CVE-2016-2339

Name of the Vulnerable Software and Affected Versions Ruby (affected versions not specified)

Description A heap overflow issue exists in the Fiddle::Function.new "initialize" function functionality of Ruby. The heap buffer "arg types" allocation is made based on the args array length. A specially constructed object passed as an element of the args array can increase this array size after the mentioned allocation and cause a heap overflow. This can potentially allow a remote attacker to cause a denial of service or buffer overflow by modifying the array length.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.