CVE-2008-2376
- State
- Published
- Severity
- Not scored
- Published
- Jul 9, 2008
- Updated
- Aug 7, 2024
- Reserved
- May 21, 2008
Description
Integer overflow in the rb_ary_fill function in array.c in Ruby before revision 17756 allows context-dependent attackers to cause a denial of service (crash) or possibly have unspecified other impact via a call to the Array#fill method with a start (aka beg) argument greater than ARY_MAX_SIZE. NOTE: this issue exists because of an incomplete fix for other closely related integer overflows.
Scores
The record has no CVSS score.
Weaknesses
The record names no weakness.
Affected Products
| Product | Versions |
|---|---|
n/an/a |
|
References
- 31090third-party-advisory
- USN-651-1vendor-advisory
- MDVSA-2008:141vendor-advisory
- APPLE-SA-2008-09-15vendor-advisory
- 31006third-party-advisory
- FEDORA-2008-6033vendor-advisory
- DSA-1618vendor-advisory
- http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0218
- TA08-260Athird-party-advisory
- ADV-2008-2584vdb-entry
- 31062third-party-advisory
- https://issues.rpath.com/browse/RPL-2639
- 31256third-party-advisory
- FEDORA-2008-6094vendor-advisory
- 32219third-party-advisory
- [oss-security] 20080702 More ruby integer overflows (rb_ary_fill / Array#fill)mailing-list
- MDVSA-2008:140vendor-advisory
- oval:org.mitre.oval:def:9863vdb-entrysignature
- http://wiki.rpath.com/Advisories:rPSA-2008-0218
- RHSA-2008:0561vendor-advisory
- http://svn.ruby-lang.org/cgi-bin/viewvc.cgi?view=rev&revision=17756
- DSA-1612vendor-advisory
- GLSA-200812-17vendor-advisory
- 33178third-party-advisory
- 30927third-party-advisory
- 20080708 rPSA-2008-0218-1 rubymailing-list
- MDVSA-2008:142vendor-advisory
- 31181third-party-advisory
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.