CVE-2008-2663: Integer Overflow
Multiple integer overflows in the rbarystore function in Ruby 1.8.4 and earlier, 1.8.5 before 1.8.5-p231, 1.8.6 before 1.8.6-p230, and 1.8.7 before 1.8.7-p22 allow context-dependent attackers to execute arbitrary code or cause a denial of service via unknown vectors, a different issue than CVE-2008-2662, CVE-2008-2664, and CVE-2008-2725. NOTE: as of 20080624, there has been inconsistent usage of multiple CVE identifiers related to Ruby. The CVE description should be regarded as authoritative, although it is likely to change.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2008-2663?
CVE-2008-2663 has a high severity level due to the potential for arbitrary code execution or denial of service.
How do I fix CVE-2008-2663?
To fix CVE-2008-2663, upgrade Ruby to version 1.8.5-p231 or later, or any subsequent versions.
What versions of Ruby are affected by CVE-2008-2663?
Ruby versions 1.8.4 and earlier, as well as specific 1.8.5, 1.8.6, and 1.8.7 versions before their patched releases are affected.
What are the consequences of CVE-2008-2663 if exploited?
Exploitation of CVE-2008-2663 could lead to arbitrary code execution or a denial of service condition impacting applications using the affected Ruby versions.
Is CVE-2008-2663 present in Debian or Ubuntu systems?
Yes, CVE-2008-2663 is present in specific versions of Debian and Ubuntu Linux that use the affected Ruby versions.