Found at |
|---|---|---|
| epss | 0.11359 | https://api.first.org/data/v1/epss?cve=CVE-2008-2376 |
| epss | 0.11359 | https://api.first.org/data/v1/epss?cve=CVE-2008-2376 |
| epss | 0.11359 | https://api.first.org/data/v1/epss?cve=CVE-2008-2376 |
| epss | 0.11359 | https://api.first.org/data/v1/epss?cve=CVE-2008-2376 |
| epss | 0.11359 | https://api.first.org/data/v1/epss?cve=CVE-2008-2376 |
| epss | 0.11359 | https://api.first.org/data/v1/epss?cve=CVE-2008-2376 |
| cvssv2 | 7.5 | https://nvd.nist.gov/vuln/detail/CVE-2008-2376 |
| Exploitability (E) | Access Vector (AV) | Access Complexity (AC) | Authentication (Au) | Confidentiality Impact (C) | Integrity Impact (I) | Availability Impact (A) |
|---|---|---|---|---|---|---|
high functional unproven proof_of_concept not_defined |
local adjacent_network network |
high medium low |
multiple single none |
none partial complete |
none partial complete |
none partial complete |
| Percentile | 0.93515 |
| EPSS Score | 0.11359 |
| Published At | April 1, 2026, 12:55 p.m. |
| Date | Actor | Action | Source | VulnerableCode Version |
|---|---|---|---|---|
| 2026-04-01T13:01:36.905688+00:00 | Gentoo Importer | Import | https://security.gentoo.org/glsa/200812-17 | 38.0.0 |