CVE:CVE-2014-4975
CNNVD:CNNVD-201407-577
Ruby是日本软件开发者松本行弘所研发的一种跨平台、面向对象的动态类型编程语言。
Ruby 1.9.3及之前版本和2.x版本至2.1.2版本的pack.c文件中的‘encodes’函数中存在差异错误漏洞。当程序使用特定的格式化字符串说明符时，攻击者可利用该漏洞造成拒绝服务（分段错误）。
solution:Upgrade ruby-lang ruby to a higher version than 1.9.3,2.0,2.0.0,2.0.0:p0,2.0.0:p195,2.0.0:p247,2.0.0:preview1,2.0.0:preview2,2.0.0:rc1,2.0.0:rc2,2.1,2.1:preview1,2.1.1,2.1.2,and avoid the version (,1.9.3],2.0,2.0.0,2.0.0:p0,2.0.0:p195,2.0.0:p247,2.0.0:preview1,2.0.0:preview2,2.0.0:rc1,2.0.0:rc2,2.1,2.1:preview1,2.1.1,2.1.2; Upgrade redhat enterprise_linux_desktop to a higher version than 7.0,and avoid the version 7.0; Upgrade redhat enterprise_linux_hpc_node to a higher version than 7.0,and avoid the version 7.0; Upgrade redhat enterprise_linux_server to a higher version than 7.0,and avoid the version 7.0; Upgrade redhat enterprise_linux_workstation to a higher version than 7.0,and avoid the version 7.0; Upgrade debian debian_linux to a higher version than 7.0,8.0,and avoid the version 7.0,8.0; Upgrade canonical ubuntu_linux to a higher version than 12.04,14.04,14.10,and avoid the version 12.04,14.04,14.10