5

CVE-2008-3443: ruby-lang ruby Resource Management Errors

CVSS: 5.0v2.0MediumModified
AliasesDSA-1695-1
Published 14-08-2008Last modified 07-08-2024
Open JSON

Vulnerability summary

CVE-2008-3443 is a medium (CVSS 5.0) Resource Management Errors vulnerability in ruby-lang ruby. EPSS estimates a 15.68% chance of exploitation in the next 30 days, higher than 96.8% of scored vulnerabilities. 1 public exploit is recorded.

Overall risk
33/100
0100
Medium · default modelHow is this calculated?
CVSS score
5.0/10
010
Medium · v2.0 (NVD)
EPSS score
15.68%
0%100%
Medium · 0.00 pp in 30 days
KEVNot listedIn no KEV catalog
RansomwareNone recordedNo known use recorded
Public exploits1exploit-database

Advisory lineage

Upstream 0 · Downstream 3
RHSA-2008:0895RHSA-2008:0896RHSA-2008:0897

Timeline

  1. 14-08-2008
    PublishedVulnerability first disclosed.
  2. 07-08-2024
    Last modifiedVulnerability information updated.

Description

The regular expression engine (regex.c) in Ruby 1.8.5 and earlier, 1.8.6 through 1.8.6-p286, 1.8.7 through 1.8.7-p71, and 1.9 through r18423 allows remote attackers to cause a denial of service (infinite loop and crash) via multiple long requests to a Ruby socket, related to memory allocation failure, and as demonstrated against Webrick.

CVSS metrics

1 score · 1 source · 1 version

EPSS trend

Probability

15.68%

Chance of exploitation in the next 30 days

Percentile

97%

Versus all other CVEs

30-day change

0.00 pp

From 15.68% on 19-09-2026

19-09-202619-10-2026
EPSS score
15.68%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

1 found
  • exploit-databasedosmultipleVerified

    Ruby 1.9 - regex engine Remote Socket Memory Leak

    Maturity: poc

Weaknesses

CWE · root cause

Affected systems

Debian2 products
  • ruby1.8< 1.8.5-4etch4
  • ruby1.9< 1.9.0+20060609-1etch4
Ruby-lang1 product
  • ruby1.6.8 | 1.8.0 | 1.8.1 | 1.8.1:-9 | 1.8.2 | 1.8.2:preview2 | 1.8.2:preview3 | 1.8.2:preview4 | 1.8.3 | 1.8.3:preview1 | 1.8.3:preview2 | 1.8.3:preview3 | 1.8.4 | 1.8.4:preview1 | 1.8.4:preview2 | 1.8.4:preview3 | 1.8.5 | 1.8.5:p11 | 1.8.5:p113 | 1.8.5:p114 | 1.8.5:p115 | 1.8.5:p12 | 1.8.5:p2 | 1.8.5:p231 | 1.8.5:p35 | 1.8.5:p52 | 1.8.5:preview1 | 1.8.5:preview2 | 1.8.5:preview3 | 1.8.5:preview4 | 1.8.5:preview5 | 1.8.6 | 1.8.6:p110 | 1.8.6:p111 | 1.8.6:p114 | 1.8.6:p230 | 1.8.6:p286 | 1.8.6:p36 | 1.8.6:preview1 | 1.8.6:preview2 | 1.8.6:preview3 | 1.8.7 | 1.8.7:p17 | 1.8.7:p22 | 1.8.7:p71 | 1.8.7:preview1 | 1.8.7:preview2 | 1.8.7:preview3 | 1.8.7:preview4 | 1.9.0 | 1.9.0:r18423

2 vendors · 3 products

References

26 links
Show all 26 references