CVE-2008-2376

Publication date 8 July 2008

Last updated 24 July 2024

Ubuntu priority

Low

Why this priority?

Integer overflow in the rb_ary_fill function in array.c in Ruby before revision 17756 allows context-dependent attackers to cause a denial of service (crash) or possibly have unspecified other impact via a call to the Array#fill method with a start (aka beg) argument greater than ARY_MAX_SIZE. NOTE: this issue exists because of an incomplete fix for other closely related integer overflows.

Read the notes from the security team

Status

No maintained releases are affected by this CVE.

Package Ubuntu Release Status
ruby1.8 11.10 oneiric
Not affected
11.04 natty
Not affected
10.10 maverick
Not affected
10.04 LTS lucid
Not affected
9.10 karmic
Not affected
9.04 jaunty
Not affected
8.10 intrepid
Not affected
8.04 LTS hardy
Fixed 1.8.6.111-2ubuntu1.2
7.10 gutsy
Fixed 1.8.6.36-1ubuntu3.3
7.04 feisty
Fixed 1.8.5-4ubuntu2.3
6.06 LTS dapper
Fixed 1.8.4-1ubuntu1.6
ruby1.9 11.10 oneiric Not in release
11.04 natty Not in release
10.10 maverick Not in release
10.04 LTS lucid
Fixed 1.9.0.2-7
9.10 karmic
Fixed 1.9.0.2-7
9.04 jaunty
Fixed 1.9.0.2-7
8.10 intrepid
Fixed 1.9.0.2-7
8.04 LTS hardy Ignored end of life
7.10 gutsy Ignored end of life, was needed
7.04 feisty Ignored end of life, was needed
6.06 LTS dapper Ignored end of life

Notes

jdstrand

from oss-security, need to make sure that the following patches: http://svn.ruby-lang.org/cgi-bin/viewvc.cgi?view=rev&revision=13397 http://svn.ruby-lang.org/cgi-bin/viewvc.cgi?view=rev&revision=17688 http://svn.ruby-lang.org/cgi-bin/viewvc.cgi?view=rev&revision=17756 believed to not be as severe due to input code path

Patch details

For informational purposes only. We recommend not to cherry-pick updates. How can I get the fixes?

Package Patch details
ruby1.8

References

Related Ubuntu Security Notices (USN)

    • USN-651-1
    • Ruby vulnerabilities
    • 10 October 2008

Other references