CVE-2014-4975

Severity: medium (CVSS 5.0 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 3.5% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2014-11-15 · updated 2026-06-17
Weakness: CWE-119

Description

Off-by-one error in the encodes function in pack.c in Ruby 1.9.3 and earlier, and 2.x through 2.1.2, when using certain format string specifiers, allows context-dependent attackers to cause a denial of service (segmentation fault) via vectors that trigger a stack-based buffer overflow.

Affected products

Canonical Ubuntu Linux: 12.04, 14.04, 14.10
Debian Linux: 7.0, 8.0
RedHat Enterprise Linux Desktop: 7.0
RedHat Enterprise Linux Hpc Node: 7.0
RedHat Enterprise Linux Server: 7.0
RedHat Enterprise Linux Workstation: 7.0
Ruby: through 1.9.3; 2.0, 2.0.0, 2.0.0-p0, 2.0.0-p195, 2.0.0-p247, 2.0.0-preview1 (+7)

References

http://advisories.mageia.org/MGASA-2014-0472.html
http://rhn.redhat.com/errata/RHSA-2014-1912.html
http://rhn.redhat.com/errata/RHSA-2014-1913.html
http://rhn.redhat.com/errata/RHSA-2014-1914.html
http://svn.ruby-lang.org/cgi-bin/viewvc.cgi?view=revision&revision=46778
http://www.debian.org/security/2015/dsa-3157
http://www.mandriva.com/security/advisories?name=MDVSA-2015:129
http://www.openwall.com/lists/oss-security/2014/07/09/13
http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html
http://www.securityfocus.com/bid/68474
http://www.ubuntu.com/usn/USN-2397-1
https://bugs.ruby-lang.org/issues/10019

Get alerted when CVE-2014-4975 or the next vulnerability affects your stack