ruby-lang ruby 2.1.6 vulnerabilities and exploits

(subscribe to this query)

DL::dlopen in Ruby 1.8, 1.9.0, 1.9.2, 1.9.3, 2.0.0 before patchlevel 648, and 2.1 prior to 2.1.8 opens libraries with tainted names.

Ruby-lang Ruby 2.0.0 Ruby-lang Ruby 1.8.0 Ruby-lang Ruby 2.1.6 Ruby-lang Ruby 2.1.7 Ruby-lang Ruby 1.9.2 Ruby-lang Ruby 1.9.0 Ruby-lang Ruby 2.1.3 Ruby-lang Ruby 2.1.4 Ruby-lang Ruby 2.1.0 Ruby-lang Ruby 1.9.3 Ruby-lang Ruby 2.1.2 Ruby-lang Ruby 2.1.5 Ruby-lang Ruby 2.1.1

1 Github repository

The Fiddle::Handle implementation in ext/fiddle/handle.c in Ruby prior to 2.0.0-p648, 2.1 prior to 2.1.8, and 2.2 prior to 2.2.4, as distributed in Apple OS X prior to 10.11.4 and other products, mishandles tainting, which allows context-dependent malicious users to execute arbit...

Apple Mac Os X Ruby-lang Ruby 2.1.6 Ruby-lang Ruby 2.1.5 Ruby-lang Ruby 2.2.0 Ruby-lang Ruby 2.1.7 Ruby-lang Ruby Ruby-lang Ruby 2.2.2 Ruby-lang Ruby 2.2.1 Ruby-lang Ruby 2.1.2 Ruby-lang Ruby 2.1.1 Ruby-lang Ruby 2.1.0 Ruby-lang Ruby 2.2.3 Ruby-lang Ruby 2.1.4 Ruby-lang Ruby 2.1.3

3 Github repositories

verify_certificate_identity in the OpenSSL extension in Ruby prior to 2.0.0 patchlevel 645, 2.1.x prior to 2.1.6, and 2.2.x prior to 2.2.2 does not properly validate hostnames, which allows remote malicious users to spoof servers via vectors related to (1) multiple wildcards, (1)...

Ruby-lang Ruby 2.0.0 Ruby-lang Ruby Ruby-lang Trunk Debian Debian Linux 7.0 Debian Debian Linux 8.0 Debian Debian Linux 9.0 Puppet Puppet Agent 1.0.0 Puppet Puppet Enterprise

1 Github repository

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook