Every CVE Search/ Get API key

CVE-2018-16395

Ruby Openssl Allows Incorrect Value Comparison

9.8 CriticalFix available

An issue was discovered in the OpenSSL library in Ruby before 2.3.8, 2.4.x before 2.4.5, 2.5.x before 2.5.2, and 2.6.x before 2.6.0-preview3. When two OpenSSL::X509::Name objects are compared using ==, depending on the ordering, non-equal objects may return true. When the first argument is one character longer than the second, or the second argument contains a character that is one less than a character in the same position of the first argument, the result of == will be true. This could be leveraged to create an illegitimate certificate that may be accepted as legitimate and then used in signing or encryption operations.

Attack profile

How easy it is to exploit

Attack vector
Network
Complexity
Low
Privileges needed
None
User interaction
None

What an attacker can affect

Confidentiality
High
Integrity
High
Availability
High

Exploit likelihood

10.7%Up 6.6 points since Apr 14, 2021
90%50%10%1%

What each source reports

NVD Score used 9.8

An issue was discovered in the OpenSSL library in Ruby before 2.3.8, 2.4.x before 2.4.5, 2.5.x before 2.5.2, and 2.6.x before 2.6.0-preview3. When two OpenSSL::X509::Name objects are compared using ==, depending on the ordering, non-equal objects may return true. When the first argument is one character longer than the second, or the second argument contains a character that is one less than a character in the same position of the first argument, the result of == will be true. This could be leveraged to create an illegitimate certificate that may be accepted as legitimate and then used in signing or encryption operations.

Record
CVE-2018-16395
CVSS 3.0
9.8 CriticalCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS 2.0
7.5 HighAV:N/AC:L/Au:N/C:P/I:P/A:P
Updated
2026-11-02
CVE List No score

An issue was discovered in the OpenSSL library in Ruby before 2.3.8, 2.4.x before 2.4.5, 2.5.x before 2.5.2, and 2.6.x before 2.6.0-preview3. When two OpenSSL::X509::Name objects are compared using ==, depending on the ordering, non-equal objects may return true. When the first argument is one character longer than the second, or the second argument contains a character that is one less than a character in the same position of the first argument, the result of == will be true. This could be leveraged to create an illegitimate certificate that may be accepted as legitimate and then used in signing or encryption operations.

Record
CVE-2018-16395
Updated
2026-11-02
EUVDEUVD-2022-4596 No score

An issue was discovered in the OpenSSL library in Ruby before 2.3.8, 2.4.x before 2.4.5, 2.5.x before 2.5.2, and 2.6.x before 2.6.0-preview3. When two OpenSSL::X509::Name objects are compared using ==, depending on the ordering, non-equal objects may return true. When the first argument is one character longer than the second, or the second argument contains a character that is one less than a character in the same position of the first argument, the result of == will be true. This could be leveraged to create an illegitimate certificate that may be accepted as legitimate and then used in signing or encryption operations.

Record
EUVD-2022-4596
Updated
2026-11-03
GitHub AdvisoriesGHSA-mmrq-6999-72v8 9.8

Ruby Openssl Allows Incorrect Value Comparison

An issue was discovered in the OpenSSL library in Ruby when two OpenSSL::X509::Name objects are compared using ==, depending on the ordering, non-equal objects may return true. When the first argument is one character longer than the second, or the second argument contains a character that is one less than a character in the same position of the first argument, the result of == will be true. This could be leveraged to create an illegitimate certificate that may be accepted as legitimate and then used in signing or encryption operations.

Record
GHSA-mmrq-6999-72v8
CVSS 3.0
9.8 CriticalCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVALPINE-CVE-2018-16395 9.8

An issue was discovered in the OpenSSL library in Ruby before 2.3.8, 2.4.x before 2.4.5, 2.5.x before 2.5.2, and 2.6.x before 2.6.0-preview3. When two OpenSSL::X509::Name objects are compared using ==, depending on the ordering, non-equal objects may return true. When the first argument is one character longer than the second, or the second argument contains a character that is one less than a character in the same position of the first argument, the result of == will be true. This could be leveraged to create an illegitimate certificate that may be accepted as legitimate and then used in signing or encryption operations.

Record
ALPINE-CVE-2018-16395
CVSS 3.0
9.8 CriticalCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVBELL-CVE-2018-16395 9.8

CVE-2018-16395 does not affect BellSoft software

Record
BELL-CVE-2018-16395
CVSS 3.0
9.8 CriticalCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
Show 15 moreShow less
OSV 9.8

An issue was discovered in the OpenSSL library in Ruby before 2.3.8, 2.4.x before 2.4.5, 2.5.x before 2.5.2, and 2.6.x before 2.6.0-preview3. When two OpenSSL::X509::Name objects are compared using ==, depending on the ordering, non-equal objects may return true. When the first argument is one character longer than the second, or the second argument contains a character that is one less than a character in the same position of the first argument, the result of == will be true. This could be leveraged to create an illegitimate certificate that may be accepted as legitimate and then used in signing or encryption operations.

