Vulnerability Name:

CVE-2013-4164 (CCN-89191)

Assigned:2013-11-22
Published:2013-11-22
Updated:2018-01-09
Summary:Heap-based buffer overflow in Ruby 1.8, 1.9 before 1.9.3-p484, 2.0 before 2.0.0-p353, 2.1 before 2.1.0 preview2, and trunk before revision 43780 allows context-dependent attackers to cause a denial of service (segmentation fault) and possibly execute arbitrary code via a string that is converted to a floating point value, as demonstrated using (1) the to_f method or (2) JSON.parse.
CVSS v3 Severity:7.3 High (CCN CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L)
Exploitability Metrics:Attack Vector (AV): Network
Attack Complexity (AC): Low
Privileges Required (PR): None
User Interaction (UI): None
Scope:Scope (S): Unchanged
Impact Metrics:Confidentiality (C): Low
Integrity (I): Low
Availibility (A): Low
CVSS v2 Severity:6.8 Medium (CVSS v2 Vector: AV:N/AC:M/Au:N/C:P/I:P/A:P)
5.0 Medium (Temporal CVSS v2 Vector: AV:N/AC:M/Au:N/C:P/I:P/A:P/E:U/RL:OF/RC:C)
Exploitability Metrics:Access Vector (AV): Network
Access Complexity (AC): Medium
Authentication (Au): None
Impact Metrics:Confidentiality (C): Partial
Integrity (I): Partial
Availibility (A): Partial
6.8 Medium (CCN CVSS v2 Vector: AV:N/AC:M/Au:N/C:P/I:P/A:P)
5.0 Medium (CCN Temporal CVSS v2 Vector: AV:N/AC:M/Au:N/C:P/I:P/A:P/E:U/RL:OF/RC:C)
Exploitability Metrics:Access Vector (AV): Network
Access Complexity (AC): Medium
Athentication (Au): None
Impact Metrics:Confidentiality (C): Partial
Integrity (I): Partial
Availibility (A): Partial
7.5 High (REDHAT CVSS v2 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P)
5.5 Medium (REDHAT Temporal CVSS v2 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P/E:U/RL:OF/RC:C)
Exploitability Metrics:Access Vector (AV): Network
Access Complexity (AC): Low
Authentication (Au): None
Impact Metrics:Confidentiality (C): Partial
Integrity (I): Partial
Availibility (A): Partial
Vulnerability Type:CWE-119
CWE-228
CWE-122
CWE-122
Vulnerability Consequences:Gain Access
References:Source: APPLE
Type: UNKNOWN
APPLE-SA-2014-04-22-1

Source: APPLE
Type: UNKNOWN
APPLE-SA-2014-10-16-3

Source: MITRE
Type: CNA
CVE-2013-4164

Source: SUSE
Type: UNKNOWN
SUSE-SU-2013:1897

Source: SUSE
Type: UNKNOWN
openSUSE-SU-2013:1834

Source: SUSE
Type: UNKNOWN
openSUSE-SU-2013:1835

Source: OSVDB
Type: UNKNOWN
100113

Source: CCN
Type: Puppet Labs Web Site
CVE-2013-4164 (Heap overflow in floating point parsing in RubyGems)

Source: REDHAT
Type: UNKNOWN
RHSA-2013:1763

Source: CCN
Type: RHSA-2013-1764
Critical: ruby security update

Source: REDHAT
Type: UNKNOWN
RHSA-2013:1764

Source: CCN
Type: RHSA-2013-1767
Critical: ruby security update

Source: REDHAT
Type: UNKNOWN
RHSA-2013:1767

Source: CCN
Type: RHSA-2014-0011
Critical: ruby193-ruby security update

Source: REDHAT
Type: UNKNOWN
RHSA-2014:0011

Source: REDHAT
Type: UNKNOWN
RHSA-2014:0215

Source: CCN
Type: SA55787
Ruby Floating Point Parsing Buffer Overflow Vulnerability

Source: SECUNIA
Type: Vendor Advisory
55787

Source: CCN
Type: SA56251
Puppet Enterprise Multiple Vulnerabilities

Source: CCN
Type: SA56252
Puppet Enterprise Multiple Vulnerabilities

Source: CCN
Type: SA56661
IBM Security Network Protection Ruby Two Vulnerabilities

