CVE-2008-2376

Integer overflow in the rb_ary_fill function in array.c in Ruby before revision 17756 allows context-dependent attackers to cause a denial of service (crash)…

published July 9, 2008

CVSS
—
EPSS
4%
Percentile
89.3
In the wild
Unconfirmed
What it is

Integer overflow in the rb_ary_fill function in array.c in Ruby before revision 17756 allows context-dependent attackers to cause a denial of service (crash) or possibly have unspecified other impact via a call to the Array#fill method with a start (aka beg) argument greater than ARY_MAX_SIZE. NOTE: this issue exists because of an incomplete fix for other closely related integer overflows.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.03601 · 89.3th percentile
Published
2008-07-09T00:00Z
EPSS history
Timeline
  • 09 JUL 00:00Z
    Integer overflow in the rb_ary_fill function in array.c in Ruby before revision 17756 allows context-dependent attackers to cause a denial of service (crash)…
    cvelistv5