CVE-2008-3655

Ruby 1.8.5 and earlier, 1.8.6 through 1.8.6-p286, 1.8.7 through 1.8.7-p71, and 1.9 through r18423...

7.5 HighPublic exploitFix available

Ruby 1.8.5 and earlier, 1.8.6 through 1.8.6-p286, 1.8.7 through 1.8.7-p71, and 1.9 through r18423 does not properly restrict access to critical variables and methods at various safe levels, which allows context-dependent attackers to bypass intended access restrictions via (1) untrace_var, (2) $PROGRAM_NAME, and (3) syslog at safe level 4, and (4) insecure methods at safe levels 1 through 3.

Exploit likelihood

14.1%Up 1.5 points since Feb 4, 2022

What each source reports

NVD Score used 7.5

Record: CVE-2008-3655
CVSS 2.0: 7.5 HighAV:N/AC:L/Au:N/C:P/I:P/A:P
Weakness: CWE-264
Updated: 2026-11-02

CVE List No score

Record: CVE-2008-3655
Updated: 2026-11-02

EUVDEUVD-2008-3641 No score

Record: EUVD-2008-3641
Updated: 2026-11-03

GitHub AdvisoriesGHSA-p524-ppf2-w36w No score

Ruby 1.8.5 and earlier, 1.8.6 through 1.8.6-p286, 1.8.7 through 1.8.7-p71, and 1.9 through r18423...

Record: GHSA-p524-ppf2-w36w
Updated: 2026-11-02

OSVRHSA-2026:7305 7.5

Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update

Record: RHSA-2026:7305
CVSS 3.1: 7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
Updated: 2026-11-02

OSVRHSA-2026:7307 7.5

Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update

Record: RHSA-2026:7307
CVSS 3.1: 7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
Updated: 2026-11-02

OSVRHSA-2026:8838 7.5

Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update

Record: RHSA-2026:8838
CVSS 3.1: 7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
Updated: 2026-11-02

Affected products

ruby-lang ruby

Affected packages

Affected packages
Package	Affected	Fixed
`ruby1.8` Debian:4.0	before 1.8.5-4etch3, plus listed versions 1.8.5-41.8.5-4etch11.8.5-4etch2	1.8.5-4etch3
`ruby1.9` Debian:4.0	before 1.9.0+20060609-1etch3, plus listed versions 1.9.0+20060609-11.9.0+20060609-1etch11.9.0+20060609-1etch2	1.9.0+20060609-1etch3
`irb` Red Hat:enterprise_linux:2.1::as	before 0:1.6.4-7.el2	0:1.6.4-7.el2
`ruby` Red Hat:enterprise_linux:2.1::as	before 0:1.6.4-7.el2	0:1.6.4-7.el2
`ruby-devel` Red Hat:enterprise_linux:2.1::as	before 0:1.6.4-7.el2	0:1.6.4-7.el2
`ruby-docs` Red Hat:enterprise_linux:2.1::as	before 0:1.6.4-7.el2	0:1.6.4-7.el2
`ruby-libs` Red Hat:enterprise_linux:2.1::as	before 0:1.6.4-7.el2	0:1.6.4-7.el2
`ruby-tcltk` Red Hat:enterprise_linux:2.1::as	before 0:1.6.4-7.el2	0:1.6.4-7.el2
`irb` Red Hat:enterprise_linux:2.1::es	before 0:1.6.4-7.el2	0:1.6.4-7.el2
`ruby` Red Hat:enterprise_linux:2.1::es	before 0:1.6.4-7.el2	0:1.6.4-7.el2