Source: SECUNIA
Type: UNKNOWN
57376

Source: CCN
Type: Apple Web site
Security Update 2014-002

Source: DEBIAN
Type: UNKNOWN
DSA-2809

Source: DEBIAN
Type: UNKNOWN
DSA-2810

Source: DEBIAN
Type: DSA-2809
ruby1.8 -- several vulnerabilities

Source: DEBIAN
Type: DSA-2810
ruby1.9.1 -- heap overflow

Source: CCN
Type: OSVDB ID: 100113
Ruby String Conversion Floating Point Number Parsing Heap Buffer Overflow

Source: BID
Type: UNKNOWN
63873

Source: CCN
Type: BID-63873
Ruby Floating Point Parsing Heap Buffer Overflow Vulnerability

Source: UBUNTU
Type: UNKNOWN
USN-2035-1

Source: XF
Type: UNKNOWN
ruby-cve20134164-bo(89191)

Source: CONFIRM
Type: UNKNOWN
https://puppet.com/security/cve/cve-2013-4164

Source: CONFIRM
Type: UNKNOWN
https://support.apple.com/kb/HT6536

Source: CONFIRM
Type: Exploit
https://www.ruby-lang.org/en/news/2013/11/22/heap-overflow-in-floating-point-parsing-cve-2013-4164

Source: CCN
Type: Ruby Web site
Heap Overflow in Floating Point Parsing (CVE-2013-4164)

Source: CONFIRM
Type: UNKNOWN
https://www.ruby-lang.org/en/news/2013/11/22/ruby-1-9-3-p484-is-released

Source: CONFIRM
Type: Patch
https://www.ruby-lang.org/en/news/2013/11/22/ruby-2-0-0-p353-is-released

Source: CCN
Type: WhiteSource Vulnerability Database
CVE-2013-4164

Vulnerable Configuration:Configuration 1:
  • cpe:/a:ruby-lang:ruby:1.8:*:*:*:*:*:*:*
  • OR cpe:/a:ruby-lang:ruby:1.9:*:*:*:*:*:*:*
  • OR cpe:/a:ruby-lang:ruby:1.9.1:*:*:*:*:*:*:*
  • OR cpe:/a:ruby-lang:ruby:1.9.2:*:*:*:*:*:*:*
  • OR cpe:/a:ruby-lang:ruby:1.9.3:*:*:*:*:*:*:*
  • OR cpe:/a:ruby-lang:ruby:2.0.0:*:*:*:*:*:*:*
  • OR cpe:/a:ruby-lang:ruby:2.1:preview1:*:*:*:*:*:*

    • Configuration RedHat 1:
  • cpe:/o:redhat:enterprise_linux:6:*:*:*:*:*:*:*

    • Configuration RedHat 2:
  • cpe:/o:redhat:enterprise_linux:6::client:*:*:*:*:*

    • Configuration RedHat 3:
  • cpe:/o:redhat:enterprise_linux:6::computenode:*:*:*:*:*

    • Configuration RedHat 4:
  • cpe:/o:redhat:enterprise_linux:6::server:*:*:*:*:*

    • Configuration RedHat 5:
  • cpe:/o:redhat:enterprise_linux:6::workstation:*:*:*:*:*

    • Configuration CCN 1:
  • cpe:/o:redhat:enterprise_linux:6::server:*:*:*:*:*
  • OR cpe:/o:redhat:enterprise_linux:6::workstation:*:*:*:*:*
  • OR cpe:/o:redhat:enterprise_linux_desktop:6:*:*:*:*:*:*:*
  • OR cpe:/o:redhat:enterprise_linux_hpc_node:6:*:*:*:*:*:*:*
  • OR cpe:/a:puppet:puppet:2.7.0:*:*:*:*:*:*:*
  • OR cpe:/o:apple:mac_os_x:10.8.5:*:*:*:*:*:*:*
  • OR cpe:/o:apple:mac_os_x:10.8.5:*:*:*:*:*:*:*
  • OR cpe:/a:puppet:puppet:3.4.0:*:*:*:*:*:*:*
  • OR cpe:/a:puppet:puppet:3.3.2:*:*:*:*:*:*:*
  • OR cpe:/o:apple:mac_os_x:10.7.5:*:*:*:*:*:*:*
  • OR cpe:/o:apple:mac_os_x_server:10.7.5:*:*:*:*:*:*:*
  • OR cpe:/o:apple:mac_os_x:10.9.2:*:*:*:*:*:*:*
  • OR cpe:/a:redhat:openstack:3.0:*:*:*:*:*:*:*