Record
CVE-2018-16395
CVSS 3.0
9.8 CriticalCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVGHSA-mmrq-6999-72v8 9.8

Ruby Openssl Allows Incorrect Value Comparison

An issue was discovered in the OpenSSL library in Ruby when two OpenSSL::X509::Name objects are compared using ==, depending on the ordering, non-equal objects may return true. When the first argument is one character longer than the second, or the second argument contains a character that is one less than a character in the same position of the first argument, the result of == will be true. This could be leveraged to create an illegitimate certificate that may be accepted as legitimate and then used in signing or encryption operations.

Record
GHSA-mmrq-6999-72v8
CVSS 3.0
9.8 CriticalCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2018:3729 7.8

Red Hat Security Advisory: rh-ruby23-ruby security, bug fix, and enhancement update

Record
RHSA-2018:3729
CVSS 3.0
7.8 HighCVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2018:3730 7.8

Red Hat Security Advisory: rh-ruby24-ruby security, bug fix, and enhancement update

Record
RHSA-2018:3730
CVSS 3.0
7.8 HighCVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2018:3731 7.8

Red Hat Security Advisory: rh-ruby25-ruby security, bug fix, and enhancement update

Record
RHSA-2018:3731
CVSS 3.0
7.8 HighCVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2018:3738 7.5

Red Hat Security Advisory: ruby security update

Record
RHSA-2018:3738
CVSS 3.0
7.5 HighCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
Updated
2026-11-02
OSVRHSA-2019:1948 7.5

Red Hat Security Advisory: ruby security update

Record
RHSA-2019:1948
CVSS 3.0
7.5 HighCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
Updated
2026-11-02
OSVRHSA-2019:2565 7.5

Red Hat Security Advisory: ruby security update

Record
RHSA-2019:2565
CVSS 3.0
7.5 HighCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
Updated
2026-11-02
OSVUBUNTU-CVE-2018-16395 9.8

An issue was discovered in the OpenSSL library in Ruby before 2.3.8, 2.4.x before 2.4.5, 2.5.x before 2.5.2, and 2.6.x before 2.6.0-preview3. When two OpenSSL::X509::Name objects are compared using ==, depending on the ordering, non-equal objects may return true. When the first argument is one character longer than the second, or the second argument contains a character that is one less than a character in the same position of the first argument, the result of == will be true. This could be leveraged to create an illegitimate certificate that may be accepted as legitimate and then used in signing or encryption operations.

Record
UBUNTU-CVE-2018-16395
CVSS 3.0
9.8 CriticalCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVMGASA-2018-0411 No score

Updated ruby packages fix security vulnerability

Ruby before 2.2.10 allows an HTTP Response Splitting attack. An attacker can inject a crafted key and value into an HTTP response for the HTTP server of WEBrick (CVE-2017-17742).

Directory traversal vulnerability in the Dir.mktmpdir method in the tmpdir library in Ruby before 2.2.10 might allow attackers to create arbitrary directories or files via a .. (dot dot) in the prefix argument (CVE-2018-6914).

In Ruby before 2.2.10, an attacker can pass a large HTTP request with a crafted header to WEBrick server or a crafted body to WEBrick server/handler and cause a denial of service (memory consumption) (CVE-2018-8777).

In Ruby before 2.2.10, an attacker controlling the unpacking format (similar to format string vulnerabilities) can trigger a buffer under-read in the String#unpack method, resulting in a massive and controlled information disclosure (CVE-2018-8778).

In Ruby before 2.2.10, the UNIXServer.open and UNIXSocket.open methods are not checked for null characters. It may be connected to an unintended socket (CVE-2018-8779).

In Ruby before 2.2.10, the Dir.open, Dir.new, Dir.entries and Dir.empty? methods do not check NULL characters. When using the corresponding method, unintentional directory traversal may be performed (CVE-2018-8780).

Due to a bug in the equality check of OpenSSL::X509::Name, if a malicious X.509 certificate is passed to compare with an existing certificate, there is a possibility to be judged incorrectly that they are equal (CVE-2018-16395).

In Array#pack and String#unpack with some formats, the tainted flags of the original data are not propagated to the returned string/array (CVE-2018-16396).

