CVE-2016-2338
CVSS V2 None
CVSS V3 Critical 9.8
Description
An exploitable heap overflow vulnerability exists in the Psych::Emitter start_document function of Ruby. In Psych::Emitter start_document function heap buffer "head" allocation is made based on tags array length. Specially constructed object passed as element of tags array can increase this array size after mentioned allocation and cause heap overflow.
Overview
- CVE ID
- CVE-2016-2338
- Assigner
- cret@cert.org
- Vulnerability Status
- Analyzed
- Published Version
- 2022-09-29T03:15:11
- Last Modified Date
- 2023-03-01T16:35:02
Weakness Enumerations
CPE Configuration (Product)
| CPE | Vulnerable | Operator | Version Start | Version End |
|---|---|---|---|---|
| cpe:2.3:a:ruby-lang:ruby:2.2.2:*:*:*:*:*:*:* | 1 | OR | ||
| cpe:2.3:a:ruby-lang:ruby:2.3.0:*:*:*:*:*:*:* | 1 | OR | ||
| cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:* | 1 | OR |
CVSS Version 3
- Version
- 3.1
- Vector String
- CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
- Attack Vector
- NETWORK
- Attack Compatibility
- LOW
- Privileges Required
- NONE
- User Interaction
- NONE
- Scope
- UNCHANGED
- Confidentiality Impact
- HIGH
- Availability Impact
- HIGH
- Base Score
- 9.8
- Base Severity
- CRITICAL
- Exploitability Score
- 3.9
- Impact Score
- 5.9
Sources
| Source Name | Source URL |
|---|---|
| NIST | https://nvd.nist.gov/vuln/detail/CVE-2016-2338 |
| MITRE | https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2338 |
History
| Created | Old Value | New Value | Data Type | Notes |
|---|---|---|---|---|
| 2022-09-29 04:00:06 | Added to TrackCVE | |||
| 2022-12-07 05:09:19 | cert@cert.org | cret@cert.org | CVE Assigner | updated |
| 2022-12-07 05:09:19 | 2022-09-29T03:15Z | 2022-09-29T03:15:11 | CVE Published Date | updated |
| 2022-12-07 05:09:20 | 2022-10-03T18:39:08 | CVE Modified Date | updated | |
| 2022-12-07 05:09:20 | Analyzed | Vulnerability Status | updated | |
| 2022-12-28 16:16:29 | 2022-12-28T16:15:08 | CVE Modified Date | updated | |
| 2022-12-28 16:16:29 | Analyzed | Modified | Vulnerability Status | updated |
| 2022-12-29 11:14:52 | Modified | Undergoing Analysis | Vulnerability Status | updated |
| 2023-03-01 17:14:49 | 2023-03-01T16:35:02 | CVE Modified Date | updated | |
| 2023-03-01 17:14:49 | Undergoing Analysis | Analyzed | Vulnerability Status | updated |