Ruby (aka CRuby) before 1.8.7-p357 computes hash values without restricting the ability…
Priority MEDIUM 41CWE-20Published · Updated
Key facts
- Attack vector
- Network
- Privileges required
- None
- User interaction
- — Not recorded in CVSS 2.0
- Attack complexity
- Low
- Impact type
- —
- Confidentiality · integrity · availability
- None · None · Complete
- Fix status
- Fixed
Attack profile from CVSS 2.0 · NVD. Fix status from CNA and Red Hat.
Summary
Ruby (aka CRuby) before 1.8.7-p357 computes hash values without restricting the ability to trigger hash collisions predictably, which allows context-dependent attackers to cause a denial of service (CPU consumption) via crafted input to an application that maintains a hash table.
Why it matters now
EPSS 0.04059 90th percentileScored 2026-11-07
Fix Fixed Red Hat: 5 advisories
SSVC decision points
Not available: CISA has not published SSVC decision points for this record.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| — | — | all versions | — | No fix listed | CNA |
- — Vendor— Affected all versions Fixed in — No fix listed CNA
CPE configurations NVD · 5
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:a:ruby-lang:ruby:*:*:*:*:*:*:*:* | up to 1.8.7-p352 | Vulnerable | ruby |
| cpe:2.3:a:ruby-lang:ruby:1.8.7-p299:*:*:*:*:*:*:* | 1.8.7-p299 | Vulnerable | ruby |
| cpe:2.3:a:ruby-lang:ruby:1.8.7-p302:*:*:*:*:*:*:* | 1.8.7-p302 | Vulnerable | ruby |
| cpe:2.3:a:ruby-lang:ruby:1.8.7-p330:*:*:*:*:*:*:* | 1.8.7-p330 | Vulnerable | ruby |
| cpe:2.3:a:ruby-lang:ruby:1.8.7-p334:*:*:*:*:*:*:* | 1.8.7-p334 | Vulnerable | ruby |
- cpe:2.3:a:ruby-lang:ruby:*:*:*:*:*:*:*:* Versions up to 1.8.7-p352 Vulnerable ·ruby
- cpe:2.3:a:ruby-lang:ruby:1.8.7-p299:*:*:*:*:*:*:* Versions 1.8.7-p299 Vulnerable ·ruby
- cpe:2.3:a:ruby-lang:ruby:1.8.7-p302:*:*:*:*:*:*:* Versions 1.8.7-p302 Vulnerable ·ruby
- cpe:2.3:a:ruby-lang:ruby:1.8.7-p330:*:*:*:*:*:*:* Versions 1.8.7-p330 Vulnerable ·ruby
- cpe:2.3:a:ruby-lang:ruby:1.8.7-p334:*:*:*:*:*:*:* Versions 1.8.7-p334 Vulnerable ·ruby
Remediation
Red Hat 5 advisories
- RHSA-2026:8838 Released 2026-04-17 · Red Hat rating ModerateRed Hat Hardened Images RPMs bug fix and enhancement update
- Red Hat Hardened Images ruby4.0-4.0.0-33.3.hum1@aarch64, ruby4.0-4.0.0-33.3.hum1@src, ruby4.0-4.0.0-33.3.hum1@x86_64 +10
- RHSA-2026:7307 Released 2026-04-09 · Red Hat rating ModerateRed Hat Hardened Images RPMs bug fix and enhancement update
- Red Hat Hardened Images ruby3.4-3.4.8-31.1.hum1@aarch64, ruby3.4-3.4.8-31.1.hum1@src, ruby3.4-3.4.8-31.1.hum1@x86_64 +10
- RHSA-2026:7305 Released 2026-04-09 · Red Hat rating ModerateRed Hat Hardened Images RPMs bug fix and enhancement update
- Red Hat Hardened Images ruby3.3-3.3.10-23.1.hum1@aarch64, ruby3.3-3.3.10-23.1.hum1@src, ruby3.3-3.3.10-23.1.hum1@x86_64 +10
Show 2 more Red Hat advisories
- RHSA-2012:0070 Released 2012-01-30 · Red Hat rating Moderateruby security update
- RHEL Desktop Workstation (v. 5 client) ruby-1.8.5-22.el5_7.1, ruby-devel-1.8.5-22.el5_7.1, ruby-devel-1.8.5-22.el5_7.1.i386 +2
- Red Hat Enterprise Linux (v. 5 server) ruby-1.8.5-22.el5_7.1, ruby-1.8.5-22.el5_7.1.i386, ruby-1.8.5-22.el5_7.1.ia64 +33
- Red Hat Enterprise Linux AS version 4 irb-1.8.1-18.el4, irb-1.8.1-18.el4.i386, irb-1.8.1-18.el4.ia64 +25
- Red Hat Enterprise Linux Desktop (v. 5 client) ruby-1.8.5-22.el5_7.1, ruby-1.8.5-22.el5_7.1.i386, ruby-docs-1.8.5-22.el5_7.1 +11
- Red Hat Enterprise Linux Desktop version 4 irb-1.8.1-18.el4, irb-1.8.1-18.el4.i386, ruby-1.8.1-18.el4 +11
- Red Hat Enterprise Linux ES version 4 irb-1.8.1-18.el4, irb-1.8.1-18.el4.i386, irb-1.8.1-18.el4.ia64 +18
- Red Hat Enterprise Linux WS version 4 irb-1.8.1-18.el4, irb-1.8.1-18.el4.i386, irb-1.8.1-18.el4.ia64 +18
- RHSA-2012:0069 Released 2012-01-30 · Red Hat rating Moderateruby security update