Record
MGASA-2018-0411
Updated
2026-11-02
OSVopenSUSE-SU-2019:1771-1 No score

Security update for ruby-bundled-gems-rpmhelper, ruby2.5

This update for ruby2.5 and ruby-bundled-gems-rpmhelper fixes the following issues:

Changes in ruby2.5:

Update to 2.5.5 and 2.5.4:

https://www.ruby-lang.org/en/news/2019/03/15/ruby-2-5-5-released/ https://www.ruby-lang.org/en/news/2019/03/13/ruby-2-5-4-released/

Security issues fixed:

  • CVE-2019-8320: Delete directory using symlink when decompressing tar (bsc#1130627)
  • CVE-2019-8321: Escape sequence injection vulnerability in verbose (bsc#1130623)
  • CVE-2019-8322: Escape sequence injection vulnerability in gem owner (bsc#1130622)
  • CVE-2019-8323: Escape sequence injection vulnerability in API response handling (bsc#1130620)
  • CVE-2019-8324: Installing a malicious gem may lead to arbitrary code execution (bsc#1130617)
  • CVE-2019-8325: Escape sequence injection vulnerability in errors (bsc#1130611)

Ruby 2.5 was updated to 2.5.3:

This release includes some bug fixes and some security fixes.

Security issues fixed:

  • CVE-2018-16396: Tainted flags are not propagated in Array#pack and String#unpack with some directives (bsc#1112532)
  • CVE-2018-16395: OpenSSL::X509::Name equality check does not work correctly (bsc#1112530)

Ruby 2.5 was updated to 2.5.1:

This release includes some bug fixes and some security fixes.

Security issues fixed:

  • CVE-2017-17742: HTTP response splitting in WEBrick (bsc#1087434)

  • CVE-2018-6914: Unintentional file and directory creation with directory traversal in tempfile and tmpdir (bsc#1087441)

  • CVE-2018-8777: DoS by large request in WEBrick (bsc#1087436)

  • CVE-2018-8778: Buffer under-read in String#unpack (bsc#1087433)

  • CVE-2018-8779: Unintentional socket creation by poisoned NUL byte in UNIXServer and UNIXSocket (bsc#1087440)

  • CVE-2018-8780: Unintentional directory traversal by poisoned NUL byte in Dir (bsc#1087437)

  • Multiple vulnerabilities in RubyGems were fixed:

    • CVE-2018-1000079: Fixed path traversal issue during gem installation allows to write to arbitrary filesystem locations (bsc#1082058)
    • CVE-2018-1000075: Fixed infinite loop vulnerability due to negative size in tar header causes Denial of Service (bsc#1082014)
    • CVE-2018-1000078: Fixed XSS vulnerability in homepage attribute when displayed via gem server (bsc#1082011)
    • CVE-2018-1000077: Fixed that missing URL validation on spec home attribute allows malicious gem to set an invalid homepage URL (bsc#1082010)
    • CVE-2018-1000076: Fixed improper verification of signatures in tarball allows to install mis-signed gem (bsc#1082009)
    • CVE-2018-1000074: Fixed unsafe Object Deserialization Vulnerability in gem owner allowing arbitrary code execution on specially crafted YAML (bsc#1082008)
    • CVE-2018-1000073: Fixed path traversal when writing to a symlinked basedir outside of the root (bsc#1082007)

Other changes:

  • Fixed Net::POPMail methods modify frozen literal when using default arg
  • ruby: change over of the Japanese Era to the new emperor May 1st 2019 (bsc#1133790)
  • build with PIE support (bsc#1130028)

Changes in ruby-bundled-gems-rpmhelper:

  • Add a new helper for bundled ruby gems.

This update was imported from the SUSE:SLE-15:Update update project.

Record
openSUSE-SU-2019:1771-1
Updated
2026-11-02
OSVSUSE-SU-2019:1804-1 No score

Security update for ruby-bundled-gems-rpmhelper, ruby2.5

This update for ruby2.5 and ruby-bundled-gems-rpmhelper fixes the following issues:

Changes in ruby2.5:

Update to 2.5.5 and 2.5.4:

https://www.ruby-lang.org/en/news/2019/03/15/ruby-2-5-5-released/ https://www.ruby-lang.org/en/news/2019/03/13/ruby-2-5-4-released/

Security issues fixed:

  • CVE-2019-8320: Delete directory using symlink when decompressing tar (bsc#1130627)
  • CVE-2019-8321: Escape sequence injection vulnerability in verbose (bsc#1130623)
  • CVE-2019-8322: Escape sequence injection vulnerability in gem owner (bsc#1130622)
  • CVE-2019-8323: Escape sequence injection vulnerability in API response handling (bsc#1130620)
  • CVE-2019-8324: Installing a malicious gem may lead to arbitrary code execution (bsc#1130617)
  • CVE-2019-8325: Escape sequence injection vulnerability in errors (bsc#1130611)

Ruby 2.5 was updated to 2.5.3:

This release includes some bug fixes and some security fixes.

Security issues fixed:

  • CVE-2018-16396: Tainted flags are not propagated in Array#pack and String#unpack with some directives (bsc#1112532)
  • CVE-2018-16395: OpenSSL::X509::Name equality check does not work correctly (bsc#1112530)

Ruby 2.5 was updated to 2.5.1:

This release includes some bug fixes and some security fixes.

