# Configurations Starting After Version 1.8.5 CVEs with a CPE version range that starts after 1.8.5 (exclusive). Source: https://docs.deepinfo.com/reference/vulnerability/search/examples/configurations-nodes-cpe-match-version-start-excluding/ Last updated: 2026-09-26 --- `POST https://api.deepinfo.com/v1/discovery/vulnerability-search?page_size=25` CVEs with a CPE version range that starts after 1.8.5 (exclusive). Example 8 of 10 in **Filters › Configurations** · [Vulnerability Search Examples](/reference/vulnerability/search/examples/) · endpoint: [Search](/reference/vulnerability/search/) Tags: `field` `configurations.nodes.cpe_match.version_start_excluding` · `operator` `eq` `configurations.nodes.cpe_match.version_start_excluding` is the version after which the range starts (exclusive). `eq` matches the exact value `1.8.5`. In the response, look at `results[].configurations[].nodes[].cpe_match[].version_start_excluding`. ## Request | Parameter | In | Value | |---|---|---| | `page_size` | query | `25` | | `filters.must[0].name` | body | `configurations.nodes.cpe_match.version_start_excluding` | | `filters.must[0].type` | body | `eq` | | `filters.must[0].value` | body | `1.8.5` | ```bash curl -X POST 'https://api.deepinfo.com/v1/discovery/vulnerability-search?page_size=25' \ -H 'apikey: YOUR_API_KEY' \ -H 'Accept: application/json' \ -H 'Content-Type: application/json' \ -d '{ "filters": { "must": [ { "name": "configurations.nodes.cpe_match.version_start_excluding", "type": "eq", "value": "1.8.5" } ] } }' ``` ## Response ### 200 · OK > Shortened for this page: results[].references: first 10 items `Content-Type: application/json` · `ratelimit-limit: 1` · `ratelimit-remaining: 0` · `ratelimit-reset: 1` · `x-ratelimit-limit-second: 1` · `x-ratelimit-remaining-second: 0` · `deepinfo-request-id: 5f0c6a8e-1b2d-4c3e-9f4a-7b8c9d0e1f2a` ```json { "page": 1, "page_size": 25, "result_count": 3, "results": [ { "id": "CVE-2008-2663", "source_identifier": "user@mitre.org", "published": "2008-06-24T19:41:00Z", "last_modified": "2026-06-16T22:54:11Z", "status": "Modified", "evaluator_comment": null, "evaluator_solution": null, "evaluator_impact": null, "cisa_exploit_add": null, "cisa_action_due": null, "cisa_required_action": null, "cisa_vulnerability_name": null, "descriptions": [ { "lang": "en", "value": "Multiple integer overflows in the rb_ary_store function in Ruby 1.8.4 and earlier, 1.8.5 before 1.8.5-p231, 1.8.6 before 1.8.6-p230, and 1.8.7 before 1.8.7-p22 allow context-dependent attackers to execute arbitrary code or cause a denial of service via unknown vectors, a different issue than CVE-2008-2662, CVE-2008-2664, and CVE-2008-2725. NOTE: as of 20080624, there has been inconsistent usage of multiple CVE identifiers related to Ruby. The CVE description should be regarded as authoritative, although it is likely to change." }, { "lang": "es", "value": "Múltiples desbordamientos de entero en la función rb_ary_store de Ruby 1.8.4 y anteriores, 1.8.5 anterior a 1.8.5-p231, 1.8.6 anterior a 1.8.6-p230 y 1.8.7 anterior a 1.8.7-p22 permite a atacantes dependientes del contexto ejecutar código de su elección mediante vectores desconocidos, un problema distinto a CVE-2008-2662, CVE-2008-2664 y CVE-2008-2725. NOTA: a fecha de 24-06-2008, ha habido un uso inconsistente de múltiples identificadores CVE relacionados con Ruby. La descripción CVE debe tomarse como autorizada aunque probablemente cambie." } ], "references": [ { "url": "http://blog.phusion.nl/2008/06/23/ruby-186-p230187-broke-your-app-ruby-enterprise-edition-to-the-rescue/", "source": "user@mitre.org", "tags": [ "Third Party Advisory" ] }, { "url": "http://lists.apple.com/archives/security-announce/2008//Jun/msg00002.html", "source": "user@mitre.org", "tags": [ "Mailing List", "Third Party Advisory" ] }, { "url": "http://lists.opensuse.org/opensuse-security-announce/2008-08/msg00006.html", "source": "user@mitre.org", "tags": [ "Third Party Advisory" ] }, { "url": "http://secunia.com/advisories/30802", "source": "user@mitre.org", "tags": [ "Third Party Advisory" ] }, { "url": "http://secunia.com/advisories/30831", "source": "user@mitre.org", "tags": [ "Third Party Advisory" ] }, { "url": "http://secunia.com/advisories/30867", "source": "user@mitre.org", "tags": [ "Third Party Advisory" ] }, { "url": "http://secunia.com/advisories/30875", "source": "user@mitre.org", "tags": [ "Third Party Advisory" ] }, { "url": "http://secunia.com/advisories/30894", "source": "user@mitre.org", "tags": [ "Third Party Advisory" ] }, { "url": "http://secunia.com/advisories/31062", "source": "user@mitre.org", "tags": [ "Third Party Advisory" ] }, { "url": "http://secunia.com/advisories/31090", "source": "user@mitre.org", "tags": [ "Third Party Advisory" ] } ], "metrics": { "cvss_metric_v40": null, "cvss_metric_v31": null, "cvss_metric_v30": null, "cvss_metric_v2": [ { "source": "user@nist.gov", "type": "Primary", "cvss_data": { "version": "2.0", "vector_string": "AV:N/AC:L/Au:N/C:C/I:C/A:C", "access_vector": "NETWORK", "access_complexity": "LOW", "authentication": "NONE", "confidentiality_impact": "COMPLETE", "integrity_impact": "COMPLETE", "availability_impact": "COMPLETE", "base_score": 10.0, "exploitability": null, "remediation_level": null, "report_confidence": null, "temporal_score": null, "collateral_damage_potential": null, "target_distribution": null, "confidentiality_requirement": null, "integrity_requirement": null, "availability_requirement": null, "environmental_score": null }, "base_severity": "HIGH", "exploitability_score": 10.0, "impact_score": 10.0, "ac_insuf_info": true, "obtain_all_privilege": false, "obtain_user_privilege": false, "obtain_other_privilege": false, "user_interaction_required": false } ] }, "weaknesses": [ { "source": "user@nist.gov", "type": "Primary", "description": [ { "lang": "en", "value": "CWE-190" } ] } ], "configurations": [ { "operator": null, "negate": null, "nodes": [ { "operator": "OR", "negate": false, "cpe_match": [ { "vulnerable": true, "criteria": "cpe:2.3:a:ruby-lang:ruby:*:*:*:*:*:*:*:*", "match_criteria_id": "D65BD5CD-5ECE-4294-B8E6-D0276FE8CC98", "version_start_including": null, "version_start_excluding": null, "version_end_including": "1.8.4", "version_end_excluding": null }, { "vulnerable": true, "criteria": "cpe:2.3:a:ruby-lang:ruby:*:*:*:*:*:*:*:*", "match_criteria_id": "3A289D5F-E8F3-4102-BF83-C63114DFE32C", "version_start_including": null, "version_start_excluding": "1.8.5", "version_end_including": null, "version_end_excluding": "1.8.5.231" }, { "vulnerable": true, "criteria": "cpe:2.3:a:ruby-lang:ruby:*:*:*:*:*:*:*:*", "match_criteria_id": "ABA0AC75-6B7E-48BD-891F-3FB312B9BA25", "version_start_including": "1.8.6", "version_start_excluding": null, "version_end_including": null, "version_end_excluding": "1.8.6.230" }, { "vulnerable": true, "criteria": "cpe:2.3:a:ruby-lang:ruby:*:*:*:*:*:*:*:*", "match_criteria_id": "5EDF7713-E20F-4EED-A323-98902450FD09", "version_start_including": "1.8.7", "version_start_excluding": null, "version_end_including": null, "version_end_excluding": "1.8.7.22" } ] } ] }, { "operator": null, "negate": null, "nodes": [ { "operator": "OR", "negate": false, "cpe_match": [ { "vulnerable": true, "criteria": "cpe:2.3:o:debian:debian_linux:4.0:*:*:*:*:*:*:*", "match_criteria_id": "0F92AB32-E7DE-43F4-B877-1F41FA162EC7", "version_start_including": null, "version_start_excluding": null, "version_end_including": null, "version_end_excluding": null } ] } ] }, { "operator": null, "negate": null, "nodes": [ { "operator": "OR", "negate": false, "cpe_match": [ { "vulnerable": true, "criteria": "cpe:2.3:o:canonical:ubuntu_linux:6.06:*:*:*:lts:*:*:*", "match_criteria_id": "5C18C3CD-969B-4AA3-AE3A-BA4A188F8BFF", "version_start_including": null, "version_start_excluding": null, "version_end_including": null, "version_end_excluding": null }, { "vulnerable": true, "criteria": "cpe:2.3:o:canonical:ubuntu_linux:7.04:*:*:*:*:*:*:*", "match_criteria_id": "6EBDAFF8-DE44-4E80-B6BD-E341F767F501", "version_start_including": null, "version_start_excluding": null, "version_end_including": null, "version_end_excluding": null }, { "vulnerable": true, "criteria": "cpe:2.3:o:canonical:ubuntu_linux:7.10:*:*:*:*:*:*:*", "match_criteria_id": "823BF8BE-2309-4F67-A5E2-EAD98F723468", "version_start_including": null, "version_start_excluding": null, "version_end_including": null, "version_end_excluding": null }, { "vulnerable": true, "criteria": "cpe:2.3:o:canonical:ubuntu_linux:8.04:*:*:*:lts:*:*:*", "match_criteria_id": "C91D2DBF-6DA7-4BA2-9F29-8BD2725A4701", "version_start_including": null, "version_start_excluding": null, "version_end_including": null, "version_end_excluding": null } ] } ] } ], "vendor_comments": null, "enrichment": { "cpe": [ { "criteria": "cpe:2.3:a:ruby-lang:ruby:*:*:*:*:*:*:*:*", "vendor": "ruby-lang", "product": "ruby", "product_type": "a", "vulnerable": true, "version_start_including": null, "version_start_excluding": null, "version_end_including": "1.8.4", "version_end_excluding": null, "affected_versions_first": "1.8", "affected_versions_last": "1.8.4" }, { "criteria": "cpe:2.3:a:ruby-lang:ruby:*:*:*:*:*:*:*:*", "vendor": "ruby-lang", "product": "ruby", "product_type": "a", "vulnerable": true, "version_start_including": null, "version_start_excluding": "1.8.5", "version_end_including": null, "version_end_excluding": "1.8.5.231", "affected_versions_first": "1.8.5.1", "affected_versions_last": "1.8.5.230" }, { "criteria": "cpe:2.3:a:ruby-lang:ruby:*:*:*:*:*:*:*:*", "vendor": "ruby-lang", "product": "ruby", "product_type": "a", "vulnerable": true, "version_start_including": "1.8.6", "version_start_excluding": null, "version_end_including": null, "version_end_excluding": "1.8.6.230", "affected_versions_first": "1.8.6", "affected_versions_last": "1.8.6.229" }, { "criteria": "cpe:2.3:a:ruby-lang:ruby:*:*:*:*:*:*:*:*", "vendor": "ruby-lang", "product": "ruby", "product_type": "a", "vulnerable": true, "version_