    • * Denotes that component is vulnerable
    Oval Definitions
    Definition IDClassTitleLast Modified
    oval:org.opensuse.security:def:20134164
    V
    		CVE-2013-4164
    2022-05-20
    oval:org.opensuse.security:def:31756
    P
    		Security update for apache2 (Important)
    2022-01-12
    oval:org.opensuse.security:def:31755
    P
    		Security update for libvirt (Important)
    2022-01-10
    oval:org.opensuse.security:def:26224
    P
    		Security update for libvirt (Important)
    2022-01-05
    oval:org.opensuse.security:def:34617
    P
    		Security update for chrony (Moderate)
    2021-12-22
    oval:org.opensuse.security:def:26180
    P
    		Security update for php74 (Moderate)
    2021-12-06
    oval:org.opensuse.security:def:26179
    P
    		Security update for gmp (Moderate)
    2021-12-02
    oval:org.opensuse.security:def:32209
    P
    		Security update for postgresql10 (Important)
    2021-10-20
    oval:org.opensuse.security:def:29431
    P
    		Security update for webkit2gtk3 (Important)
    2021-10-06
    oval:org.opensuse.security:def:26123
    P
    		Security update for openssl-1_0_0 (Low)
    2021-09-09
    oval:org.opensuse.security:def:26115
    P
    		Security update for libesmtp (Important)
    2021-09-02
    oval:org.opensuse.security:def:55233
    P
    		Security update for java-1_8_0-openjdk (Important)
    2021-08-20
    oval:org.opensuse.security:def:26104
    P
    		Security update for libcares2 (Important)
    2021-08-16
    oval:org.opensuse.security:def:26103
    P
    		Security update for the Linux Kernel (Important)
    2021-08-10
    oval:org.opensuse.security:def:33935
    P
    		Security update for libnettle (Important)
    2021-06-23
    oval:org.opensuse.security:def:32122
    P
    		Security update for apache2 (Important)
    2021-06-17
    oval:org.opensuse.security:def:55911
    P
    		Security update for spice (Important)
    2021-06-08
    oval:org.opensuse.security:def:42696
    P
    		ruby-1.8.7.p357-0.9.17.1 on GA media (Moderate)
    2021-06-08
    oval:org.opensuse.security:def:36289
    P
    		ruby-1.8.7.p357-0.9.17.1 on GA media (Moderate)
    2021-06-08
    oval:org.opensuse.security:def:36554
    P
    		ruby-devel-1.8.7.p357-0.9.17.1 on GA media (Moderate)
    2021-06-08
    oval:org.opensuse.security:def:26042
    P
    		Security update for cups (Important)
    2021-04-30
    oval:org.opensuse.security:def:29345
    P
    		Security update for spamassassin (Important)
    2021-04-12
    oval:org.opensuse.security:def:32065
    P
    		Security update for the Linux Kernel (Live Patch 37 for SLE 12 SP3) (Important)
    2021-04-07
    oval:org.opensuse.security:def:29488
    P
    		Security update for wavpack (Important)
    2021-03-24
    oval:org.opensuse.security:def:26212
    P
    		Security update for python3 (Moderate)
    2021-03-19
    oval:org.opensuse.security:def:26213
    P
    		Security update for evolution-data-server (Moderate)
    2021-03-19
    oval:org.opensuse.security:def:57187
    P
    		Security update for the Linux Kernel (Live Patch 32 for SLE 12 SP3) (Important)
    2021-03-17
    oval:org.opensuse.security:def:34657
    P
    		Security update for glib2 (Important)
    2021-03-16
    oval:org.opensuse.security:def:33766
    P
    		Security update for screen (Important)
    2021-02-17
    oval:org.opensuse.security:def:55830
    P
    		Security update for ImageMagick (Important)
    2021-01-22
    oval:org.opensuse.security:def:33911
    P
    		Security update for dnsmasq (Important)
    2021-01-19
    oval:org.opensuse.security:def:33979
    P
    		Security update for java-1_8_0-ibm (Moderate)
    2021-01-05
    oval:org.opensuse.security:def:33872
    P
    		Security update for python-setuptools (Important)
    2020-12-02
    oval:org.opensuse.security:def:26388
    P
    		Security update for irssi (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:26733
    P
    		lcms on GA media (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:26879
    P
    		cvs on GA media (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:26416
    P
    		Security update for nginx (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:26789
    P
    		ntp on GA media (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:26944
    P
    		libcgroup1 on GA media (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:27224
    P
    		libupsclient1 on GA media (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:27575
    P
    		unixODBC_23-devel on GA media (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:27867
    P
    		Security update for python-httplib2
    2020-12-01
    oval:org.opensuse.security:def:28598
    P
    		Security update for ruby
    2020-12-01
    oval:org.opensuse.security:def:29145
    P
    		Security update for kvm (Important)
    2020-12-01
    oval:org.opensuse.security:def:29829
    P
    		Security update for libjpeg
    2020-12-01
    oval:org.opensuse.security:def:30568
    P
    		Security update for libvirt
    2020-12-01
    oval:org.opensuse.security:def:54388
    P
    		tar on GA media (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:54961
    P