Security issues fixed:

  • CVE-2017-17742: HTTP response splitting in WEBrick (bsc#1087434)

  • CVE-2018-6914: Unintentional file and directory creation with directory traversal in tempfile and tmpdir (bsc#1087441)

  • CVE-2018-8777: DoS by large request in WEBrick (bsc#1087436)

  • CVE-2018-8778: Buffer under-read in String#unpack (bsc#1087433)

  • CVE-2018-8779: Unintentional socket creation by poisoned NUL byte in UNIXServer and UNIXSocket (bsc#1087440)

  • CVE-2018-8780: Unintentional directory traversal by poisoned NUL byte in Dir (bsc#1087437)

  • Multiple vulnerabilities in RubyGems were fixed:

    • CVE-2018-1000079: Fixed path traversal issue during gem installation allows to write to arbitrary filesystem locations (bsc#1082058)
    • CVE-2018-1000075: Fixed infinite loop vulnerability due to negative size in tar header causes Denial of Service (bsc#1082014)
    • CVE-2018-1000078: Fixed XSS vulnerability in homepage attribute when displayed via gem server (bsc#1082011)
    • CVE-2018-1000077: Fixed that missing URL validation on spec home attribute allows malicious gem to set an invalid homepage URL (bsc#1082010)
    • CVE-2018-1000076: Fixed improper verification of signatures in tarball allows to install mis-signed gem (bsc#1082009)
    • CVE-2018-1000074: Fixed unsafe Object Deserialization Vulnerability in gem owner allowing arbitrary code execution on specially crafted YAML (bsc#1082008)
    • CVE-2018-1000073: Fixed path traversal when writing to a symlinked basedir outside of the root (bsc#1082007)

Other changes:

  • Fixed Net::POPMail methods modify frozen literal when using default arg
  • ruby: change over of the Japanese Era to the new emperor May 1st 2019 (bsc#1133790)
  • build with PIE support (bsc#1130028)

Changes in ruby-bundled-gems-rpmhelper:

  • Add a new helper for bundled ruby gems.
Record
SUSE-SU-2019:1804-1
Updated
2026-11-02
OSVSUSE-SU-2020:1570-1 No score

Security update for ruby2.1

This update for ruby2.1 fixes the following issues:

Security issues fixed:

  • CVE-2015-9096: Fixed an SMTP command injection via CRLFsequences in a RCPT TO or MAIL FROM command (bsc#1043983).
  • CVE-2016-7798: Fixed an IV Reuse in GCM Mode (bsc#1055265).
  • CVE-2017-0898: Fixed a buffer underrun vulnerability in Kernel.sprintf (bsc#1058755).
  • CVE-2017-0899: Fixed an issue with malicious gem specifications, insufficient sanitation when printing gem specifications could have included terminal characters (bsc#1056286).
  • CVE-2017-0900: Fixed an issue with malicious gem specifications, the query command could have led to a denial of service attack against clients (bsc#1056286).
  • CVE-2017-0901: Fixed an issue with malicious gem specifications, potentially overwriting arbitrary files on the client system (bsc#1056286).
  • CVE-2017-0902: Fixed an issue with malicious gem specifications, that could have enabled MITM attacks against clients (bsc#1056286).
  • CVE-2017-0903: Fixed an unsafe object deserialization vulnerability (bsc#1062452).
  • CVE-2017-9228: Fixed a heap out-of-bounds write in bitset_set_range() during regex compilation (bsc#1069607).
  • CVE-2017-9229: Fixed an invalid pointer dereference in left_adjust_char_head() in oniguruma (bsc#1069632).
  • CVE-2017-10784: Fixed an escape sequence injection vulnerability in the Basic authentication of WEBrick (bsc#1058754).
  • CVE-2017-14033: Fixed a buffer underrun vulnerability in OpenSSL ASN1 decode (bsc#1058757).
  • CVE-2017-14064: Fixed an arbitrary memory exposure during a JSON.generate call (bsc#1056782).
  • CVE-2017-17405: Fixed a command injection vulnerability in Net::FTP (bsc#1073002).
  • CVE-2017-17742: Fixed an HTTP response splitting issue in WEBrick (bsc#1087434).
  • CVE-2017-17790: Fixed a command injection in lib/resolv.rb:lazy_initialize() (bsc#1078782).
  • CVE-2018-6914: Fixed an unintentional file and directory creation with directory traversal in tempfile and tmpdir (bsc#1087441).
  • CVE-2018-8777: Fixed a potential DoS caused by large requests in WEBrick (bsc#1087436).
  • CVE-2018-8778: Fixed a buffer under-read in String#unpack (bsc#1087433).
  • CVE-2018-8779: Fixed an unintentional socket creation by poisoned NUL byte in UNIXServer and UNIXSocket (bsc#1087440).
  • CVE-2018-8780: Fixed an unintentional directory traversal by poisoned NUL byte in Dir (bsc#1087437).
  • CVE-2018-16395: Fixed an issue with OpenSSL::X509::Name equality checking (bsc#1112530).
  • CVE-2018-16396: Fixed an issue with tainted string handling, where the flag was not propagated in Array#pack and String#unpack with some directives (bsc#1112532).
  • CVE-2018-1000073: Fixed a path traversal issue (bsc#1082007).
  • CVE-2018-1000074: Fixed an unsafe object deserialization vulnerability in gem owner, allowing arbitrary code execution with specially crafted YAML (bsc#1082008).
  • CVE-2018-1000075: Fixed an infinite loop vulnerability due to negative size in tar header causes Denial of Service (bsc#1082014).
  • CVE-2018-1000076: Fixed an improper verification of signatures in tarballs (bsc#1082009).
  • CVE-2018-1000077: Fixed an improper URL validation in the homepage attribute of ruby gems (bsc#1082010).
  • CVE-2018-1000078: Fixed a XSS vulnerability in the homepage attribute when displayed via gem server (bsc#1082011).
  • CVE-2018-1000079: Fixed a path traversal issue during gem installation allows to write to arbitrary filesystem locations (bsc#1082058).
  • CVE-2019-8320: Fixed a directory traversal issue when decompressing tar files (bsc#1130627).
  • CVE-2019-8321: Fixed an escape sequence injection vulnerability in verbose (bsc#1130623).
  • CVE-2019-8322: Fixed an escape sequence injection vulnerability in gem owner (bsc#1130622).
  • CVE-2019-8323: Fixed an escape sequence injection vulnerability in API response handling (bsc#1130620).
  • CVE-2019-8324: Fixed an issue with malicious gems that may have led to arbitrary code execution (bsc#1130617).
  • CVE-2019-8325: Fixed an escape sequence injection vulnerability in…
Record
SUSE-SU-2020:1570-1
Updated
2026-11-02
OSVSUSE-SU-2022:15034-1 No score

