Weekly edition	Kernel	Security	Distributions	Contact Us	Search
Archives	Calendar	Subscribe	Write for LWN	LWN.net FAQ	Sponsors

ruby: integer overflows

Package(s):

ruby

CVE #(s):

CVE-2006-2662

Created:

July 22, 2008

Updated:

July 28, 2008

Description:

The Ruby string processing code contains multiple integer overflows which can be exploited in a denial of service attack with the potential for the execution of arbitrary code.

Alerts:

Debian	DSA-1618-1	2008-07-26
Debian	DSA-1612-1	2008-07-21

(Log in to post comments)

ruby: integer overflows

Posted Jul 24, 2008 10:37 UTC (Thu) by nix (subscriber, #2304) [Link]

That should be CVE-2008-2662.