Show 114 moreShow less

Affected packages
Package	Affected	Fixed
`ruby-devel` Red Hat:enterprise_linux:2.1::es	before 0:1.6.4-7.el2	0:1.6.4-7.el2
`ruby-docs` Red Hat:enterprise_linux:2.1::es	before 0:1.6.4-7.el2	0:1.6.4-7.el2
`ruby-libs` Red Hat:enterprise_linux:2.1::es	before 0:1.6.4-7.el2	0:1.6.4-7.el2
`ruby-tcltk` Red Hat:enterprise_linux:2.1::es	before 0:1.6.4-7.el2	0:1.6.4-7.el2
`irb` Red Hat:enterprise_linux:2.1::ws	before 0:1.6.4-7.el2	0:1.6.4-7.el2
`ruby` Red Hat:enterprise_linux:2.1::ws	before 0:1.6.4-7.el2	0:1.6.4-7.el2
`ruby-devel` Red Hat:enterprise_linux:2.1::ws	before 0:1.6.4-7.el2	0:1.6.4-7.el2
`ruby-docs` Red Hat:enterprise_linux:2.1::ws	before 0:1.6.4-7.el2	0:1.6.4-7.el2
`ruby-libs` Red Hat:enterprise_linux:2.1::ws	before 0:1.6.4-7.el2	0:1.6.4-7.el2
`ruby-tcltk` Red Hat:enterprise_linux:2.1::ws	before 0:1.6.4-7.el2	0:1.6.4-7.el2
`irb` Red Hat:enterprise_linux:3::as	before 0:1.6.8-13.el3	0:1.6.8-13.el3
`ruby` Red Hat:enterprise_linux:3::as	before 0:1.6.8-13.el3	0:1.6.8-13.el3
`ruby-debuginfo` Red Hat:enterprise_linux:3::as	before 0:1.6.8-13.el3	0:1.6.8-13.el3
`ruby-devel` Red Hat:enterprise_linux:3::as	before 0:1.6.8-13.el3	0:1.6.8-13.el3
`ruby-docs` Red Hat:enterprise_linux:3::as	before 0:1.6.8-13.el3	0:1.6.8-13.el3
`ruby-libs` Red Hat:enterprise_linux:3::as	before 0:1.6.8-13.el3	0:1.6.8-13.el3
`ruby-mode` Red Hat:enterprise_linux:3::as	before 0:1.6.8-13.el3	0:1.6.8-13.el3
`ruby-tcltk` Red Hat:enterprise_linux:3::as	before 0:1.6.8-13.el3	0:1.6.8-13.el3
`irb` Red Hat:enterprise_linux:3::desktop	before 0:1.6.8-13.el3	0:1.6.8-13.el3
`ruby` Red Hat:enterprise_linux:3::desktop	before 0:1.6.8-13.el3	0:1.6.8-13.el3
`ruby-debuginfo` Red Hat:enterprise_linux:3::desktop	before 0:1.6.8-13.el3	0:1.6.8-13.el3
`ruby-devel` Red Hat:enterprise_linux:3::desktop	before 0:1.6.8-13.el3	0:1.6.8-13.el3
`ruby-docs` Red Hat:enterprise_linux:3::desktop	before 0:1.6.8-13.el3	0:1.6.8-13.el3
`ruby-libs` Red Hat:enterprise_linux:3::desktop	before 0:1.6.8-13.el3	0:1.6.8-13.el3
`ruby-mode` Red Hat:enterprise_linux:3::desktop	before 0:1.6.8-13.el3	0:1.6.8-13.el3
`ruby-tcltk` Red Hat:enterprise_linux:3::desktop	before 0:1.6.8-13.el3	0:1.6.8-13.el3
`irb` Red Hat:enterprise_linux:3::es	before 0:1.6.8-13.el3	0:1.6.8-13.el3
`ruby` Red Hat:enterprise_linux:3::es	before 0:1.6.8-13.el3	0:1.6.8-13.el3
`ruby-debuginfo` Red Hat:enterprise_linux:3::es	before 0:1.6.8-13.el3	0:1.6.8-13.el3
`ruby-devel` Red Hat:enterprise_linux:3::es	before 0:1.6.8-13.el3	0:1.6.8-13.el3
`ruby-docs` Red Hat:enterprise_linux:3::es	before 0:1.6.8-13.el3	0:1.6.8-13.el3
`ruby-libs` Red Hat:enterprise_linux:3::es	before 0:1.6.8-13.el3	0:1.6.8-13.el3