start_including": "1.8.7", "version_start_excluding": null, "version_end_including": null, "version_end_excluding": "1.8.7.22", "affected_versions_first": "1.8.7", "affected_versions_last": "1.8.7.21" }, { "criteria": "cpe:2.3:o:debian:debian_linux:4.0:*:*:*:*:*:*:*", "vendor": "debian", "product": "debian_linux", "product_type": "o", "vulnerable": true, "version_start_including": null, "version_start_excluding": null, "version_end_including": null, "version_end_excluding": null, "affected_versions_first": "4.0", "affected_versions_last": "4.0" }, { "criteria": "cpe:2.3:o:canonical:ubuntu_linux:6.06:*:*:*:lts:*:*:*", "vendor": "canonical", "product": "ubuntu_linux", "product_type": "o", "vulnerable": true, "version_start_including": null, "version_start_excluding": null, "version_end_including": null, "version_end_excluding": null, "affected_versions_first": "6.06", "affected_versions_last": "6.06" }, { "criteria": "cpe:2.3:o:canonical:ubuntu_linux:7.04:*:*:*:*:*:*:*", "vendor": "canonical", "product": "ubuntu_linux", "product_type": "o", "vulnerable": true, "version_start_including": null, "version_start_excluding": null, "version_end_including": null, "version_end_excluding": null, "affected_versions_first": "7.04", "affected_versions_last": "7.04" }, { "criteria": "cpe:2.3:o:canonical:ubuntu_linux:7.10:*:*:*:*:*:*:*", "vendor": "canonical", "product": "ubuntu_linux", "product_type": "o", "vulnerable": true, "version_start_including": null, "version_start_excluding": null, "version_end_including": null, "version_end_excluding": null, "affected_versions_first": "7.10", "affected_versions_last": "7.10" }, { "criteria": "cpe:2.3:o:canonical:ubuntu_linux:8.04:*:*:*:lts:*:*:*", "vendor": "canonical", "product": "ubuntu_linux", "product_type": "o", "vulnerable": true, "version_start_including": null, "version_start_excluding": null, "version_end_including": null, "version_end_excluding": null, "affected_versions_first": "8.04", "affected_versions_last": "8.04" } ], "cwe": [ { "id": 190, "owasptop10_2021": null, "name": "Integer Overflow or Wraparound", "description": "The product performs a calculation that can\n produce an integer overflow or wraparound when the logic\n assumes that the resulting value will always be larger than\n the original value. This occurs when an integer value is\n incremented to a value that is too large to store in the\n associated representation. When this occurs, the value may\n become a very small or negative number.", "capec_id": [ 92 ], "scope": [ "Access Control", "Availability", "Confidentiality", "Integrity", "Other" ], "impact": [ "Alter Execution Logic", "Bypass Protection Mechanism", "DoS: Crash, Exit, or Restart", "DoS: Instability", "DoS: Resource Consumption (CPU)", "DoS: Resource Consumption (Memory)", "Execute Unauthorized Code or Commands", "Modify Memory" ], "detection_method": [ "Architecture or Design Review", "Automated Static Analysis", "Automated Static Analysis - Binary or Bytecode", "Automated Static Analysis - Source Code", "Black Box", "Dynamic Analysis with Manual Results Interpretation", "Manual Analysis", "Manual Static Analysis - Source Code" ] } ], "epss_score": { "epss": 0.04456, "percentile": 0.91002, "date": "2026-09-23" }, "cisa_kev": null, "vdeep_metric": { "available_versions": [ "2.0" ], "source": "user@nist.gov", "type": "Primary", "cvss_data": { "version": "2.0", "vector_string": "AV:N/AC:L/Au:N/C:C/I:C/A:C", "attack_vector": "NETWORK", "attack_complexity": "LOW", "attack_requirements": null, "privileges_required": null, "user_interaction": null, "vulnerable_system_confidentiality": "COMPLETE", "vulnerable_system_integrity": "COMPLETE", "vulnerable_system_availability": "COMPLETE", "subsequent_system_confidentiality": null, "subsequent_system_integrity": null, "subsequent_system_availability": null, "exploit_maturity": null, "confidentiality_requirements": null, "integrity_requirements": null, "availability_requirements": null, "modified_attack_vector": null, "modified_attack_complexity": null, "modified_attack_requirements": null, "modified_privileges_required": null, "modified_user_interaction": null, "modified_vulnerable_system_confidentiality": null, "modified_vulnerable_system_integrity": null, "modified_vulnerable_system_availability": null, "modified_subsequent_system_confidentiality": null, "modified_subsequent_system_integrity": null, "modified_subsequent_system_availability": null, "safety": null, "automatable": null, "recovery": null, "value_density": null, "vulnerability_response_effort": null, "provider_urgency": null, "base_score": 10.0, "base_severity": "HIGH" } } } }, { "id": "CVE-2008-2662", "source_identifier": "user@mitre.org", "published": "2008-06-24T19:41:00Z", "last_modified": "2026-06-16T22:54:10Z", "status": "Modified", "evaluator_comment": null, "evaluator_solution": null, "evaluator_impact": null, "cisa_exploit_add": null, "cisa_action_due": null, "cisa_required_action": null, "cisa_vulnerability_name": null, "descriptions": [ { "lang": "en", "value": "Multiple integer overflows in the rb_str_buf_append function in Ruby 1.8.4 and earlier, 1.8.5 before 1.8.5-p231, 1.8.6 before 1.8.6-p230, 1.8.7 before 1.8.7-p22, and 1.9.0 before 1.9.0-2 allow context-dependent attackers to execute arbitrary code or cause a denial of service via unknown vectors that trigger memory corruption, a different issue than CVE-2008-2663, CVE-2008-2664, and CVE-2008-2725. NOTE: as of 20080624, there has been inconsistent usage of multiple CVE identifiers related to Ruby. This CVE description should be regarded as authoritative, although it is likely to change." }, { "lang": "es", "value": "Múltiples desbordamientos de entero en la función rb_str_buf_append de Ruby 1.8.4 y anteriores, 1.8.5 antes de 1.8.5-p231, 1.8.6 anterior a 1.8.6-p230, 1.8.7 anterior a 1.8.7-p22 y 1.9.0 antes de 1.9.0-2 permite a atacantes dependientes del contexto ejecutar código de su elección o provocar una denegación de servicio mediante vectores desconocidos que disparan una corrupción de memoria, un problema distinto a CVE-2008-2663, CVE-2008-2664 y CVE-2008-2725. NOTA: a fecha de 24-06-2008, ha habido un uso inconsistente de múltiples identificadores CVE relacionados con Ruby. Esta descripción CVE debe ser tomada como autorizado, aunque probablemente cambie." } ], "references": [ { "url": "http://blog.phusion.nl/2008/06/23/ruby-186-p230187-broke-your-app-ruby-enterprise-edition-to-the-rescue/", "source": "user@mitre.org", "tags": [ "Third Party Advisory" ] }, { "url": "http://lists.apple.com/archives/security-announce/2008//Jun/msg00002.html", "source": "user@mitre.org", "tags": [ "Mailing List", "Third Party Advisory" ] }, { "url": "http://lists.opensuse.org/opensuse-security-announce/2008-08/msg00006.html", "source": "user@mitre.org", "tags": [ "Third Party Advisory" ] }, { "url": "http://secunia.com/advisories/30802", "source": "user@mitre.org", "tags": [ "Third Party Advisory" ] }, { "url": "http://secunia.com/advisories/30831", "source": "user@mitre.org", "tags": [ "Third Party Advisory" ] }, { "url": "http://secunia.com/advisories/30867", "source": "user@mitre.org", "tags": [ "Third Party Advisory" ] }, { "url": "http://secunia.com/advisories/30875", "source": "user@mitre.org", "tags": [ "Third Party Advisory" ] }, { "url": "http://secunia.com/advisories/30894", "source": "user@mitre.org", "tags": [ "Third Party Advisory" ] }, { "url": "http://secunia.com/advisories/31062", "source": "user@mitre.org", "tags": [ "Third Party Advisory" ] }, { "url": "http://secunia.com/advisories/31181", "source": "user@mitre.org", "tags": [ "Third Party Advisory" ] } ], "metrics": { "cvss_metric_v40": null, "cvss_metric_v31": null, "cvss_metric_v30": null, "cvss_metric_v2": [ { "source": "user@nist.gov", "type": "Primary", "cvss_data": { "version": "2.0", "vector_string": "AV:N/AC:L/Au:N/C:C/I:C/A:C", "access_vector": "NETWORK", "access_complexity": "LOW", "authentication": "NONE", "confidentiality_impact": "COMPLETE", "integrity_impact": "COMPLETE", "availability_impact": "COMPLETE", "base_score": 10.0, "exploitability": null, "remediation_level": null, "report_confidence": null, "temporal_score": null, "collateral_damage_potential": null, "target_distribution": null, "confidentiality_requirement": null, "integrity_requirement": null, "availability_requirement": null, "environmental_score": null }, "base_severity": "HIGH", "exploitability_score": 10.0, "impact_score": 10.0, "ac_insuf_info": false, "obtain_all_privilege": true, "obtain_user_privilege": false, "obtain_other_privilege": false, "user_interaction_required": false } ] }, "weaknesses": [ { "source": "user@nist.gov", "type": "Primary", "description": [ { "lang": "en", "value": "CWE-189" } ] } ], "configurations": [ { "operator": null, "negate": null, "nodes": [ { "operator": "OR", "negate": false, "cpe_match": [ { "vulnerable": true, "criteria": "cpe:2.3:a:ruby-lang:ruby:*:*:*:*:*:*:*:*", "match_criteria_id": "D65BD5CD-5ECE-4294-B8E6-D0276FE8CC98", "version_start_including": null, "version_start_excluding": null, "version_end_including": "1.8.4", "version_end_excluding": null }, { "vulnerable": true, "criteria": "cpe:2.3:a:ruby-lang:ruby:*:*:*:*:*:*:*:*", "match_criteria_id": "3A289D5F-E8F3-4102-BF83-C63114DFE32C", "version_start_including": null, "version_start_excluding": "1.8.5", "version_end_including": null, "version_end_excluding": "1.8.5.231" }, { "vulnerable": true, "criteria": "cpe:2.3:a:ruby-lang:ruby:*:*:*:*:*:*:*:*", "match_criteria_id": "ABA0AC75-6B7E-48BD-891F-3FB312B9BA25", "version_start_including": "1.8.6", "version_start_excluding": null, "version_end_including": null, "version_end_excluding": "1.8.6.230" }, { "vulnerable": true, "criteria": "cpe:2.3:a:ruby-lang:ruby:*:*:*:*:*:*:*:*", "match_criteria_id": "5EDF7713-E20F-4EED-A323-98902450FD09", "version_start_including": "1.8.7", "version_start_excluding": null, "version_end_including": null, "version_end_excluding": "1.8.7.22" }, { "vulnerable": true, "criteria": "cpe:2.3:a:ruby-lang:ruby:*:*:*:*:*:*:*:*", "match_criteria_id": "9DDF08CB-5F01-49ED-9DDB-ED39C8B0423E", "version_start_including": "1.9.0", "version_start_excluding": null, "version_end_including": null, "version_end_excluding": "1.9.0.2" } ] } ] }, { "operator": null, "negate": null, "nodes": [ { "operator": "OR", "negate": false, "cpe_match": [ { "vulnerable": true, "criteria": "cpe:2.3:o:debian:debian_linux:4.0:*:*:*:*:*:*:*", "match_criteria_id": "0F92AB32-E7DE-43F4-B877-1F41FA162EC7", "version_start_including": null, "version_start_excluding": null, "version_end_including": null, "version_end_excluding": null } ] } ] }, { "operator": null, "negate": null, "nodes": [ { "operator": "OR", "negate": false, "cpe_match": [ { "vulnerable": true, "criteria": "cpe:2.3:o:canonical:ubuntu_linux:6.06:*:*:*:lts:*:*:*", "match_criteria_id": "5C18C3CD-969B-4AA3-AE3A-BA4A188F8BFF", "version_start_including": null, "version_start_excluding": null, "version_end_including": null, "version_end_excluding": null }, { "vulnerable": true, "criteria": "cpe:2.3:o:canonical:ubuntu_linux:7.04:*:*:*:*:*:*:*", "match_criteria_id": "6EBDAFF8-DE44-4E80-B6BD-E341F767F501", "version_start_including": null, "version_start_excluding": null, "version_end_including": null, "version_end_excluding": null }, { "vulnerable": true, "criteria": "cpe:2.3:o:canonical:ubuntu_linux:7.10:*:*:*:*:*:*:*", "match_criteria_id": "823BF8BE-2309-4F67-A5E2-EAD98F723468", "version_start_including": null, "version_start_excluding": null, "version_end_including": null, "version_end_excluding": null }, { "vulnerable": true, "criteria": "cpe:2.3:o:canonical:ubuntu_linux:8.04:*:*:*:lts:*:*:*", "match_criteria_id": "C91D2DBF-6DA7-4BA2-9F29-8BD2725A4701", "version_start_including": null, "version_start_excluding": null, "version_end_including": null, "version_end_excluding": null } ] } ] } ], "vendor_comments": null, "enrichment": { "cpe": [ { "criteria": "cpe:2.3:a:ruby-lang:ruby:*:*:*:*:*:*:*:*", "vendor": "ruby-lang", "product": "ruby", "product_type": "a", "vulnerable": true, "version_start_including": null, "version_start_excluding": null, "version_end_including": "1.8.4", "version_end_excluding": null, "affected_versions_first": "1.8", "affected_versions_last": "1.8.4" }, { "criteria": "cpe:2.3:a:ruby-lang:ruby:*:*:*:*:*:*:*:*", "vendor": "ruby-lang", "product": "ruby", "product_type": "a", "vulnerable": true, "version_start_including": null, "version_start_excluding": "1.8.5", "version_end_including": null, "version_end_excluding": "1.8.5.231", "affected_versions_first": "1.8.5.1", "affected_versions_last": "1.8.5.230" }, { "criteria": "cpe:2.3:a:ruby-lang:ruby:*:*:*:*:*:*:*:*", "vendor": "ruby-lang", "product": "ruby", "product_type": "a", "vulnerable": true, "version_start_including": "1.8.6", "version_start_excluding": null, "version_end_including": null, "version_end_excluding": "1.8.6.230", "affected_versions_first": "1.8.6", "affected_versions_last": "1.8.6.229" }, { "criteria": "cpe:2.3:a:ruby-lang:ruby:*:*:*:*:*:*:*:*", "vendor": "ruby-lang", "product": "ruby", "product_type": "a", "vulnerable": true, "version_start_including": "1.8.7", "version_start_excluding": null, "version_end_including": null, "version_end_excluding": "1.8.7.22", "affected_versions_first": "1.8.7", "affected_versions_last": "1.8.7.21" }, { "criteria": "cpe:2.3:a:ruby-lang:ruby:*:*:*:*:*:*:*:*", "vendor": "ruby-lang", "product": "ruby", "product_type": "a", "vulnerable": true, "version_start_including": "1.9.0", "version_start_excluding": null, "version_end_including": null, "version_end_excluding": "1.9.0.2", "affected_versions_first": "1.9.0.0", "affected_versions_last": "1.9.0.1" }, { "criteria": "cpe:2.3:o:debian:debian_linux:4.0:*:*:*:*:*:*:*", "vendor": "debian", "product": "debian_linux", "product_type": "o", "vulnerable": true, "version_start_including": null, "version_start_excluding": null, "version_end_including": null, "version_end_excluding": null, "affected_versions_first": "4.0", "affected_versions_last": "4.0" }, { "criteria": "cpe:2.3:o:canonical:ubuntu_linux:6.06:*:*:*:lts:*:*:*", "vendor": "canonical", "product": "ubuntu_linux", "product_type": "o", "vulnerable": true, "version_start_including": null, "version_start_excluding": null, "version_end_including": null, "version_end_excluding": null, "affected_versions_first": "6.06", "affected_versions_last": "6.06" }, { "criteria": "cpe:2.3:o:canonical:ubuntu_linux:7.04:*:*:*:*:*:*:*", "vendor": "canonical", "product": "ubuntu_linux", "product_type": "o", "vulnerable": true, "version_start_including": null, "version_start_excluding": null, "version_end_including": null, "version_end_excluding": null, "affected_versions_first": "7.04", "affected_versions_last": "7.04" }, { "criteria": "cpe:2.3:o:canonical:ubuntu_linux:7.10:*:*:*:*:*:*:*", "vendor": "canonical", "product": "ubuntu_linux", "product_type": "o", "vulnerable": true, "version_start_including": null, "version_start_excluding": null, "version_end_including": null, "version_end_excluding": null, "affected_versions_first": "7.10", "affected_versions_last": "7.10" }, { "criteria": "cpe:2.3:o:canonical:ubuntu_linux:8.04:*:*:*:lts:*:*:*", "vendor": "canonical", "product": "ubuntu_linux", "product_type": "o", "vulnerable": true, "version_start_including": null, "version_start_excluding": null, "version_end_including": null, "version_end_excluding": null, "affected_versions_first": "8.04", "affected_versions_last": "8.04" } ], "cwe": null, "epss_score": { "epss": 0.04264, "percentile": 0.90646, "date": "2026-09-23" }, "cisa_kev": null, "vdeep_metric": { "available_versions": [ "2.0" ], "source": "user@nist.gov", "type": "Primary", "cvss_data": { "version": "2.0", "vector_string": "AV:N/AC:L/Au:N/C:C/I:C/A:C", "attack_vector": "NETWORK", "attack_complexity": "LOW", "attack_requirements": null, "privileges_required": null, "user_interaction": null, "vulnerable_system_confidentiality": "COMPLETE", "vulnerable_system_integrity": "COMPLETE", "vulnerable_system_availability": "COMPLETE", "subsequent_system_confidentiality": null, "subsequent_system_integrity": null, "subsequent_system_availability": null, "exploit_maturity": null, "confidentiality_requirements": null, "integrity_requirements": null, "availability_requirements": null, "modified_attack_vector": null, "modified_attack_complexity": null, "modified_attack_requirements": null, "modified_privileges_required": null, "modified_user_interaction": null, "modified_vulnerable_system_confidentiality": null, "modified_vulnerable_system_integrity": null, "modified_vulnerable_system_availability": null, "modified_subsequent_system_confidentiality": null, "modified_subsequent_system_integrity": null, "modified_subsequent_system_availability": null, "safety": null, "automatable": null, "recovery": null, "value_density": null, "vulnerability_response_effort": null, "provider_urgency": null, "base_score": 10.0, "base_severity": "HIGH" } } } }, { "id": "CVE-2008-2664", "source_identifier": "user@mitre.org", "published": "2008-06-24T19:41:00Z", "last_modified": "2026-06-16T22:54:11Z", "status": "Modified", "evaluator_comment": null, "evaluator_solution": null, "evaluator_impact": null, "cisa_exploit_add": null, "cisa_action_due": null, "cisa_required_action": null, "cisa_vulnerability_name": null, "descriptions": [ { "lang": "en", "value": "The rb_str_format function in Ruby 1.8.4 and earlier, 1.8.5 before 1.8.5-p231, 1.8.6 before 1.8.6-p230, 1.8.7 before 1.8.7-p22, and 1.9.0 before 1.9.0-2 allows context-dependent attackers to trigger memory corruption via unspecified vectors related to alloca, a different issue than CVE-2008-2662, CVE-2008-2663, and CVE-2008-2725. NOTE: as of 20080624, there has been inconsistent usage of multiple CVE identifiers related to Ruby. The CVE description should be regarded as authoritative, although it is likely to change." }, { "lang": "es", "value": "La función rb_str_format en Ruby 1.8.4 y anteriores, 1.8.5 anterior a 1.8.5-p231, 1.8.6 anterior a 1.8.6-p230, 1.8.7 anterior a 1.8.7-p22 y 1.9.0 anterior a 1.9.0-2 permite a atacantes dependientes del contexto disparar una corrupción de memoria mediante vectores no especificados relacionados con alloca, un problema distinto a CVE-2008-2662, CVE-2008-2663 y CVE-2008-2725. NOTA: a fecha de 24-06-2008, ha habido un uso inconsistente de múltiples identificadores CVE relacionados con Ruby. La descripción CVE debe ser tomada como autorizada aunque probablemente cambie." } ], "references": [ { "url": "http://blog.phusion.nl/2008/06/23/ruby-186-p230187-broke-your-app-ruby-enterprise-edition-to-the-rescue/", "source": "user@mitre.org", "tags": [ "Third Party Advisory" ] }, { "url": "http://lists.apple.com/archives/security-announce/2008//Jun/msg00002.html", "source": "user@mitre.org", "tags": [ "Mailing List", "Third Party Advisory" ] }, { "url": "http://lists.opensuse.org/opensuse-security-announce/2008-08/msg00006.html", "source": "user@mitre.org", "tags": [ "Third Party Advisory" ] }, { "url": "http://secunia.com/advisories/30802", "source": "user@mitre.org", "tags": [ "Third Party Advisory" ] }, { "url": "http://secunia.com/advisories/30831", "source": "user@mitre.org", "tags": [ "Third Party Advisory" ] }, { "url": "http://secunia.com/advisories/30867", "source": "user@mitre.org", "tags": [ "Third Party Advisory" ] }, { "url": "http://secunia.com/advisories/30875", "source": "user@mitre.org", "tags": [ "Third Party Advisory" ] }, { "url": "http://secunia.com/advisories/30894", "source": "user@mitre.org", "tags": [ "Third Party Advisory" ] }, { "url": "http://secunia.com/advisories/31062", "source": "user@mitre.org", "tags": [ "Third Party Advisory" ] }, { "url": "http://secunia.com/advisories/31090", "source": "user@mitre.org", "tags": [ "Third Party Advisory" ] } ], "metrics": { "cvss_metric_v40": null, "cvss_metric_v31": null, "cvss_metric_v30": null, "cvss_metric_v2": [ { "source": "user@nist.gov", "type": "Primary", "cvss_data": { "version": "2.0", "vector_string": "AV:N/AC:L/Au:N/C:N/I:N/A:C", "access_vector": "NETWORK", "access_complexity": "LOW", "authentication": "NONE", "confidentiality_impact": "NONE", "integrity_impact": "NONE", "availability_impact": "COMPLETE", "base_score": 7.8, "exploitability": null, "remediation_level": null, "report_confidence": null, "temporal_score": null, "collateral_damage_potential": null, "target_distribution": null, "confidentiality_requirement": null, "integrity_requirement": null, "availability_requirement": null, "environmental_score": null }, "base_severity": "HIGH", "exploitability_score": 10.0, "impact_score": 6.9, "ac_insuf_info": false, "obtain_all_privilege": false, "obtain_user_privilege": false, "obtain_other_privilege": false, "user_interaction_required": false } ] }, "weaknesses": [ { "source": "user@nist.gov", "type": "Primary", "description": [ { "lang": "en", "value": "CWE-399" } ] } ], "configurations": [ { "operator": null, "negate": null, "nodes": [ { "operator": "OR", "negate": false, "cpe_match": [ { "vulnerable": true, "criteria": "cpe:2.3:a:ruby-lang:ruby:*:*:*:*:*:*:*:*", "match_criteria_id": "D65BD5CD-5ECE-4294-B8E6-D0276FE8CC98", "version_start_including": null, "version_start_excluding": null, "version_end_including": "1.8.4", "version_end_excluding": null }, { "vulnerable": true, "criteria": "cpe:2.3:a:ruby-lang:ruby:*:*:*:*:*:*:*:*", "match_criteria_id": "3A289D5F-E8F3-4102-BF83-C63114DFE32C", "version_start_including": null, "version_start_excluding": "1.8.5", "version_end_including": null, "version_end_excluding": "1.8.5.231" }, { "vulnerable": true, "criteria": "cpe:2.3:a:ruby-lang:ruby:*:*:*:*:*:*:*:*", "match_criteria_id": "ABA0AC75-6B7E-48BD-891F-3FB312B9BA25", "version_start_including": "1.8.6", "version_start_excluding": null, "version_end_including": null, "version_end_excluding": "1.8.6.230" }, { "vulnerable": true, "criteria": "cpe:2.3:a:ruby-lang:ruby:*:*:*:*:*:*:*:*", "match_criteria_id": "5EDF7713-E20F-4EED-A323-98902450FD09", "version_start_including": "1.8.7", "version_start_excluding": null, "version_end_including": null, "version_end_excluding": "1.8.7.22" }, { "vulnerable": true, "criteria": "cpe:2.3:a:ruby-lang:ruby:*:*:*:*:*:*:*:*", "match_criteria_id": "9DDF08CB-5F01-49ED-9DDB-ED39C8B0423E", "version_start_including": "1.9.0", "version_start_excluding": null, "version_end_including": null, "version_end_excluding": "1.9.0.2" } ] } ] }, { "operator": null, "negate": null, "nodes": [ { "operator": "OR", "negate": false, "cpe_match": [ { "vulnerable": true, "criteria": "cpe:2.3:o:debian:debian_linux:4.0:*:*:*:*:*:*:*", "match_criteria_id": "0F92AB32-E7DE-43F4-B877-1F41FA162EC7", "version_start_including": null, "version_start_excluding": null, "version_end_including": null, "version_end_excluding": null } ] } ] }, { "operator": null, "negate": null, "nodes": [ { "operator": "OR", "negate": false, "cpe_match": [ { "vulnerable": true, "criteria": "cpe:2.3:o:canonical:ubuntu_linux:6.06:*:*:*:lts:*:*:*", "match_criteria_id": "5C18C3CD-969B-4AA3-AE3A-BA4A188F8BFF", "version_start_including": null, "version_start_excluding": null, "version_end_including": null, "version_end_excluding": null }, { "vulnerable": true, "criteria": "cpe:2.3:o:canonical:ubuntu_linux:7.04:*:*:*:*:*:*:*", "match_criteria_id": "6EBDAFF8-DE44-4E80-B6BD-E341F767F501", "version_start_including": null, "version_start_excluding": null, "version_end_including": null, "version_end_excluding": null }, { "vulnerable": true, "criteria": "cpe:2.3:o:canonical:ubuntu_linux:7.10:*:*:*:*:*:*:*", "match_criteria_id": "823BF8BE-2309-4F67-A5E2-EAD98F723468", "version_start_including": null, "version_start_excluding": null, "version_end_including": null, "version_end_excluding": null }, { "vulnerable": true, "criteria": "cpe:2.3:o:canonical:ubuntu_linux:8.04:*:*:*:lts:*:*:*", "match_criteria_id": "C91D2DBF-6DA7-4BA2-9F29-8BD2725A4701", "version_start_including": null, "version_start_excluding": null, "version_end_including": null, "version_end_excluding": null } ] } ] } ], "vendor_comments": null, "enrichment": { "cpe": [ { "criteria": "cpe:2.3:a:ruby-lang:ruby:*:*:*:*:*:*:*:*", "vendor": "ruby-lang", "product": "ruby", "product_type": "a", "vulnerable": true, "version_start_including": null, "version_start_excluding": null, "version_end_including": "1.8.4", "version_end_excluding": null, "affected_versions_first": "1.8", "affected_versions_last": "1.8.4" }, { "criteria": "cpe:2.3:a:ruby-lang:ruby:*:*:*:*:*:*:*:*", "vendor": "ruby-lang", "product": "ruby", "product_type": "a", "vulnerable": true, "version_start_including": null, "version_start_excluding": "1.8.5", "version_end_including": null, "version_end_excluding": "1.8.5.231", "affected_versions_first": "1.8.5.1", "affected_versions_last": "1.8.5.230" }, { "criteria": "cpe:2.3:a:ruby-lang:ruby:*:*:*:*:*:*:*:*", "vendor": "ruby-lang", "product": "ruby", "product_type": "a", "vulnerable": true, "version_start_including