CVE-2008-3443
14.08.2008, 23:41
The regular expression engine (regex.c) in Ruby 1.8.5 and earlier, 1.8.6 through 1.8.6-p286, 1.8.7 through 1.8.7-p71, and 1.9 through r18423 allows remote attackers to cause a denial of service (infinite loop and crash) via multiple long requests to a Ruby socket, related to memory allocation failure, and as demonstrated against Webrick.Enginsight
| Vendor | Product | Version |
|---|---|---|
| ruby-lang | ruby | 1.6.8 |
| ruby-lang | ruby | 1.8.0 |
| ruby-lang | ruby | 1.8.1 |
| ruby-lang | ruby | 1.8.1:-9 |
| ruby-lang | ruby | 1.8.2 |
| ruby-lang | ruby | 1.8.2:preview2 |
| ruby-lang | ruby | 1.8.2:preview3 |
| ruby-lang | ruby | 1.8.2:preview4 |
| ruby-lang | ruby | 1.8.3 |
| ruby-lang | ruby | 1.8.3:preview1 |
| ruby-lang | ruby | 1.8.3:preview2 |
| ruby-lang | ruby | 1.8.3:preview3 |
| ruby-lang | ruby | 1.8.4 |
| ruby-lang | ruby | 1.8.4:preview1 |
| ruby-lang | ruby | 1.8.4:preview2 |
| ruby-lang | ruby | 1.8.4:preview3 |
| ruby-lang | ruby | 1.8.5 |
| ruby-lang | ruby | 1.8.5:p11 |
| ruby-lang | ruby | 1.8.5:p113 |
| ruby-lang | ruby | 1.8.5:p114 |
| ruby-lang | ruby | 1.8.5:p115 |
| ruby-lang | ruby | 1.8.5:p12 |
| ruby-lang | ruby | 1.8.5:p2 |
| ruby-lang | ruby | 1.8.5:p231 |
| ruby-lang | ruby | 1.8.5:p35 |
| ruby-lang | ruby | 1.8.5:p52 |
| ruby-lang | ruby | 1.8.5:preview1 |
| ruby-lang | ruby | 1.8.5:preview2 |
| ruby-lang | ruby | 1.8.5:preview3 |
| ruby-lang | ruby | 1.8.5:preview4 |
| ruby-lang | ruby | 1.8.5:preview5 |
| ruby-lang | ruby | 1.8.6 |
| ruby-lang | ruby | 1.8.6:p110 |
| ruby-lang | ruby | 1.8.6:p111 |
| ruby-lang | ruby | 1.8.6:p114 |
| ruby-lang | ruby | 1.8.6:p230 |
| ruby-lang | ruby | 1.8.6:p286 |
| ruby-lang | ruby | 1.8.6:p36 |
| ruby-lang | ruby | 1.8.6:preview1 |
| ruby-lang | ruby | 1.8.6:preview2 |
| ruby-lang | ruby | 1.8.6:preview3 |
| ruby-lang | ruby | 1.8.7 |
| ruby-lang | ruby | 1.8.7:p17 |
| ruby-lang | ruby | 1.8.7:p22 |
| ruby-lang | ruby | 1.8.7:p71 |
| ruby-lang | ruby | 1.8.7:preview1 |
| ruby-lang | ruby | 1.8.7:preview2 |
| ruby-lang | ruby | 1.8.7:preview3 |
| ruby-lang | ruby | 1.8.7:preview4 |
| ruby-lang | ruby | 1.9.0 |
| ruby-lang | ruby | 1.9.0:r18423 |
𝑥
= Vulnerable software versions
Ubuntu Releases
Ubuntu Product | |||||||||||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| ruby1.8 |
| ||||||||||||||||||||||
| ruby1.9 |
|
Common Weakness Enumeration
References