Out-of-bounds read In ruby
Description
In Ruby before 2.2.10, 2.3.x before 2.3.7, 2.4.x before 2.4.4, 2.5.x before 2.5.1, and 2.6.0-preview1, an attacker controlling the unpacking format (similar to format string vulnerabilities) can trigger a buffer under-read in the String#unpack method, resulting in a massive and controlled information disclosure.
Mitigation
Update Impact
Minimal update. May introduce new vulnerabilities or breaking changes.
Ecosystem | Component | Affected version | Patched versions |
|---|---|---|---|
 alpine v3.21 | 2.5.1-r0 | ||
alpine v3.15 | 2.5.1-r0 | ||
alpine v3.16 | 2.5.1-r0 | ||
alpine v3.6 | 2.4.4-r0 | ||
alpine v3.9 | 2.5.1-r0 | ||
alpine v3.11 | 2.5.1-r0 | ||
alpine v3.5 | 2.3.7-r0 | ||
alpine v3.12 | 2.5.1-r0 | ||
alpine v3.13 | 2.5.1-r0 | ||
alpine v3.14 | 2.5.1-r0 |
1-10 of 27
10
Aliases
1. 2. 3. 4. 5. 6. 7. 8. 9. 10. 11. 12. 13. 14. 15. 16. 17. 18.
References
1. 2. 3. 4. 5.