CVE-2008-3443
Ruby <=1.8.5, 1.8.6-1.8.6-p286, 1.8.7-1.8.7-p71, 1.9-r18423 DoS via Regex
Title source: llmExploitation Summary
EIP tracks 1 public exploit for CVE-2008-3443. PoCs published by laurent gaffié.
AI-analyzed exploit summary This exploit demonstrates a remote socket memory leak in Ruby's regex engine, causing a denial-of-service (DoS) by sending large requests to a Webrick server. The PoC uses a Perl script to send oversized payloads, triggering a NoMemoryError.
Description
The regular expression engine (regex.c) in Ruby 1.8.5 and earlier, 1.8.6 through 1.8.6-p286, 1.8.7 through 1.8.7-p71, and 1.9 through r18423 allows remote attackers to cause a denial of service (infinite loop and crash) via multiple long requests to a Ruby socket, related to memory allocation failure, and as demonstrated against Webrick.
Exploits (1)
This exploit demonstrates a remote socket memory leak in Ruby's regex engine, causing a denial-of-service (DoS) by sending large requests to a Webrick server. The PoC uses a Perl script to send oversized payloads, triggering a NoMemoryError.