MGASA-2014-0003

Advisory lineage Upstream: 1 Downstream: 0
Upstream
CVE-2013-4164
Published: 06 Jan 2014, 01:02
Last modified:16 Apr 2026, 06:22

Vulnerability Summary

Overall Risk (default)
minimal
0/100
CVSS Score
No data
EPSS Score
No data
KEV
Not listed
Ransomware
No reports
Public exploits
None found
Dark Web
Not detected

Timeline

06 Jan 2014, 01:02
Published
Vulnerability first disclosed
16 Apr 2026, 06:22
Last Modified
Vulnerability information updated

Description

Updated ruby package fixes security vulnerability Charlie Somerville discovered that Ruby incorrectly handled floating point number conversion. An attacker could possibly use this issue with an application that converts text to floating point numbers to cause the application to crash, resulting in a denial of service, or possibly execute arbitrary code (CVE-2013-4164).

Affected Systems

  • mageia•ruby

    < 1.9.3.p484-1.mga3

References (5)