": "1.8.6", "version_start_excluding": null, "version_end_including": null, "version_end_excluding": "1.8.6.230", "affected_versions_first": "1.8.6", "affected_versions_last": "1.8.6.229" }, { "criteria": "cpe:2.3:a:ruby-lang:ruby:*:*:*:*:*:*:*:*", "vendor": "ruby-lang", "product": "ruby", "product_type": "a", "vulnerable": true, "version_start_including": "1.8.7", "version_start_excluding": null, "version_end_including": null, "version_end_excluding": "1.8.7.22", "affected_versions_first": "1.8.7", "affected_versions_last": "1.8.7.21" }, { "criteria": "cpe:2.3:a:ruby-lang:ruby:*:*:*:*:*:*:*:*", "vendor": "ruby-lang", "product": "ruby", "product_type": "a", "vulnerable": true, "version_start_including": "1.9.0", "version_start_excluding": null, "version_end_including": null, "version_end_excluding": "1.9.0.2", "affected_versions_first": "1.9.0.0", "affected_versions_last": "1.9.0.1" }, { "criteria": "cpe:2.3:o:debian:debian_linux:4.0:*:*:*:*:*:*:*", "vendor": "debian", "product": "debian_linux", "product_type": "o", "vulnerable": true, "version_start_including": null, "version_start_excluding": null, "version_end_including": null, "version_end_excluding": null, "affected_versions_first": "4.0", "affected_versions_last": "4.0" }, { "criteria": "cpe:2.3:o:canonical:ubuntu_linux:6.06:*:*:*:lts:*:*:*", "vendor": "canonical", "product": "ubuntu_linux", "product_type": "o", "vulnerable": true, "version_start_including": null, "version_start_excluding": null, "version_end_including": null, "version_end_excluding": null, "affected_versions_first": "6.06", "affected_versions_last": "6.06" }, { "criteria": "cpe:2.3:o:canonical:ubuntu_linux:7.04:*:*:*:*:*:*:*", "vendor": "canonical", "product": "ubuntu_linux", "product_type": "o", "vulnerable": true, "version_start_including": null, "version_start_excluding": null, "version_end_including": null, "version_end_excluding": null, "affected_versions_first": "7.04", "affected_versions_last": "7.04" }, { "criteria": "cpe:2.3:o:canonical:ubuntu_linux:7.10:*:*:*:*:*:*:*", "vendor": "canonical", "product": "ubuntu_linux", "product_type": "o", "vulnerable": true, "version_start_including": null, "version_start_excluding": null, "version_end_including": null, "version_end_excluding": null, "affected_versions_first": "7.10", "affected_versions_last": "7.10" }, { "criteria": "cpe:2.3:o:canonical:ubuntu_linux:8.04:*:*:*:lts:*:*:*", "vendor": "canonical", "product": "ubuntu_linux", "product_type": "o", "vulnerable": true, "version_start_including": null, "version_start_excluding": null, "version_end_including": null, "version_end_excluding": null, "affected_versions_first": "8.04", "affected_versions_last": "8.04" } ], "cwe": null, "epss_score": { "epss": 0.0428, "percentile": 0.90675, "date": "2026-09-23" }, "cisa_kev": null, "vdeep_metric": { "available_versions": [ "2.0" ], "source": "user@nist.gov", "type": "Primary", "cvss_data": { "version": "2.0", "vector_string": "AV:N/AC:L/Au:N/C:N/I:N/A:C", "attack_vector": "NETWORK", "attack_complexity": "LOW", "attack_requirements": null, "privileges_required": null, "user_interaction": null, "vulnerable_system_confidentiality": "NONE", "vulnerable_system_integrity": "NONE", "vulnerable_system_availability": "COMPLETE", "subsequent_system_confidentiality": null, "subsequent_system_integrity": null, "subsequent_system_availability": null, "exploit_maturity": null, "confidentiality_requirements": null, "integrity_requirements": null, "availability_requirements": null, "modified_attack_vector": null, "modified_attack_complexity": null, "modified_attack_requirements": null, "modified_privileges_required": null, "modified_user_interaction": null, "modified_vulnerable_system_confidentiality": null, "modified_vulnerable_system_integrity": null, "modified_vulnerable_system_availability": null, "modified_subsequent_system_confidentiality": null, "modified_subsequent_system_integrity": null, "modified_subsequent_system_availability": null, "safety": null, "automatable": null, "recovery": null, "value_density": null, "vulnerability_response_effort": null, "provider_urgency": null, "base_score": 7.8, "base_severity": "HIGH" } } } } ] } ``` ## Related Examples - [Configurations Starting at Version 2.13.0](/reference/vulnerability/search/examples/configurations-nodes-cpe-match-version-start-including/) - [Configurations Ending at Version 7.4.3](/reference/vulnerability/search/examples/configurations-nodes-cpe-match-version-end-including/) - [One CPE Match Criterion by Id](/reference/vulnerability/search/examples/configurations-nodes-cpe-match-match-criteria-id/) - [Configurations Fixed in Version 2.5.12](/reference/vulnerability/search/examples/configurations-nodes-cpe-match-version-end-excluding/) - [Configurations Matching MOVEit Transfer](/reference/vulnerability/search/examples/configurations-nodes-cpe-match-criteria/) - [Configurations Listing a Platform](/reference/vulnerability/search/examples/configurations-nodes-cpe-match-vulnerable/)