Security update for ruby

This update for ruby fixes the following issues:

  • CVE-2018-16395: Fixed an issue where two x509 certificates could be considered to be equal when this was not the case (bsc#1112530).
  • CVE-2021-32066: Fixed an issue where the IMAP client API would not report a failure when StartTLS failed, leading to potential man in the middle attacks (bsc#1188160).
  • CVE-2021-31810: Fixed an issue where the FTP client API would trust certain responses from a malicious server, tricking the client into connecting to addresses not (bsc#1188161).
Record
SUSE-SU-2022:15034-1
Updated
2026-11-02
OSVUSN-3808-1 No score

ruby1.9.1, ruby2.0, ruby2.3, ruby2.5 vulnerabilities

It was discovered that Ruby incorrectly handled certain X.509 certificates. An attacker could possibly use this issue to bypass the certificate check. (CVE-2018-16395)

It was discovered that Ruby incorrectly handled certain inputs. An attacker could possibly use this issue to execute arbitrary code. (CVE-2018-16396)

Record
USN-3808-1
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
openssl
RubyGems
 before 2.0.9
2.0.9
openssl
RubyGems
 2.1.0 up to 2.1.2
2.1.2
ruby
Alpine:v3.11
 2.3.0 up to 2.5.2-r0
2.5.2-r0
ruby
Alpine:v3.12
 2.3.0 up to 2.5.2-r0
2.5.2-r0
ruby
Alpine:v3.13
 2.3.0 up to 2.5.2-r0
2.5.2-r0
ruby
Alpine:v3.14
 2.3.0 up to 2.5.2-r0
2.5.2-r0
ruby
Alpine:v3.15
 2.3.0 up to 2.5.2-r0
2.5.2-r0
ruby
Alpine:v3.16
 2.3.0 up to 2.5.2-r0
2.5.2-r0
ruby
Alpine:v3.17
 2.3.0 up to 2.5.2-r0
2.5.2-r0
ruby
Alpine:v3.18
 2.3.0 up to 2.5.2-r0
2.5.2-r0
Show 284 moreShow less
Affected packages
PackageAffectedFixed
ruby
Alpine:v3.19
 2.3.0 up to 2.5.2-r0
2.5.2-r0
ruby
Alpine:v3.20
 2.3.0 up to 2.5.2-r0
2.5.2-r0
ruby
Alpine:v3.21
 2.3.0 up to 2.5.2-r0
2.5.2-r0
ruby
Alpine:v3.22
 2.3.0 up to 2.5.2-r0
2.5.2-r0
ruby
Alpine:v3.23
 2.3.0 up to 2.5.2-r0
2.5.2-r0
ruby
Alpine:v3.24
 2.3.0 up to 2.5.2-r0
2.5.2-r0
ruby
Alpine:v3.4
 2.3.0 up to 2.3.8-r0
2.3.8-r0
ruby
Alpine:v3.5
 2.3.0 up to 2.3.8-r0
2.3.8-r0
ruby
Alpine:v3.6
 2.3.0 up to 2.4.5-r0
2.4.5-r0
ruby
Alpine:v3.7
 2.3.0 up to 2.4.5-r0
2.4.5-r0
ruby
Alpine:v3.8
 2.3.0 up to 2.5.2-r0
2.5.2-r0
ruby
Alpine:v3.9
 2.3.0 up to 2.5.2-r0
2.5.2-r0
ruby2.1
Debian:8
From an advisory covering 2 CVEs
 before 2.1.5-2+deb8u6, plus listed versions
2.1.5-22.1.5-2+deb8u12.1.5-2+deb8u22.1.5-2+deb8u32.1.5-2+deb8u42.1.5-2+deb8u5
2.1.5-2+deb8u6
ruby2.3
Debian:9
From an advisory covering 2 CVEs
 before 2.3.3-1+deb9u4, plus listed versions
2.3.3-12.3.3-1+deb9u12.3.3-1+deb9u22.3.3-1+deb9u3
2.3.3-1+deb9u4
openssl
RubyGems
 before 2.0.9, plus listed versions
2.0.02.0.0.beta.12.0.0.beta.22.0.12.0.2
Show 6 moreShow less
2.0.32.0.42.0.52.0.62.0.72.0.8
2.0.9
openssl
RubyGems
 2.1.0 up to 2.1.2, plus listed versions
2.1.1
2.1.2
ruby
Mageia:6
From an advisory covering 8 CVEs
 before 2.2.10-16.1.mga6
2.2.10-16.1.mga6