    		m4 on GA media (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:55626
    P
    		Security update for flash-player (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:31973
    P
    		Security update for jakarta-taglibs-standard (Important)
    2020-12-01
    oval:org.opensuse.security:def:32365
    P
    		Security update for supportutils (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:32531
    P
    		ipsec-tools on GA media (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:33234
    P
    		postgresql on GA media (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:33609
    P
    		Security update for Mozilla Firefox
    2020-12-01
    oval:org.opensuse.security:def:25914
    P
    		Security update for firebird (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:26264
    P
    		Security update for gegl (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:26556
    P
    		gmime on GA media (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:27287
    P
    		ruby on GA media (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:26445
    P
    		Security update for chromium (Important)
    2020-12-01
    oval:org.opensuse.security:def:26782
    P
    		man on GA media (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:27517
    P
    		mozilla-nss-devel on GA media (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:26497
    P
    		Security update for tor (Important)
    2020-12-01
    oval:org.opensuse.security:def:26842
    P
    		xen on GA media (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:26988
    P
    		mailman on GA media (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:27148
    P
    		ibutils on GA media (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:27352
    P
    		sblim-sfcb-openssl1 on GA media (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:27726
    P
    		Security update for evolution-data-server
    2020-12-01
    oval:org.opensuse.security:def:27881
    P
    		Security update for rubygem-activesupport-3_2 (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:29214
    P
    		Security update for perl-DBI (Important)
    2020-12-01
    oval:org.opensuse.security:def:29573
    P
    		Security update for ant (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:29868
    P
    		Security update for the Linux Kernel (Important)
    2020-12-01
    oval:org.opensuse.security:def:30605
    P
    		Security update for ruby
    2020-12-01
    oval:org.opensuse.security:def:54410
    P
    		xorg-x11-libs on GA media (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:55067
    P
    		binutils on GA media (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:55718
    P
    		Security update for wireshark (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:32421
    P
    		Security update for wireshark (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:32575
    P
    		log4net on GA media (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:33143
    P
    		libcgroup1 on GA media (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:33369
    P
    		Security update for wget (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:25838
    P
    		Security update for flash-player (Important)
    2020-12-01
    oval:org.opensuse.security:def:26415
    P
    		Security update for python-Django (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:26570
    P
    		kdebase3-runtime on GA media (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:26529
    P
    		cifs-mount on GA media (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:26821
    P
    		squid3 on GA media (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:27552
    P
    		ruby-devel on GA media (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:26554
    P
    		ghostscript-fonts-other on GA media (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:26891
    P
    		evolution-data-server on GA media (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:27626
    P
    		Security update for IBM Java 6
    2020-12-01
    oval:org.opensuse.security:def:27149
    P
    		ipsec-tools on GA media (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:27434
    P
    		libasm-devel on GA media (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:27779
    P
    		Security update for krb5 (Important)
    2020-12-01
    oval:org.opensuse.security:def:27925
    P
    		Security update for Botan (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:29133
    P
    		Security update for the Linux Kernel (Important)
    2020-12-01
    oval:org.opensuse.security:def:29726
    P
    		Security update for MozillaFirefox, mozilla-nspr, mozilla-nss (Important)
    2020-12-01
    oval:org.opensuse.security:def:29886
    P
    		Security update for kernel-source (Important)
    2020-12-01
    oval:org.opensuse.security:def:54550
    P
    		libgnomesu on GA media (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:55792
    P
    		Security update for fontconfig (Low)
    2020-12-01
    oval:org.opensuse.security:def:57261
    P
    		Security update for ruby
    2020-12-01
    oval:org.opensuse.security:def:31767
    P
