Contents

---
engine: ruby
cve: 2008-3443
url: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-3443
title: Ruby Memory allocation failure in Ruby regex engine (remotely exploitable DoS)
date: 2008-08-14
description: |
  The regular expression engine (regex.c) in Ruby 1.8.5 and earlier, 1.8.6
  through 1.8.6-p286, 1.8.7 through 1.8.7-p71, and 1.9 through r18423 allows
  remote attackers to cause a denial of service (infinite loop and crash) via
  multiple long requests to a Ruby socket, related to memory allocation
  failure, and as demonstrated against Webrick.
cvss_v2: 5.0
patched_versions:
  - ~> 1.8.6.287
  - ~> 1.8.7.72
  - ">= 1.9.0"

Version data entries

6 entries across 6 versions & 2 rubygems

Version	Path
bundler-audit-0.7.0.1	data/ruby-advisory-db/rubies/ruby/CVE-2008-3443.yml
bundler-budit-0.6.2	data/ruby-advisory-db/rubies/ruby/CVE-2008-3443.yml
bundler-budit-0.6.1	data/ruby-advisory-db/rubies/ruby/CVE-2008-3443.yml
bundler-audit-0.6.1	data/ruby-advisory-db/rubies/ruby/CVE-2008-3443.yml
bundler-audit-0.6.0	data/ruby-advisory-db/rubies/ruby/CVE-2008-3443.yml
bundler-audit-0.5.0	data/ruby-advisory-db/rubies/ruby/CVE-2008-3443.yml