CVE-2016-2338
First published: Fri Feb 14 2020(Updated: )
An exploitable heap overflow vulnerability exists in the Psych::Emitter start_document function of Ruby. In Psych::Emitter start_document function heap buffer "head" allocation is made based on tags array length. Specially constructed object passed as element of tags array can increase this array size after mentioned allocation and cause heap overflow.
Credit: cret@cert.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Ruby-lang Ruby | =2.2.2 | |
| Ruby-lang Ruby | =2.3.0 | |
| Debian Debian Linux | =8.0 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is CVE-2016-2338?
CVE-2016-2338 is an exploitable heap overflow vulnerability in the Psych::Emitter start_document function of Ruby.
How severe is CVE-2016-2338?
CVE-2016-2338 is classified as critical with a severity score of 9.8 out of 10.
Which software versions are affected by CVE-2016-2338?
CVE-2016-2338 affects Ruby 2.2.2, Ruby 2.3.0, and Debian Linux 8.0.
How can I fix CVE-2016-2338?
To fix CVE-2016-2338, update to a patched version of Ruby or apply the recommended security updates for Debian Linux.
Where can I find more information about CVE-2016-2338?
You can find more information about CVE-2016-2338 in the following references: http://www.talosintelligence.com/reports/TALOS-2016-0032/, https://lists.debian.org/debian-lts-announce/2020/03/msg00032.html, https://security.netapp.com/advisory/ntap-20221228-0005/
- collector/nvd-index
- agent/severity
- agent/references
- agent/weakness
- agent/author
- agent/type
- agent/event
- agent/description
- agent/last-modified-date
- agent/softwarecombine
- agent/first-publish-date
- agent/tags
- collector/mitre-cve
- source/MITRE
- vendor/ruby-lang
- canonical/ruby-lang ruby
- version/ruby-lang ruby/2.2.2
- version/ruby-lang ruby/2.3.0
- vendor/debian
- canonical/debian debian linux
- version/debian debian linux/8.0