`ruby-mode` Red Hat:enterprise_linux:3::es	before 0:1.6.8-13.el3	0:1.6.8-13.el3
`ruby-tcltk` Red Hat:enterprise_linux:3::es	before 0:1.6.8-13.el3	0:1.6.8-13.el3
`irb` Red Hat:enterprise_linux:3::ws	before 0:1.6.8-13.el3	0:1.6.8-13.el3
`ruby` Red Hat:enterprise_linux:3::ws	before 0:1.6.8-13.el3	0:1.6.8-13.el3
`ruby-debuginfo` Red Hat:enterprise_linux:3::ws	before 0:1.6.8-13.el3	0:1.6.8-13.el3
`ruby-devel` Red Hat:enterprise_linux:3::ws	before 0:1.6.8-13.el3	0:1.6.8-13.el3
`ruby-docs` Red Hat:enterprise_linux:3::ws	before 0:1.6.8-13.el3	0:1.6.8-13.el3
`ruby-libs` Red Hat:enterprise_linux:3::ws	before 0:1.6.8-13.el3	0:1.6.8-13.el3
`ruby-mode` Red Hat:enterprise_linux:3::ws	before 0:1.6.8-13.el3	0:1.6.8-13.el3
`ruby-tcltk` Red Hat:enterprise_linux:3::ws	before 0:1.6.8-13.el3	0:1.6.8-13.el3
`irb` Red Hat:enterprise_linux:4::as	before 0:1.8.1-7.el4_7.1	0:1.8.1-7.el4_7.1
`ruby` Red Hat:enterprise_linux:4::as	before 0:1.8.1-7.el4_7.1	0:1.8.1-7.el4_7.1
`ruby-debuginfo` Red Hat:enterprise_linux:4::as	before 0:1.8.1-7.el4_7.1	0:1.8.1-7.el4_7.1
`ruby-devel` Red Hat:enterprise_linux:4::as	before 0:1.8.1-7.el4_7.1	0:1.8.1-7.el4_7.1
`ruby-docs` Red Hat:enterprise_linux:4::as	before 0:1.8.1-7.el4_7.1	0:1.8.1-7.el4_7.1
`ruby-libs` Red Hat:enterprise_linux:4::as	before 0:1.8.1-7.el4_7.1	0:1.8.1-7.el4_7.1
`ruby-mode` Red Hat:enterprise_linux:4::as	before 0:1.8.1-7.el4_7.1	0:1.8.1-7.el4_7.1
`ruby-tcltk` Red Hat:enterprise_linux:4::as	before 0:1.8.1-7.el4_7.1	0:1.8.1-7.el4_7.1
`irb` Red Hat:enterprise_linux:4::desktop	before 0:1.8.1-7.el4_7.1	0:1.8.1-7.el4_7.1
`ruby` Red Hat:enterprise_linux:4::desktop	before 0:1.8.1-7.el4_7.1	0:1.8.1-7.el4_7.1
`ruby-debuginfo` Red Hat:enterprise_linux:4::desktop	before 0:1.8.1-7.el4_7.1	0:1.8.1-7.el4_7.1
`ruby-devel` Red Hat:enterprise_linux:4::desktop	before 0:1.8.1-7.el4_7.1	0:1.8.1-7.el4_7.1
`ruby-docs` Red Hat:enterprise_linux:4::desktop	before 0:1.8.1-7.el4_7.1	0:1.8.1-7.el4_7.1
`ruby-libs` Red Hat:enterprise_linux:4::desktop	before 0:1.8.1-7.el4_7.1	0:1.8.1-7.el4_7.1
`ruby-mode` Red Hat:enterprise_linux:4::desktop	before 0:1.8.1-7.el4_7.1	0:1.8.1-7.el4_7.1
`ruby-tcltk` Red Hat:enterprise_linux:4::desktop	before 0:1.8.1-7.el4_7.1	0:1.8.1-7.el4_7.1
`irb` Red Hat:enterprise_linux:4::es	before 0:1.8.1-7.el4_7.1	0:1.8.1-7.el4_7.1
`ruby` Red Hat:enterprise_linux:4::es	before 0:1.8.1-7.el4_7.1	0:1.8.1-7.el4_7.1
`ruby-debuginfo` Red Hat:enterprise_linux:4::es	before 0:1.8.1-7.el4_7.1	0:1.8.1-7.el4_7.1
`ruby-devel` Red Hat:enterprise_linux:4::es	before 0:1.8.1-7.el4_7.1	0:1.8.1-7.el4_7.1
`ruby-docs` Red Hat:enterprise_linux:4::es	before 0:1.8.1-7.el4_7.1	0:1.8.1-7.el4_7.1
`ruby-libs` Red Hat:enterprise_linux:4::es	before 0:1.8.1-7.el4_7.1	0:1.8.1-7.el4_7.1
`ruby-mode` Red Hat:enterprise_linux:4::es	before 0:1.8.1-7.el4_7.1	0:1.8.1-7.el4_7.1
`ruby-tcltk` Red Hat:enterprise_linux:4::es	before 0:1.8.1-7.el4_7.1	0:1.8.1-7.el4_7.1
`irb` Red Hat:enterprise_linux:4::ws	before 0:1.8.1-7.el4_7.1	0:1.8.1-7.el4_7.1
`ruby` Red Hat:enterprise_linux:4::ws	before 0:1.8.1-7.el4_7.1	0:1.8.1-7.el4_7.1
`ruby-debuginfo` Red Hat:enterprise_linux:4::ws	before 0:1.8.1-7.el4_7.1	0:1.8.1-7.el4_7.1
`ruby-devel` Red Hat:enterprise_linux:4::ws	before 0:1.8.1-7.el4_7.1	0:1.8.1-7.el4_7.1
`ruby-docs` Red Hat:enterprise_linux:4::ws	before 0:1.8.1-7.el4_7.1	0:1.8.1-7.el4_7.1
`ruby-libs` Red Hat:enterprise_linux:4::ws	before 0:1.8.1-7.el4_7.1	0:1.8.1-7.el4_7.1
`ruby-mode` Red Hat:enterprise_linux:4::ws	before 0:1.8.1-7.el4_7.1	0:1.8.1-7.el4_7.1
`ruby-tcltk` Red Hat:enterprise_linux:4::ws	before 0:1.8.1-7.el4_7.1	0:1.8.1-7.el4_7.1
`ruby` Red Hat:enterprise_linux:5::client_workstation	before 0:1.8.5-5.el5_2.5	0:1.8.5-5.el5_2.5
`ruby-debuginfo` Red Hat:enterprise_linux:5::client_workstation	before 0:1.8.5-5.el5_2.5	0:1.8.5-5.el5_2.5
`ruby-devel` Red Hat:enterprise_linux:5::client_workstation	before 0:1.8.5-5.el5_2.5	0:1.8.5-5.el5_2.5
`ruby-mode` Red Hat:enterprise_linux:5::client_workstation	before 0:1.8.5-5.el5_2.5	0:1.8.5-5.el5_2.5
`ruby` Red Hat:enterprise_linux:5::client	before 0:1.8.5-5.el5_2.5	0:1.8.5-5.el5_2.5
`ruby-debuginfo` Red Hat:enterprise_linux:5::client	before 0:1.8.5-5.el5_2.5	0:1.8.5-5.el5_2.5
`ruby-docs` Red Hat:enterprise_linux:5::client	before 0:1.8.5-5.el5_2.5	0:1.8.5-5.el5_2.5
`ruby-irb` Red Hat:enterprise_linux:5::client	before 0:1.8.5-5.el5_2.5	0:1.8.5-5.el5_2.5
`ruby-libs` Red Hat:enterprise_linux:5::client	before 0:1.8.5-5.el5_2.5	0:1.8.5-5.el5_2.5
`ruby-rdoc` Red Hat:enterprise_linux:5::client	before 0:1.8.5-5.el5_2.5	0:1.8.5-5.el5_2.5
`ruby-ri` Red Hat:enterprise_linux:5::client	before 0:1.8.5-5.el5_2.5	0:1.8.5-5.el5_2.5
`ruby-tcltk` Red Hat:enterprise_linux:5::client	before 0:1.8.5-5.el5_2.5	0:1.8.5-5.el5_2.5
`ruby` Red Hat:enterprise_linux:5::server	before 0:1.8.5-5.el5_2.5	0:1.8.5-5.el5_2.5
`ruby-debuginfo` Red Hat:enterprise_linux:5::server	before 0:1.8.5-5.el5_2.5	0:1.8.5-5.el5_2.5
`ruby-devel` Red Hat:enterprise_linux:5::server	before 0:1.8.5-5.el5_2.5	0:1.8.5-5.el5_2.5
`ruby-docs` Red Hat:enterprise_linux:5::server	before 0:1.8.5-5.el5_2.5	0:1.8.5-5.el5_2.5
`ruby-irb` Red Hat:enterprise_linux:5::server	before 0:1.8.5-5.el5_2.5	0:1.8.5-5.el5_2.5
`ruby-libs` Red Hat:enterprise_linux:5::server	before 0:1.8.5-5.el5_2.5	0:1.8.5-5.el5_2.5
