CVE-2014-4975: Buffer Overflow
A possible stack-based buffer overflow flaw was reported in the Ruby encodes() function from pack.c. From the bug report, this function may be used on data received from a server, and could be triggered remotely.
As the affected stack buffer is a static size on the stack, FORTIFYSOURCE may help mitigate this issue to only be a denial of service.
The original report suggests older versions (such as 1.9.3) are not affected.
Bug report: https://bugs.ruby-lang.org/issues/10019
CVE request: http://www.openwall.com/lists/oss-security/2014/07/09/13
Other sources
Off-by-one error in the encodes function in pack.c in Ruby 1.9.3 and earlier, and 2.x through 2.1.2, when using certain format string specifiers, allows context-dependent attackers to cause a denial of service (segmentation fault) via vectors that trigger a stack-based buffer overflow.
— MITRE
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2014-4975?
The severity of CVE-2014-4975 is considered high due to the potential for a stack-based buffer overflow that may be triggered remotely.
How do I fix CVE-2014-4975?
To fix CVE-2014-4975, upgrade Ruby to version 2.1 or later, as earlier versions are affected by this vulnerability.
What versions of Ruby are affected by CVE-2014-4975?
CVE-2014-4975 affects Ruby versions up to and including 1.9.3 and specific 2.0.x versions.
Can CVE-2014-4975 be exploited remotely?
Yes, CVE-2014-4975 can be exploited remotely if an application using the vulnerable Ruby function handles untrusted input.
What impact does CVE-2014-4975 have on systems?
The impact of CVE-2014-4975 may allow an attacker to execute arbitrary code on the affected system, compromising its security.