CVE-2013-2065

Related Files

Ubuntu Security Notice USN-2035-1

Posted Nov 27, 2013

Authored by Ubuntu | Site security.ubuntu.com

Ubuntu Security Notice 2035-1 - Charlie Somerville discovered that Ruby incorrectly handled floating point number conversion. An attacker could possibly use this issue with an application that converts text to floating point numbers to cause the application to crash, resulting in a denial of service, or possibly execute arbitrary code. Vit Ondruch discovered that Ruby did not perform taint checking for certain functions. An attacker could possibly use this issue to bypass certain intended restrictions. Various other issues were also addressed.

tags | advisory, denial of service, arbitrary, ruby

systems | linux, ubuntu

advisories | CVE-2013-4164, CVE-2013-2065, CVE-2013-2065, CVE-2013-4164

SHA-256 | a2094b5b2fa50416a4aec6e7c92d9a4bcf5df077b96d5767978f654d207b461a

Download | Favorite | View

Slackware Security Advisory - ruby Updates

Posted May 17, 2013

Authored by Slackware Security Team | Site slackware.com

Slackware Security Advisory - New ruby packages are available for Slackware 13.1, 13.37, 14.0, and -current to fix a security issue.

tags | advisory, ruby

systems | linux, slackware

advisories | CVE-2013-2065

SHA-256 | 97c44b0c5921578ed223dc9e1f8ecc69b707abd56893b0ab5a24e9cbf6ba6b3e

Download | Favorite | View