The remote Redhat Enterprise Linux 6 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2013:1764 advisory.

    Ruby is an extensible, interpreted, object-oriented, scripting language.
    It has features to process text files and to perform system management     tasks.

    A buffer overflow flaw was found in the way Ruby parsed floating point     numbers from their text representation. If an application using Ruby     accepted untrusted input strings and converted them to floating point     numbers, an attacker able to provide such input could cause the application     to crash or, possibly, execute arbitrary code with the privileges of the     application. (CVE-2013-4164)

    All ruby users are advised to upgrade to these updated packages, which     contain a backported patch to correct this issue.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

Update to Ruby 2.0.0-p353. This includes fix to an overflow in floating point number parsing found in Ruby currently being shipped on Fedora 20. This vulnerability has been assigned the CVE identifier CVE-2013-4164. This new rpm should fix this issue.

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The remote Mac OS X 10.9 host has a version of OS X Server installed that is prior to 3.1.2. It is, therefore, affected by a heap-based buffer overflow vulnerability in the Ruby component that occurs when converting a string to a floating point value. A remote attacker can exploit this, via a specially crafted request to Profile Manager or to a Ruby script, to cause a denial of service condition or the execution of arbitrary code.

Updated ruby packages that fix one security issue are now available for Red Hat Enterprise Linux 6.

The Red Hat Security Response Team has rated this update as having critical security impact. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available from the CVE link in the References section.

Ruby is an extensible, interpreted, object-oriented, scripting language. It has features to process text files and to perform system management tasks.

A buffer overflow flaw was found in the way Ruby parsed floating point numbers from their text representation. If an application using Ruby accepted untrusted input strings and converted them to floating point numbers, an attacker able to provide such input could cause the application to crash or, possibly, execute arbitrary code with the privileges of the application. (CVE-2013-4164)

All ruby users are advised to upgrade to these updated packages, which contain a backported patch to correct this issue.

The remote Solaris system is missing necessary patches to address security updates :

  - Heap-based buffer overflow in Ruby 1.8, 1.9 before     1.9.3-p484, 2.0 before 2.0.0-p353, 2.1 before 2.1.0     preview2, and trunk before revision 43780 allows     context-dependent attackers to cause a denial of service     (segmentation fault) and possibly execute arbitrary code     via a string that is converted to a floating point     value, as demonstrated using (1) the to_f method or (2)     JSON.parse. (CVE-2013-4164)

The remote host is running a version of Mac OS X 10.7, 10.8, or 10.9 that does not have Security Update 2014-002 applied. This update contains several security-related fixes for the following components :

  - CFNetwork HTTPProtocl
  - CoreServicesUIAgent
  - FontParser
  - Heimdal Kerberos
  - ImageIO
  - Intel Graphics Driver
  - IOKit Kernel
  - Kernel
  - Power Management
  - Ruby
  - Security - Secure Transport
  - Window Server

Note that successful exploitation of the most serious issues could result in arbitrary code execution.

Ruby developers report :

Any time a string is converted to a floating point value, a specially crafted string can cause a heap overflow. This can lead to a denial of service attack via segmentation faults and possibly arbitrary code execution. Any program that converts input of unknown origin to floating point values (especially common when accepting JSON) are vulnerable.

Heap-based buffer overflow in Ruby 1.8, 1.9 before 1.9.3-p484, 2.0 before 2.0.0-p353, 2.1 before 2.1.0 preview2, and trunk before revision 43780 allows context-dependent attackers to cause a denial of service (segmentation fault) and possibly execute arbitrary code via a string that is converted to a floating point value, as demonstrated using (1) the to_f method or (2) JSON.parse.

A vulnerability was found and corrected in ruby :

Heap-based buffer overflow in Ruby 1.8, 1.9 before 1.9.3-p484, 2.0 before 2.0.0-p353, 2.1 before 2.1.0 preview2, and trunk before revision 43780 allows context-dependent attackers to cause a denial of service (segmentation fault) and possibly execute arbitrary code via a string that is converted to a floating point value, as demonstrated using (1) the to_f method or (2) JSON.parse (CVE-2013-4164).

The updated packages have been patched to correct these issues.

A buffer overflow flaw was found in the way Ruby parsed floating point numbers from their text representation. If an application using Ruby accepted untrusted input strings and converted them to floating point numbers, an attacker able to provide such input could cause the application to crash or, possibly, execute arbitrary code with the privileges of the application. (CVE-2013-4164)

The following security issue was fixed in ruby19 :

the following security issue was fixed in ruby20 :

  - fix CVE-2013-4164: heap overflow in float point parsing     (bnc#851803) The file CVE-2013-4164.patch contains the     patch

The remote host is affected by the vulnerability described in GLSA-201412-27 (Ruby: Denial of Service)

    Multiple vulnerabilities have been discovered in Ruby. Please review the       CVE identifiers referenced below for details.
  Impact :

    A context-dependent attacker could possibly execute arbitrary code with       the privileges of the process, cause a Denial of Service condition, or       bypass security restrictions.
  Workaround :

    There is no known workaround at this time.

