CVE-2014-4975

Off-by-one error in the encodes function in pack.c in Ruby 1.9.3 and earlier, and 2.x through 2.1.2, when using certain format string specifiers, allows context-dependent attackers to cause a denial of service (segmentation fault) via vectors that trigger a stack-based buffer overflow.

• CWE-119

• http://advisories.mageia.org/MGASA-2014-0472.htmlThird Party Advisory
• http://rhn.redhat.com/errata/RHSA-2014-1912.htmlThird Party Advisory
• http://rhn.redhat.com/errata/RHSA-2014-1913.htmlThird Party Advisory
• http://rhn.redhat.com/errata/RHSA-2014-1914.htmlThird Party Advisory
• http://svn.ruby-lang.org/cgi-bin/viewvc.cgi?view=revision&revision=46778Vendor Advisory
• http://www.debian.org/security/2015/dsa-3157Third Party Advisory
• http://www.mandriva.com/security/advisories?name=MDVSA-2015:129Broken Link
• http://www.openwall.com/lists/oss-security/2014/07/09/13Mailing List
• http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.htmlThird Party Advisory
• http://www.securityfocus.com/bid/68474Third Party Advisory, VDB Entry
• http://www.ubuntu.com/usn/USN-2397-1Third Party Advisory
• https://bugs.ruby-lang.org/issues/10019Vendor Advisory
• https://bugzilla.redhat.com/show_bug.cgi?id=1118158Issue Tracking
• https://exchange.xforce.ibmcloud.com/vulnerabilities/94706
• http://advisories.mageia.org/MGASA-2014-0472.htmlThird Party Advisory
• http://rhn.redhat.com/errata/RHSA-2014-1912.htmlThird Party Advisory
• http://rhn.redhat.com/errata/RHSA-2014-1913.htmlThird Party Advisory
• http://rhn.redhat.com/errata/RHSA-2014-1914.htmlThird Party Advisory
• http://svn.ruby-lang.org/cgi-bin/viewvc.cgi?view=revision&revision=46778Vendor Advisory
• http://www.debian.org/security/2015/dsa-3157Third Party Advisory
• http://www.mandriva.com/security/advisories?name=MDVSA-2015:129Broken Link
• http://www.openwall.com/lists/oss-security/2014/07/09/13Mailing List
• http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.htmlThird Party Advisory
• http://www.securityfocus.com/bid/68474Third Party Advisory, VDB Entry
• http://www.ubuntu.com/usn/USN-2397-1Third Party Advisory
• https://bugs.ruby-lang.org/issues/10019Vendor Advisory
• https://bugzilla.redhat.com/show_bug.cgi?id=1118158Issue Tracking
• https://exchange.xforce.ibmcloud.com/vulnerabilities/94706

Published

Nov 15, 2014

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2014-4967Multiple argument injection vulnerabilities in Ansible befor…9.8
• CVE-2014-4968The WebView class and use of the WebView.addJavascriptInterf…8.8
• CVE-2014-4971Microsoft Windows XP SP3 does not validate addresses in cert…
• CVE-2014-4972Unrestricted file upload vulnerability in the Gravity Upload…
• CVE-2014-4973The ESET Personal Firewall NDIS filter (EpFwNdis.sys) driver…
• CVE-2014-4974The ESET Personal Firewall NDIS filter (EpFwNdis.sys) kernel…
• CVE-2014-4976Dell SonicWall Scrutinizer 11.0.1 allows remote authenticate…
• CVE-2014-4977Multiple SQL injection vulnerabilities in Dell SonicWall Scr…
• CVE-2014-4978The rs_filter_graph function in librawstudio/rs-filter.c in …
• CVE-2014-4979Apple QuickTime allows remote attackers to execute arbitrary…
• CVE-2014-4980The /server/properties resource in Tenable Web UI before 2.3…
• CVE-2014-4981LPAR2RRD in 3.5 and earlier allows remote attackers to execu…9.8