QwikSec

Security Database

CVE

CWE

Training

CVE Database
/

CVE-2013-4164

Back to search

CVE-2013-4164

Published: Nov 23, 2013

Modified: Aug 6, 2024

PUBLISHED

Description

Heap-based buffer overflow in Ruby 1.8, 1.9 before 1.9.3-p484, 2.0 before 2.0.0-p353, 2.1 before 2.1.0 preview2, and trunk before revision 43780 allows context-dependent attackers to cause a denial of service (segmentation fault) and possibly execute arbitrary code via a string that is converted to a floating point value, as demonstrated using (1) the to_f method or (2) JSON.parse.

VendorProductVersions

n/a

n/a

affected
n/a

References

APPLE-SA-2014-10-16-3
vendor-advisory
x_refsource_APPLE
openSUSE-SU-2013:1835
vendor-advisory
x_refsource_SUSE
USN-2035-1
vendor-advisory
x_refsource_UBUNTU
APPLE-SA-2014-04-22-1
vendor-advisory
x_refsource_APPLE
RHSA-2014:0215
vendor-advisory
x_refsource_REDHAT
SUSE-SU-2013:1897
vendor-advisory
x_refsource_SUSE
RHSA-2013:1763
vendor-advisory
x_refsource_REDHAT
RHSA-2013:1764
vendor-advisory
x_refsource_REDHAT
63873
vdb-entry
x_refsource_BID
RHSA-2013:1767
vendor-advisory
x_refsource_REDHAT
RHSA-2014:0011
vendor-advisory
x_refsource_REDHAT
openSUSE-SU-2013:1834
vendor-advisory
x_refsource_SUSE
100113
vdb-entry
x_refsource_OSVDB
DSA-2810
vendor-advisory
x_refsource_DEBIAN
57376
third-party-advisory
x_refsource_SECUNIA
DSA-2809
vendor-advisory
x_refsource_DEBIAN
55787
third-party-advisory
x_refsource_SECUNIA

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Start Training

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.

Scan Now