The str_buf_cat function in string.c in Ruby 1.9.3, 2.0.0, and 2.1 allows context-dependent attackers to cause a denial of service (segmentation fault and crash) via a long string.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Rails | Rubyonrails | 1.9.3 (including) | 1.9.3 (including) |
| Rails | Rubyonrails | 2.0.0 (including) | 2.0.0 (including) |
| Rails | Rubyonrails | 2.1.0 (including) | 2.1.0 (including) |
| Ruby1.8 | Ubuntu | lucid | * |
| Ruby1.8 | Ubuntu | precise | * |
| Ruby1.8 | Ubuntu | saucy | * |
| Ruby1.9.1 | Ubuntu | devel | * |
| Ruby1.9.1 | Ubuntu | lucid | * |
| Ruby1.9.1 | Ubuntu | precise | * |
| Ruby1.9.1 | Ubuntu | saucy | * |
| Ruby1.9.1 | Ubuntu | trusty | * |
| Ruby2.0 | Ubuntu | devel | * |
| Ruby2.0 | Ubuntu | saucy | * |
| Ruby2.0 | Ubuntu | trusty | * |
| Ruby2.1 | Ubuntu | devel | * |