Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

ruby-lang date vulnerabilities and exploits

(subscribe to this query)
7.5
CVSSv2
CVE-2021-41816
CGI.escape_html in Ruby prior to 2.7.5 and 3.x prior to 3.0.3 has an integer overflow and resultant buffer overflow via a long string on platforms (such as Windows) where size_t and long have different numbers of bytes. This also affects the CGI gem prior to 0.3.1 for Ruby.
Ruby-lang CgiFedoraproject Fedora 34Fedoraproject Fedora 35
5
CVSSv2
CVE-2021-41819
CGI::Cookie.parse in Ruby up to and including 2.6.8 mishandles security prefixes in cookie names. This also affects the CGI gem up to and including 0.3.0 for Ruby.
Ruby-lang RubyRuby-lang Cgi 0.3.0Ruby-lang Cgi 0.2.0Ruby-lang Cgi 0.1.0Redhat Enterprise Linux 8.0Redhat Software Collections -Debian Debian Linux 9.0Debian Debian Linux 10.0Debian Debian Linux 11.0Suse Linux Enterprise 12.0Suse Linux Enterprise 15.0Suse Linux Enterprise 11.0Opensuse Factory -Opensuse Leap 15.2Fedoraproject Fedora 34Fedoraproject Fedora 35
5
CVSSv2
CVE-2021-41817
Date.parse in the date gem up to and including 3.2.0 for Ruby allows ReDoS (regular expression Denial of Service) via a long string. The fixed versions are 3.2.1, 3.1.2, 3.0.2, and 2.0.1.
Ruby-lang DateRuby-lang Date 3.2.0Ruby-lang RubyRedhat Enterprise Linux 7.0Redhat Enterprise Linux 8.0Redhat Software Collections -Fedoraproject Fedora 34Fedoraproject Fedora 35Debian Debian Linux 9.0Debian Debian Linux 10.0Debian Debian Linux 11.0Suse Linux Enterprise 12.0Suse Linux Enterprise 15.0Opensuse Factory -Opensuse Leap 15.2
4.3
CVSSv2
CVE-2015-1855
verify_certificate_identity in the OpenSSL extension in Ruby prior to 2.0.0 patchlevel 645, 2.1.x prior to 2.1.6, and 2.2.x prior to 2.2.2 does not properly validate hostnames, which allows remote malicious users to spoof servers via vectors related to (1) multiple wildcards, (1)...
Ruby-lang Ruby 2.0.0Ruby-lang RubyRuby-lang TrunkDebian Debian Linux 7.0Debian Debian Linux 8.0Debian Debian Linux 9.0Puppet Puppet Agent 1.0.0Puppet Puppet Enterprise
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
race conditionCVE-2024-4249CVE-2024-4244CVE-2023-20198TCPCVE-2022-48648CVE-2022-48636CVE-2024-21345SQL
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook