module

Ruby on Rails JSON Processor Floating Point Heap Overflow DoS

Disclosed
2013-11-22
Created
2018-05-30

Description

When Ruby attempts to convert a string representation of a large floating point
decimal number to its floating point equivalent, a heap-based buffer overflow
can be triggered. This module has been tested successfully on a Ruby on Rails application
using Ruby version 1.9.3-p448 with WebRick and Thin web servers, where the Rails application
crashes with a segfault error. Other versions of Ruby are reported to be affected.

Authors

Charlie Somerville
joev joev@metasploit.com
todb todb@metasploit.com

Module Options

To display the available options, load the module within the Metasploit console and run the commands ‘show options’ or ‘show advanced’:


msf > use auxiliary/dos/http/rails_json_float_dos
msf auxiliary(rails_json_float_dos) > show actions
...actions...
msf auxiliary(rails_json_float_dos) > set ACTION < action-name >
msf auxiliary(rails_json_float_dos) > show options
...show and set options...
msf auxiliary(rails_json_float_dos) > run

Title
NEW

Explore Exposure Command

Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.