The regular expression engine (regex.c) in Ruby 1.8.5 and earlier, 1.8.6 through 1.8.6-p286, 1.8.7 through 1.8.7-p71, and 1.9 through r18423 allows remote attackers to cause a denial of service (infinite loop and crash) via multiple long requests to a Ruby socket, related to memory allocation failure, and as demonstrated against Webrick.
| Software | From | Fixed in |
|---|---|---|
| ruby-lang / ruby | 1.6.8 | 1.6.8.x |
| ruby-lang / ruby | 1.8.0 | 1.8.0.x |
| ruby-lang / ruby | 1.8.1 | 1.8.1.x |
| ruby-lang / ruby | 1.8.1--9 | 1.8.1--9.x |
| ruby-lang / ruby | 1.8.2 | 1.8.2.x |
| ruby-lang / ruby | 1.8.2-preview2 | 1.8.2-preview2.x |
| ruby-lang / ruby | 1.8.2-preview3 | 1.8.2-preview3.x |
| ruby-lang / ruby | 1.8.2-preview4 | 1.8.2-preview4.x |
| ruby-lang / ruby | 1.8.3 | 1.8.3.x |
| ruby-lang / ruby | 1.8.3-preview1 | 1.8.3-preview1.x |
| ruby-lang / ruby | 1.8.3-preview2 | 1.8.3-preview2.x |
| ruby-lang / ruby | 1.8.3-preview3 | 1.8.3-preview3.x |
| ruby-lang / ruby | 1.8.4 | 1.8.4.x |
| ruby-lang / ruby | 1.8.4-preview1 | 1.8.4-preview1.x |
| ruby-lang / ruby | 1.8.4-preview2 | 1.8.4-preview2.x |
| ruby-lang / ruby | 1.8.4-preview3 | 1.8.4-preview3.x |
| ruby-lang / ruby | 1.8.5 | 1.8.5.x |
| ruby-lang / ruby | 1.8.5-p11 | 1.8.5-p11.x |
| ruby-lang / ruby | 1.8.5-p113 | 1.8.5-p113.x |
| ruby-lang / ruby | 1.8.5-p114 | 1.8.5-p114.x |
| ruby-lang / ruby | 1.8.5-p115 | 1.8.5-p115.x |
| ruby-lang / ruby | 1.8.5-p12 | 1.8.5-p12.x |
| ruby-lang / ruby | 1.8.5-p2 | 1.8.5-p2.x |
| ruby-lang / ruby | 1.8.5-p231 | 1.8.5-p231.x |
| ruby-lang / ruby | 1.8.5-p35 | 1.8.5-p35.x |
| ruby-lang / ruby | 1.8.5-p52 | 1.8.5-p52.x |
| ruby-lang / ruby | 1.8.5-preview1 | 1.8.5-preview1.x |
| ruby-lang / ruby | 1.8.5-preview2 | 1.8.5-preview2.x |
| ruby-lang / ruby | 1.8.5-preview3 | 1.8.5-preview3.x |
| ruby-lang / ruby | 1.8.5-preview4 | 1.8.5-preview4.x |
| ruby-lang / ruby | 1.8.5-preview5 | 1.8.5-preview5.x |
| ruby-lang / ruby | 1.8.6 | 1.8.6.x |
| ruby-lang / ruby | 1.8.6-p110 | 1.8.6-p110.x |
| ruby-lang / ruby | 1.8.6-p111 | 1.8.6-p111.x |
| ruby-lang / ruby | 1.8.6-p114 | 1.8.6-p114.x |
| ruby-lang / ruby | 1.8.6-p230 | 1.8.6-p230.x |
| ruby-lang / ruby | 1.8.6-p286 | 1.8.6-p286.x |
| ruby-lang / ruby | 1.8.6-p36 | 1.8.6-p36.x |
| ruby-lang / ruby | 1.8.6-preview1 | 1.8.6-preview1.x |
| ruby-lang / ruby | 1.8.6-preview2 | 1.8.6-preview2.x |
| ruby-lang / ruby | 1.8.6-preview3 | 1.8.6-preview3.x |
| ruby-lang / ruby | 1.8.7 | 1.8.7.x |
| ruby-lang / ruby | 1.8.7-p17 | 1.8.7-p17.x |
| ruby-lang / ruby | 1.8.7-p22 | 1.8.7-p22.x |
| ruby-lang / ruby | 1.8.7-p71 | 1.8.7-p71.x |
| ruby-lang / ruby | 1.8.7-preview1 | 1.8.7-preview1.x |
| ruby-lang / ruby | 1.8.7-preview2 | 1.8.7-preview2.x |
| ruby-lang / ruby | 1.8.7-preview3 | 1.8.7-preview3.x |
| ruby-lang / ruby | 1.8.7-preview4 | 1.8.7-preview4.x |
| ruby-lang / ruby | 1.9.0 | 1.9.0.x |
| ruby-lang / ruby | 1.9.0-r18423 | 1.9.0-r18423.x |