rh-ruby23-ruby
Red Hat:rhel_software_collections:3::el6
From an advisory covering 15 CVEs
 before 0:2.3.8-69.el6
0:2.3.8-69.el6
rh-ruby23-ruby-debuginfo
Red Hat:rhel_software_collections:3::el6
From an advisory covering 15 CVEs
 before 0:2.3.8-69.el6
0:2.3.8-69.el6
rh-ruby23-ruby-devel
Red Hat:rhel_software_collections:3::el6
From an advisory covering 15 CVEs
 before 0:2.3.8-69.el6
0:2.3.8-69.el6
rh-ruby23-ruby-doc
Red Hat:rhel_software_collections:3::el6
From an advisory covering 15 CVEs
 before 0:2.3.8-69.el6
0:2.3.8-69.el6
rh-ruby23-ruby-irb
Red Hat:rhel_software_collections:3::el6
From an advisory covering 15 CVEs
 before 0:2.3.8-69.el6
0:2.3.8-69.el6
rh-ruby23-ruby-libs
Red Hat:rhel_software_collections:3::el6
From an advisory covering 15 CVEs
 before 0:2.3.8-69.el6
0:2.3.8-69.el6
rh-ruby23-ruby-tcltk
Red Hat:rhel_software_collections:3::el6
From an advisory covering 15 CVEs
 before 0:2.3.8-69.el6
0:2.3.8-69.el6
rh-ruby23-rubygem-bigdecimal
Red Hat:rhel_software_collections:3::el6
From an advisory covering 15 CVEs
 before 0:1.2.8-69.el6
0:1.2.8-69.el6
rh-ruby23-rubygem-did_you_mean
Red Hat:rhel_software_collections:3::el6
From an advisory covering 15 CVEs
 before 0:1.0.0-69.el6
0:1.0.0-69.el6
rh-ruby23-rubygem-io-console
Red Hat:rhel_software_collections:3::el6
From an advisory covering 15 CVEs
 before 0:0.4.5-69.el6
0:0.4.5-69.el6
rh-ruby23-rubygem-json
Red Hat:rhel_software_collections:3::el6
From an advisory covering 15 CVEs
 before 0:1.8.3.1-69.el6
0:1.8.3.1-69.el6
rh-ruby23-rubygem-minitest
Red Hat:rhel_software_collections:3::el6
From an advisory covering 15 CVEs
 before 0:5.8.5-69.el6
0:5.8.5-69.el6
rh-ruby23-rubygem-net-telnet
Red Hat:rhel_software_collections:3::el6
From an advisory covering 15 CVEs
 before 0:0.1.1-69.el6
0:0.1.1-69.el6
rh-ruby23-rubygem-power_assert
Red Hat:rhel_software_collections:3::el6
From an advisory covering 15 CVEs
 before 0:0.2.6-69.el6
0:0.2.6-69.el6
rh-ruby23-rubygem-psych
Red Hat:rhel_software_collections:3::el6
From an advisory covering 15 CVEs
 before 0:2.1.0.1-69.el6
0:2.1.0.1-69.el6
rh-ruby23-rubygem-rake
Red Hat:rhel_software_collections:3::el6
From an advisory covering 15 CVEs
 before 0:10.4.2-69.el6
0:10.4.2-69.el6
rh-ruby23-rubygem-rdoc
Red Hat:rhel_software_collections:3::el6
From an advisory covering 15 CVEs
 before 0:4.2.1-69.el6
0:4.2.1-69.el6
rh-ruby23-rubygem-test-unit
Red Hat:rhel_software_collections:3::el6
From an advisory covering 15 CVEs
 before 0:3.1.5-69.el6
0:3.1.5-69.el6
rh-ruby23-rubygems
Red Hat:rhel_software_collections:3::el6
From an advisory covering 15 CVEs
 before 0:2.5.2.3-69.el6
0:2.5.2.3-69.el6
rh-ruby23-rubygems-devel
Red Hat:rhel_software_collections:3::el6
From an advisory covering 15 CVEs
 before 0:2.5.2.3-69.el6
0:2.5.2.3-69.el6
rh-ruby23-ruby
Red Hat:rhel_software_collections:3::el7
From an advisory covering 15 CVEs