`ruby-mode` Red Hat:enterprise_linux:5::server	before 0:1.8.5-5.el5_2.5	0:1.8.5-5.el5_2.5
`ruby-rdoc` Red Hat:enterprise_linux:5::server	before 0:1.8.5-5.el5_2.5	0:1.8.5-5.el5_2.5
`ruby-ri` Red Hat:enterprise_linux:5::server	before 0:1.8.5-5.el5_2.5	0:1.8.5-5.el5_2.5
`ruby-tcltk` Red Hat:enterprise_linux:5::server	before 0:1.8.5-5.el5_2.5	0:1.8.5-5.el5_2.5
`ruby3.3` Red Hat:hummingbird:1	before 0:3.3.10-23.1.hum1	0:3.3.10-23.1.hum1
`ruby3.3-bundled-gems` Red Hat:hummingbird:1	before 0:3.3.10-23.1.hum1	0:3.3.10-23.1.hum1
`ruby3.3-default-gems` Red Hat:hummingbird:1	before 0:3.3.10-23.1.hum1	0:3.3.10-23.1.hum1
`ruby3.3-devel` Red Hat:hummingbird:1	before 0:3.3.10-23.1.hum1	0:3.3.10-23.1.hum1
`ruby3.3-doc` Red Hat:hummingbird:1	before 0:3.3.10-23.1.hum1	0:3.3.10-23.1.hum1
`ruby3.3-libs` Red Hat:hummingbird:1	before 0:3.3.10-23.1.hum1	0:3.3.10-23.1.hum1
`ruby3.4` Red Hat:hummingbird:1	before 0:3.4.8-31.1.hum1	0:3.4.8-31.1.hum1
`ruby3.4-bundled-gems` Red Hat:hummingbird:1	before 0:3.4.8-31.1.hum1	0:3.4.8-31.1.hum1
`ruby3.4-default-gems` Red Hat:hummingbird:1	before 0:3.4.8-31.1.hum1	0:3.4.8-31.1.hum1
`ruby3.4-devel` Red Hat:hummingbird:1	before 0:3.4.8-31.1.hum1	0:3.4.8-31.1.hum1
`ruby3.4-doc` Red Hat:hummingbird:1	before 0:3.4.8-31.1.hum1	0:3.4.8-31.1.hum1
`ruby3.4-libs` Red Hat:hummingbird:1	before 0:3.4.8-31.1.hum1	0:3.4.8-31.1.hum1
`ruby4.0` Red Hat:hummingbird:1	before 0:4.0.0-33.3.hum1	0:4.0.0-33.3.hum1
`ruby4.0-bundled-gems` Red Hat:hummingbird:1	before 0:4.0.0-33.3.hum1	0:4.0.0-33.3.hum1
`ruby4.0-default-gems` Red Hat:hummingbird:1	before 0:4.0.0-33.3.hum1	0:4.0.0-33.3.hum1
`ruby4.0-devel` Red Hat:hummingbird:1	before 0:4.0.0-33.3.hum1	0:4.0.0-33.3.hum1
`ruby4.0-doc` Red Hat:hummingbird:1	before 0:4.0.0-33.3.hum1	0:4.0.0-33.3.hum1
`ruby4.0-libs` Red Hat:hummingbird:1	before 0:4.0.0-33.3.hum1	0:4.0.0-33.3.hum1

Public exploits

Links only. Every CVE stores no exploit code.

Public exploits
Source	Link	Date
Exploit-DB	Ruby 1.9 dl - Module DL.dlopen Arbitrary Library Access	2008-08-11
Exploit-DB	Ruby 1.9 - Safe Level Multiple Function Restriction Bypass	2008-08-11

History

History
Recorded	Changed	Sources
Nov 3, 2026	aliases	EUVD
Nov 2, 2026	first indexed	CVE List, Exploit-DB, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2008-3655 is a high vulnerability (CVSS 7.5) in Ruby-lang Ruby, published August 13, 2008. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 14.1%, the 96th percentile. Fixed in ruby1.8 1.8.5-4etch3.

References

Show 194 moreShow less

This page doesn't list everything

Left out here: 15 references. The JSON record has them.