CVE-2008-2664: High severity ruby vulnerability
The rbstrformat function in Ruby 1.8.4 and earlier, 1.8.5 before 1.8.5-p231, 1.8.6 before 1.8.6-p230, 1.8.7 before 1.8.7-p22, and 1.9.0 before 1.9.0-2 allows context-dependent attackers to trigger memory corruption via unspecified vectors related to alloca, a different issue than CVE-2008-2662, CVE-2008-2663, and CVE-2008-2725. NOTE: as of 20080624, there has been inconsistent usage of multiple CVE identifiers related to Ruby. The CVE description should be regarded as authoritative, although it is likely to change.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2008-2664?
CVE-2008-2664 is considered to have moderate severity due to potential memory corruption that could lead to application crashes.
How do I fix CVE-2008-2664?
To fix CVE-2008-2664, you should upgrade Ruby to a version later than 1.8.7-p22 or 1.9.0-2.
Which versions of Ruby are affected by CVE-2008-2664?
CVE-2008-2664 affects Ruby versions 1.8.4 and earlier, 1.8.5 before 1.8.5-p231, 1.8.6 before 1.8.6-p230, 1.8.7 before 1.8.7-p22, and 1.9.0 before 1.9.0-2.
Is CVE-2008-2664 related to any other vulnerabilities?
CVE-2008-2664 is a different issue than CVE-2008-2662 and should be addressed independently.
What type of attack is associated with CVE-2008-2664?
CVE-2008-2664 allows context-dependent attackers to trigger memory corruption via unspecified vectors related to the alloca function.