CVE-2016-2338
CRITICALRuby - Heap Overflow in Psych::Emitter start_document Function
Title source: llmExploitation Summary
EIP tracks 1 public exploit for CVE-2016-2338. PoCs published by SpiralBL0CK.
AI-analyzed exploit summary The repository contains a functional exploit for CVE-2016-2338, leveraging heap spraying and memory corruption techniques to achieve arbitrary code execution. The exploit uses a combination of ROP chains and shellcode to exploit a vulnerability in the target software.
Description
An exploitable heap overflow vulnerability exists in the Psych::Emitter start_document function of Ruby. In Psych::Emitter start_document function heap buffer "head" allocation is made based on tags array length. Specially constructed object passed as element of tags array can increase this array size after mentioned allocation and cause heap overflow.
Exploits (1)
The repository contains a functional exploit for CVE-2016-2338, leveraging heap spraying and memory corruption techniques to achieve arbitrary code execution. The exploit uses a combination of ROP chains and shellcode to exploit a vulnerability in the target software.
References (3)
Scores
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H