 before 0:2.3.8-69.el7
0:2.3.8-69.el7
rh-ruby23-ruby-debuginfo
Red Hat:rhel_software_collections:3::el7
From an advisory covering 15 CVEs
 before 0:2.3.8-69.el7
0:2.3.8-69.el7
rh-ruby23-ruby-devel
Red Hat:rhel_software_collections:3::el7
From an advisory covering 15 CVEs
 before 0:2.3.8-69.el7
0:2.3.8-69.el7
rh-ruby23-ruby-doc
Red Hat:rhel_software_collections:3::el7
From an advisory covering 15 CVEs
 before 0:2.3.8-69.el7
0:2.3.8-69.el7
rh-ruby23-ruby-irb
Red Hat:rhel_software_collections:3::el7
From an advisory covering 15 CVEs
 before 0:2.3.8-69.el7
0:2.3.8-69.el7
rh-ruby23-ruby-libs
Red Hat:rhel_software_collections:3::el7
From an advisory covering 15 CVEs
 before 0:2.3.8-69.el7
0:2.3.8-69.el7
rh-ruby23-ruby-tcltk
Red Hat:rhel_software_collections:3::el7
From an advisory covering 15 CVEs
 before 0:2.3.8-69.el7
0:2.3.8-69.el7
rh-ruby23-rubygem-bigdecimal
Red Hat:rhel_software_collections:3::el7
From an advisory covering 15 CVEs
 before 0:1.2.8-69.el7
0:1.2.8-69.el7
rh-ruby23-rubygem-did_you_mean
Red Hat:rhel_software_collections:3::el7
From an advisory covering 15 CVEs
 before 0:1.0.0-69.el7
0:1.0.0-69.el7
rh-ruby23-rubygem-io-console
Red Hat:rhel_software_collections:3::el7
From an advisory covering 15 CVEs
 before 0:0.4.5-69.el7
0:0.4.5-69.el7
rh-ruby23-rubygem-json
Red Hat:rhel_software_collections:3::el7
From an advisory covering 15 CVEs
 before 0:1.8.3.1-69.el7
0:1.8.3.1-69.el7
rh-ruby23-rubygem-minitest
Red Hat:rhel_software_collections:3::el7
From an advisory covering 15 CVEs
 before 0:5.8.5-69.el7
0:5.8.5-69.el7
rh-ruby23-rubygem-net-telnet
Red Hat:rhel_software_collections:3::el7
From an advisory covering 15 CVEs
 before 0:0.1.1-69.el7
0:0.1.1-69.el7
rh-ruby23-rubygem-power_assert
Red Hat:rhel_software_collections:3::el7
From an advisory covering 15 CVEs
 before 0:0.2.6-69.el7
0:0.2.6-69.el7
rh-ruby23-rubygem-psych
Red Hat:rhel_software_collections:3::el7
From an advisory covering 15 CVEs
 before 0:2.1.0.1-69.el7
0:2.1.0.1-69.el7
rh-ruby23-rubygem-rake
Red Hat:rhel_software_collections:3::el7
From an advisory covering 15 CVEs
 before 0:10.4.2-69.el7
0:10.4.2-69.el7
rh-ruby23-rubygem-rdoc
Red Hat:rhel_software_collections:3::el7
From an advisory covering 15 CVEs
 before 0:4.2.1-69.el7
0:4.2.1-69.el7
rh-ruby23-rubygem-test-unit
Red Hat:rhel_software_collections:3::el7
From an advisory covering 15 CVEs
 before 0:3.1.5-69.el7
0:3.1.5-69.el7
rh-ruby23-rubygems
Red Hat:rhel_software_collections:3::el7
From an advisory covering 15 CVEs
 before 0:2.5.2.3-69.el7
0:2.5.2.3-69.el7
rh-ruby23-rubygems-devel
Red Hat:rhel_software_collections:3::el7
From an advisory covering 15 CVEs
 before 0:2.5.2.3-69.el7
0:2.5.2.3-69.el7
rh-ruby24-ruby
Red Hat:rhel_software_collections:3::el6
From an advisory covering 15 CVEs
 before 0:2.4.5-91.el6
0:2.4.5-91.el6
rh-ruby24-ruby-debuginfo
Red Hat:rhel_software_collections:3::el6