    		Security update for MozillaFirefox (Important)
    2020-12-01
    oval:org.opensuse.security:def:32470
    P
    		Security update for xorg-x11-server (Important)
    2020-12-01
    oval:org.opensuse.security:def:33213
    P
    		nfs-client on GA media (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:33144
    P
    		libdrm on GA media (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:33464
    P
    		Security update for kdm
    2020-12-01
    oval:org.opensuse.security:def:33823
    P
    		Security update for glibc (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:25839
    P
    		Security update for gimp (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:26468
    P
    		Security update for go1.9 (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:26614
    P
    		mozilla-xulrunner190 on GA media (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:26307
    P
    		Security update for conntrack-tools (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:26680
    P
    		cups on GA media (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:26835
    P
    		unrar on GA media (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:26288
    P
    		Security update for python (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:26638
    P
    		squid on GA media (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:26930
    P
    		kernel-default on GA media (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:27661
    P
    		Security update for ruby
    2020-12-01
    oval:org.opensuse.security:def:27160
    P
    		kdenetwork4-filesharing on GA media (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:27491
    P
    		libthai on GA media (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:27828
    P
    		Security update for libxslt
    2020-12-01
    oval:org.opensuse.security:def:28563
    P
    		Security update for inkscape
    2020-12-01
    oval:org.opensuse.security:def:29134
    P
    		Security update for the Linux Kernel (Important)
    2020-12-01
    oval:org.opensuse.security:def:29780
    P
    		Security update for gnutls (Important)
    2020-12-01
    oval:org.opensuse.security:def:29930
    P
    		Security update for libgcrypt
    2020-12-01
    oval:org.opensuse.security:def:54387
    P
    		sysvinit-tools on GA media (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:54788
    P
    		gnome-shell on GA media (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:55518
    P
    		Security update for MozillaFirefox (Important)
    2020-12-01
    oval:org.opensuse.security:def:31841
    P
    		Security update for bzip2 (Important)
    2020-12-01
    oval:org.opensuse.security:def:32509
    P
    		fetchmail on GA media (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:33252
    P
    		ruby on GA media (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:33155
    P
    		libicu-32bit on GA media (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:33521
    P
    		Security update for strongswan
    2020-12-01
    oval:org.opensuse.security:def:25850
    P
    		Security update for libreoffice (Low)
    2020-12-01
    oval:org.opensuse.security:def:26517
    P
    		NetworkManager-gnome on GA media (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:27252
    P
    		openslp on GA media (Moderate)
    2020-12-01
    oval:org.mitre.oval:def:26038
    P
    		SUSE-SU-2014:0843-1 -- Security update for ruby
    2014-09-15
    oval:org.mitre.oval:def:26239
    P
    		SUSE-SU-2014:0844-1 -- Security update for ruby
    2014-09-15
    oval:org.mitre.oval:def:25660
    P
    		SUSE-SU-2013:1828-1 -- Security update for ruby
    2014-09-08
    oval:org.mitre.oval:def:19827
    P
    		USN-2035-1 -- ruby1.8, ruby1.9.1 vulnerabilities
    2014-06-30
    oval:org.mitre.oval:def:19939
    P
    		DSA-2809-1 ruby1.8 - several
    2014-06-23
    oval:org.mitre.oval:def:19789
    P
    		DSA-2810-1 ruby1.9.1 - heap overflow
    2014-06-23
    oval:org.mitre.oval:def:24019
    P
    		ELSA-2013:1764: ruby security update (Critical)
    2014-05-26
    oval:org.mitre.oval:def:21247
    P
    		RHSA-2013:1764: ruby security update (Critical)
    2014-02-17
    oval:org.opensuse.security:def:79895
    P
    		Security update for ruby
    2013-11-25
    oval:com.redhat.rhsa:def:20131764
    P
    		RHSA-2013:1764: ruby security update (Critical)
    2013-11-25
    oval:com.ubuntu.precise:def:20134164000
    V
    		CVE-2013-4164 on Ubuntu 12.04 LTS (precise) - medium.
    2013-11-23
    oval:com.ubuntu.trusty:def:20134164000
    V
    		CVE-2013-4164 on Ubuntu 14.04 LTS (trusty) - medium.
    2013-11-23
    BACK
    ruby-lang ruby 1.8
    ruby-lang ruby 1.9
    ruby-lang ruby 1.9.1
    ruby-lang ruby 1.9.2
    ruby-lang ruby 1.9.3
    ruby-lang ruby 2.0.0
    ruby-lang ruby 2.1 preview1
    redhat enterprise linux 6
    redhat enterprise linux 6
    redhat enterprise linux desktop 6
    redhat enterprise linux hpc node 6
    puppet puppet 2.7.0
    apple mac os x 10.8.5
    apple mac os x 10.8.5
    puppet puppet 3.4.0
    puppet puppet 3.3.2
    apple mac os x 10.7.5
    apple mac os x server 10.7.5
    apple mac os x 10.9.2
    redhat openstack 3.0