The remote Solaris system is missing necessary patches to address security updates :

  - Heap-based buffer overflow in Ruby 1.8, 1.9 before     1.9.3-p484, 2.0 before 2.0.0-p353, 2.1 before 2.1.0     preview2, and trunk before revision 43780 allows     context-dependent attackers to cause a denial of service     (segmentation fault) and possibly execute arbitrary code     via a string that is converted to a floating point     value, as demonstrated using (1) the to_f method or (2)     JSON.parse. (CVE-2013-4164)

  - Algorithmic complexity vulnerability in     Gem::Version::VERSION_PATTERN in lib/     rubygems/version.rb in RubyGems before 1.8.23.1, 1.8.24     through 1.8.25, 2.0.x before 2.0.8, and 2.1.x before     2.1.0, as used in Ruby 1.9.0 through 2.0.0p247, allows     remote attackers to cause a denial of service (CPU     consumption) via a crafted gem version that triggers a     large amount of backtracking in a regular expression.
    (CVE-2013-4287)

  - Algorithmic complexity vulnerability in     Gem::Version::ANCHORED_VERSION_PATTERN in     lib/rubygems/version.rb in RubyGems before 1.8.23.2,     1.8.24 through 1.8.26, 2.0.x before 2.0.10, and 2.1.x     before 2.1.5, as used in Ruby 1.9.0 through 2.0.0p247,     allows remote attackers to cause a denial of service     (CPU consumption) via a crafted gem version that     triggers a large amount of backtracking in a regular     expression. NOTE: this issue is due to an incomplete fix     for CVE-2013-4287. (CVE-2013-4363)

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
71093	RHEL 6 : ruby (RHSA-2013:1764)	Nessus	Red Hat Local Security Checks	2013/11/26	2025/4/15	critical
71184	Fedora 19 : ruby-2.0.0.353-16.fc19 (2013-22423)	Nessus	Fedora Local Security Checks	2013/12/4	2021/1/11	medium
74124	Mac OS X : OS X Server < 3.1.2 Heap-Based Buffer Overflow	Nessus	MacOS X Local Security Checks	2014/5/21	2018/7/14	medium
79176	CentOS 6 : ruby (CESA-2013:1764)	Nessus	CentOS Local Security Checks	2014/11/12	2021/1/4	medium
80758	Oracle Solaris Third-Party Patch Update : ruby (cve_2013_4164_buffer_errors)	Nessus	Solaris Local Security Checks	2015/1/19	2021/1/14	medium
73648	Mac OS X Multiple Vulnerabilities (Security Update 2014-002)	Nessus	MacOS X Local Security Checks	2014/4/22	2024/5/28	critical
71072	FreeBSD : ruby -- Heap Overflow in Floating Point Parsing (cc9043cf-7f7a-426e-b2cc-8d1980618113)	Nessus	FreeBSD Local Security Checks	2013/11/25	2021/1/6	medium
71079	Amazon Linux AMI : ruby (ALAS-2013-248)	Nessus	Amazon Linux Local Security Checks	2013/11/26	2018/4/18	medium
71100	Mandriva Linux Security Advisory : ruby (MDVSA-2013:286)	Nessus	Mandriva Local Security Checks	2013/11/27	2021/1/6	medium
71202	Scientific Linux Security Update : ruby on SL6.x i386/x86_64 (20131125)	Nessus	Scientific Linux Local Security Checks	2013/12/4	2021/1/14	medium
75221	openSUSE Security Update : ruby19 (openSUSE-SU-2013:1835-1)	Nessus	SuSE Local Security Checks	2014/6/13	2021/1/19	medium
75224	openSUSE Security Update : ruby20 (openSUSE-SU-2013:1834-1)	Nessus	SuSE Local Security Checks	2014/6/13	2021/1/19	medium
79980	GLSA-201412-27 : Ruby: Denial of Service	Nessus	Gentoo Local Security Checks	2014/12/15	2021/1/6	high
80757	Oracle Solaris Third-Party Patch Update : ruby (multiple_vulnerabilities_in_ruby1)	Nessus	Solaris Local Security Checks	2015/1/19	2021/1/14	medium

检测

插件搜索

critical

medium

medium

medium

medium

critical

medium

medium

medium

medium

medium

medium

high

medium