Out-of-bounds read In ruby
Description
Ruby through 2.2.7, 2.3.x through 2.3.4, and 2.4.x through 2.4.1 can expose arbitrary memory during a JSON.generate call. The issues lies in using strdup in ext/json/ext/generator/generator.c, which will stop after encountering a '\0' byte, returning a pointer to a string of length zero, which is not the length stored in space_len.
Mitigation
Update Impact
Minimal update. May introduce new vulnerabilities or breaking changes.
Ecosystem | Component | Affected version | Patched versions |
|---|---|---|---|
 alpine v3.10 | 2.4.2-r0 | ||
alpine v3.16 | 2.4.2-r0 | ||
alpine v3.11 | 2.4.2-r0 | ||
alpine v3.12 | 2.4.2-r0 | ||
alpine v3.13 | 2.4.2-r0 | ||
alpine v3.14 | 2.4.2-r0 | ||
alpine v3.15 | 2.4.2-r0 | ||
alpine v3.17 | 2.4.2-r0 | ||
alpine v3.19 | 2.4.2-r0 | ||
alpine v3.21 | 2.4.2-r0 |
1-10 of 24
10
Aliases
1. 2. 3. 4. 5. 6. 7. 8. 9. 10. 11. 12. 13. 14. 15. 16. 17. 18. 19.
References
1. 2.