CVE-2016-2338

 

Published at: - 29-09-2022 05:15

Last modified: - 03-10-2022 08:39

Total changes: - 1

Description

An exploitable heap overflow vulnerability exists in the Psych::Emitter start_document function of Ruby. In Psych::Emitter start_document function heap buffer "head" allocation is made based on tags array length. Specially constructed object passed as element of tags array can increase this array size after mentioned allocation and cause heap overflow.

Common Vulnerability Scoring System (CVSS)

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

 

Verification logic

 

Reference

• [debian-lts-announce] 20200325 [SECURITY] [DLA 2158-1] ruby2.1 security update-Mailing List, Third Party Advisory
• http://www.talosintelligence.com/reports/TALOS-2016-0032/

 

Keywords

NVD

 

CVE-2016-2338

 

CVE

 

Common vulnerabilities & exposures

 

CVSS

 

Common vulnerability scoring system

 

Security

 

Vulnerabilities

 

Exposures