CVE Feed

Dashboard / CVE / CVE-2013-4164

CVE-2013-4164

Heap-based buffer overflow in Ruby 1.8, 1.9 before 1.9.3-p484, 2.0 before 2.0.0-p353, 2.1 before 2.1.0 preview2, and trunk before revision 43780 allows context-dependent attackers to cause a denial of service (segmentation fault) and possibly execute arbitrary code via a string that is converted to a floating point value, as demonstrated using (1) the to_f method or (2) JSON.parse.

Published:Nov 22, 2013

Last Modified:Apr 11, 2025

EPS:Nov 23, 2013

EPSS Score:0.17843

CVSS Score:6.8

Affected Products

Vendor

Product

Action

Vendor

Redhat

Product

Cloudforms Managementengine

Redhat

Cloudforms Managementengine

Vendor

Redhat

Product

Enterprise Linux

Redhat

Enterprise Linux

Vendor

Redhat

Product

Openstack

Redhat

Openstack

Vendor

Redhat

Product

Rhel Eus

Redhat

Rhel Eus

Vendor

Redhat

Product

Rhel Software Collections

Redhat

Rhel Software Collections

Vendor

Ruby-lang

Product

Ruby

Ruby-lang

Ruby

Exploits

https://www.ruby-lang.org/en/news/2013/11/22/heap-overflow-in-floating-point-parsing-cve-2013-4164 https://www.ruby-lang.org/en/news/2013/11/22/heap-overflow-in-floating-point-parsing-cve-2013-4164

Common Weakness Enumeration

CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer

CWE-122 Heap-based Buffer Overflow

CWE-228 Improper Handling of Syntactically Invalid Structure

Common Attack Pattern Enumeration and Classification (CAPEC)

CAPEC-10 Buffer Overflow via Environment Variables

CAPEC-100 Overflow Buffers

CAPEC-123 Buffer Manipulation

CAPEC-14 Client-side Injection-induced Buffer Overflow

CAPEC-24 Filter Failure through Buffer Overflow

CAPEC-42 MIME Conversion

CAPEC-44 Overflow Binary Resource File

CAPEC-45 Buffer Overflow via Symbolic Links

CAPEC-46 Overflow Variables and Tags

CAPEC-47 Buffer Overflow via Parameter Expansion

CAPEC-8 Buffer Overflow in an API Call

CAPEC-9 Buffer Overflow in Local Command-Line Utilities

CAPEC-92 Forced Integer Overflow

Related CVEs

CVE-2020-25716 (CVSS 8.1) — A flaw was found in Cloudforms. A role-based privileges escalation flaw where export or import of administrato…

CVE-2020-14369 (CVSS 6.3) — This release fixes a Cross Site Request Forgery vulnerability was found in Red Hat CloudForms which forces end…

CVE-2020-10778 (CVSS 6) — In Red Hat CloudForms 4.7 and 5, the read only widgets can be edited by inspecting the forms and dropping the …

CVE-2020-10783 (CVSS 8.3) — Red Hat CloudForms 4.7 and 5 is affected by a role-based privilege escalation flaw. An attacker with EVM-Opera…

CVE-2020-10777 (CVSS 5.4) — A cross-site scripting flaw was found in Report Menu feature of Red Hat CloudForms 4.7 and 5. An attacker coul…

CVE-2020-14296 (CVSS 7.1) — Red Hat CloudForms 4.7 and 5 was vulnerable to Server-Side Request Forgery (SSRF) flaw. With the access to add…

CVE-2020-14324 (CVSS 9.1) — A high severity vulnerability was found in all active versions of Red Hat CloudForms before 5.11.7.0. The out …

CVE-2020-10779 (CVSS 6.5) — Red Hat CloudForms 4.7 and 5 leads to insecure direct object references (IDOR) and functional level access con…

CVE-2020-10780 (CVSS 6.3) — Red Hat CloudForms 4.7 and 5 is affected by CSV Injection flaw, a crafted payload stays dormant till a victim …

CVE-2020-14325 (CVSS 9.1) — Red Hat CloudForms before 5.11.7.0 was vulnerable to the User Impersonation authorization flaw which allows ma…

References

http://archives.neohapsis.com/archives/bugtraq/2014-04/0134.html

http://archives.neohapsis.com/archives/bugtraq/2014-10/0103.html

http://lists.opensuse.org/opensuse-security-announce/2013-12/msg00009.html

http://lists.opensuse.org/opensuse-updates/2013-12/msg00027.html

http://lists.opensuse.org/opensuse-updates/2013-12/msg00028.html

http://osvdb.org/100113

http://rhn.redhat.com/errata/RHSA-2013-1763.html

http://rhn.redhat.com/errata/RHSA-2013-1764.html

http://rhn.redhat.com/errata/RHSA-2013-1767.html

http://rhn.redhat.com/errata/RHSA-2014-0011.html

http://rhn.redhat.com/errata/RHSA-2014-0215.html

http://secunia.com/advisories/55787

http://secunia.com/advisories/57376

http://www.debian.org/security/2013/dsa-2809

http://www.debian.org/security/2013/dsa-2810

http://www.securityfocus.com/bid/63873

http://www.ubuntu.com/usn/USN-2035-1

https://puppet.com/security/cve/cve-2013-4164

https://support.apple.com/kb/HT6536

https://www.ruby-lang.org/en/news/2013/11/22/heap-overflow-in-floating-point-parsing-cve-2013-4164

https://www.ruby-lang.org/en/news/2013/11/22/ruby-1-9-3-p484-is-released

https://www.ruby-lang.org/en/news/2013/11/22/ruby-2-0-0-p353-is-released

http://archives.neohapsis.com/archives/bugtraq/2014-04/0134.html

http://archives.neohapsis.com/archives/bugtraq/2014-10/0103.html

http://lists.opensuse.org/opensuse-security-announce/2013-12/msg00009.html

http://lists.opensuse.org/opensuse-updates/2013-12/msg00027.html

http://lists.opensuse.org/opensuse-updates/2013-12/msg00028.html

http://osvdb.org/100113

http://rhn.redhat.com/errata/RHSA-2013-1763.html

http://rhn.redhat.com/errata/RHSA-2013-1764.html

http://rhn.redhat.com/errata/RHSA-2013-1767.html

http://rhn.redhat.com/errata/RHSA-2014-0011.html

http://rhn.redhat.com/errata/RHSA-2014-0215.html

http://secunia.com/advisories/55787

http://secunia.com/advisories/57376

http://www.debian.org/security/2013/dsa-2809

http://www.debian.org/security/2013/dsa-2810

http://www.securityfocus.com/bid/63873

http://www.ubuntu.com/usn/USN-2035-1

https://puppet.com/security/cve/cve-2013-4164

https://support.apple.com/kb/HT6536

https://www.ruby-lang.org/en/news/2013/11/22/heap-overflow-in-floating-point-parsing-cve-2013-4164

https://www.ruby-lang.org/en/news/2013/11/22/ruby-1-9-3-p484-is-released

https://www.ruby-lang.org/en/news/2013/11/22/ruby-2-0-0-p353-is-released

Common Vulnerability Scoring System

Attack Vector

Network

Adjacent

Local

Physical

Privileges Required

None

Low

High

User Interaction

None

Required

Scope

Unchanged

Changed

Confidentiality

None

Low

High

Integrity

None

Low

High

Availability

None

Low

High