- Red Hat Enterprise Linux Desktop (v. 6) ruby-1.8.7.352-4.el6_2, ruby-irb-1.8.7.352-4.el6_2, ruby-libs-1.8.7.352-4.el6_2
- Red Hat Enterprise Linux Desktop Optional (v. 6) ruby-1.8.7.352-4.el6_2, ruby-devel-1.8.7.352-4.el6_2, ruby-docs-1.8.7.352-4.el6_2 +4
- Red Hat Enterprise Linux HPC Node (v. 6) ruby-1.8.7.352-4.el6_2, ruby-irb-1.8.7.352-4.el6_2, ruby-libs-1.8.7.352-4.el6_2
- Red Hat Enterprise Linux HPC Node Optional (v. 6) ruby-1.8.7.352-4.el6_2, ruby-devel-1.8.7.352-4.el6_2, ruby-docs-1.8.7.352-4.el6_2 +4
- Red Hat Enterprise Linux Server (v. 6) ruby-1.8.7.352-4.el6_2, ruby-irb-1.8.7.352-4.el6_2, ruby-libs-1.8.7.352-4.el6_2 +1
- Red Hat Enterprise Linux Server Optional (v. 6) ruby-1.8.7.352-4.el6_2, ruby-devel-1.8.7.352-4.el6_2, ruby-devel-1.8.7.352-4.el6_2.ppc +5
- Red Hat Enterprise Linux Workstation (v. 6) ruby-1.8.7.352-4.el6_2, ruby-irb-1.8.7.352-4.el6_2, ruby-libs-1.8.7.352-4.el6_2
- Red Hat Enterprise Linux Workstation Optional (v. 6) ruby-1.8.7.352-4.el6_2, ruby-devel-1.8.7.352-4.el6_2, ruby-docs-1.8.7.352-4.el6_2 +4
Vendor assessments
Red Hat
Red Hat rating: Moderate. Red Hat's page for this CVE →
| Product | Status | Plan or fix |
|---|---|---|
| RHEL Desktop Workstation (v. 5 client) | Fixed | RHSA-2012:0070 |
| Red Hat Enterprise Linux (v. 5 server) | Fixed | RHSA-2012:0070 |
| Red Hat Enterprise Linux AS version 4 | Fixed | RHSA-2012:0070 |
| Red Hat Enterprise Linux Desktop (v. 5 client) | Fixed | RHSA-2012:0070 |
| Red Hat Enterprise Linux Desktop (v. 6) | Fixed | RHSA-2012:0069 |
| Red Hat Enterprise Linux Desktop Optional (v. 6) | Fixed | RHSA-2012:0069 |
| Red Hat Enterprise Linux Desktop version 4 | Fixed | RHSA-2012:0070 |
| Red Hat Enterprise Linux ES version 4 | Fixed | RHSA-2012:0070 |
| Red Hat Enterprise Linux HPC Node (v. 6) | Fixed | RHSA-2012:0069 |
| Red Hat Enterprise Linux HPC Node Optional (v. 6) | Fixed | RHSA-2012:0069 |
| Red Hat Enterprise Linux Server (v. 6) | Fixed | RHSA-2012:0069 |
| Red Hat Enterprise Linux Server Optional (v. 6) | Fixed | RHSA-2012:0069 |
| Red Hat Enterprise Linux WS version 4 | Fixed | RHSA-2012:0070 |
| Red Hat Enterprise Linux Workstation (v. 6) | Fixed | RHSA-2012:0069 |
| Red Hat Enterprise Linux Workstation Optional (v. 6) | Fixed | RHSA-2012:0069 |
| Red Hat Hardened Images | Fixed | RHSA-2026:7305, RHSA-2026:7307, RHSA-2026:8838 |
Timeline
- 2026-10-02 Threatist record created from CVE-2011-4815
- 2026-10-03 Alias added: GHSA-xpr8-vpc7-7vfc
References
Other 6
- http://www.nruns.com/_downloads/advisory28122011.pdf
- [ruby-talk] 20111228 [ANN] ruby 1.8.7 patchlevel 357 released
- http://www.ruby-lang.org/en/news/2011/12/28/denial-of-service-attack-was-found-for-rubys-hash-algorithm/
- 20111228 n.runs-SA-2011.004 - web programming languages and platforms - DoS through hash table
- http://support.apple.com/kb/HT5281
- http://www.ocert.org/advisories/ocert-2011-003.html
More Ruby vulnerabilities
- TI-2026-71508 Integer overflow in GitLab allows code execution on the server KEVCVSS 3.1CRITICAL 10.0
- TI-2017-12709 Ruby before 2.4.3 allows Net::FTP command injection. CVSS 3.0HIGH 8.8
- TI-2008-03501 Algorithmic complexity vulnerability in the WEBrick::HTTPUtils.split_header_value… CVSS 2.0HIGH 7.8
- TI-2021-09891 In Ruby through 3.0 on Windows, a remote attacker can submit a crafted path when a Web… CVSS 3.1HIGH 7.5
- TI-2013-03637 Heap-based buffer overflow in Ruby 1.8, 1.9 before 1.9.3-p484, 2.0 before 2.0.0-p353, 2.1… CVSS 2.0MEDIUM 6.8
- TI-2018-11751 An issue was discovered in the OpenSSL library in Ruby before 2.3.8, 2.4.x before 2.4.5… CVSS 3.0CRITICAL 9.8
Sources
- CVE-2011-4815 · CVE Program
- CVE-2011-4815 · NVD
- FIRST EPSS
- GHSA-xpr8-vpc7-7vfc · GitHub Advisory Database · CC BY 4.0
- CVE-2011-4815 · Red Hat security data · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences