MGASA-2014-0003
- Source
- https://advisories.mageia.org/MGASA-2014-0003.html
- Import Source
- https://advisories.mageia.org/MGASA-2014-0003.json
- JSON Data
- https://api.osv.dev/v1/vulns/MGASA-2014-0003
- Upstream
- Published
- 2014-01-06T01:02:29Z
- Modified
- 2026-04-16T06:22:45Z
- Summary
- Updated ruby package fixes security vulnerability
- Details
-
Charlie Somerville discovered that Ruby incorrectly handled floating point number conversion. An attacker could possibly use this issue with an application that converts text to floating point numbers to cause the application to crash, resulting in a denial of service, or possibly execute arbitrary code (CVE-2013-4164).
- References
-
- https://advisories.mageia.org/MGASA-2014-0003.html
- https://bugs.mageia.org/show_bug.cgi?id=11734
- https://www.ruby-lang.org/en/news/2013/11/22/heap-overflow-in-floating-point-parsing-cve-2013-4164/
- https://www.ruby-lang.org/en/news/2013/11/22/ruby-1-9-3-p484-is-released/
- http://www.ubuntu.com/usn/usn-2035-1
- Credits
-
-
- Mageia - COORDINATOR
-
Affected packages
Mageia:3 / ruby
Package
- Name
- ruby
- Purl
- pkg:rpm/mageia/ruby?arch=source&distro=mageia-3