From an advisory covering 15 CVEs
 before 0:2.4.5-91.el6
0:2.4.5-91.el6
rh-ruby24-ruby-devel
Red Hat:rhel_software_collections:3::el6
From an advisory covering 15 CVEs
 before 0:2.4.5-91.el6
0:2.4.5-91.el6
rh-ruby24-ruby-doc
Red Hat:rhel_software_collections:3::el6
From an advisory covering 15 CVEs
 before 0:2.4.5-91.el6
0:2.4.5-91.el6
rh-ruby24-ruby-irb
Red Hat:rhel_software_collections:3::el6
From an advisory covering 15 CVEs
 before 0:2.4.5-91.el6
0:2.4.5-91.el6
rh-ruby24-ruby-libs
Red Hat:rhel_software_collections:3::el6
From an advisory covering 15 CVEs
 before 0:2.4.5-91.el6
0:2.4.5-91.el6
rh-ruby24-rubygem-bigdecimal
Red Hat:rhel_software_collections:3::el6
From an advisory covering 15 CVEs
 before 0:1.3.2-91.el6
0:1.3.2-91.el6
rh-ruby24-rubygem-did_you_mean
Red Hat:rhel_software_collections:3::el6
From an advisory covering 15 CVEs
 before 0:1.1.0-91.el6
0:1.1.0-91.el6
rh-ruby24-rubygem-io-console
Red Hat:rhel_software_collections:3::el6
From an advisory covering 15 CVEs
 before 0:0.4.6-91.el6
0:0.4.6-91.el6
rh-ruby24-rubygem-json
Red Hat:rhel_software_collections:3::el6
From an advisory covering 15 CVEs
 before 0:2.0.4-91.el6
0:2.0.4-91.el6
rh-ruby24-rubygem-minitest
Red Hat:rhel_software_collections:3::el6
From an advisory covering 15 CVEs
 before 0:5.10.1-91.el6
0:5.10.1-91.el6
rh-ruby24-rubygem-net-telnet
Red Hat:rhel_software_collections:3::el6
From an advisory covering 15 CVEs
 before 0:0.1.1-91.el6
0:0.1.1-91.el6
rh-ruby24-rubygem-openssl
Red Hat:rhel_software_collections:3::el6
From an advisory covering 15 CVEs
 before 0:2.0.9-91.el6
0:2.0.9-91.el6
rh-ruby24-rubygem-power_assert
Red Hat:rhel_software_collections:3::el6
From an advisory covering 15 CVEs
 before 0:0.4.1-91.el6
0:0.4.1-91.el6
rh-ruby24-rubygem-psych
Red Hat:rhel_software_collections:3::el6
From an advisory covering 15 CVEs
 before 0:2.2.2-91.el6
0:2.2.2-91.el6
rh-ruby24-rubygem-rake
Red Hat:rhel_software_collections:3::el6
From an advisory covering 15 CVEs
 before 0:12.0.0-91.el6
0:12.0.0-91.el6
rh-ruby24-rubygem-rdoc
Red Hat:rhel_software_collections:3::el6
From an advisory covering 15 CVEs
 before 0:5.0.0-91.el6
0:5.0.0-91.el6
rh-ruby24-rubygem-test-unit
Red Hat:rhel_software_collections:3::el6
From an advisory covering 15 CVEs
 before 0:3.2.3-91.el6
0:3.2.3-91.el6
rh-ruby24-rubygem-xmlrpc
Red Hat:rhel_software_collections:3::el6
From an advisory covering 15 CVEs
 before 0:0.2.1-91.el6
0:0.2.1-91.el6
rh-ruby24-rubygems
Red Hat:rhel_software_collections:3::el6
From an advisory covering 15 CVEs
 before 0:2.6.14.3-91.el6
0:2.6.14.3-91.el6
rh-ruby24-rubygems-devel
Red Hat:rhel_software_collections:3::el6
From an advisory covering 15 CVEs
 before 0:2.6.14.3-91.el6
0:2.6.14.3-91.el6
rh-ruby24-ruby
Red Hat:rhel_software_collections:3::el7
From an advisory covering 15 CVEs
 before 0:2.4.5-91.el7
0:2.4.5-91.el7
rh-ruby24-ruby-debuginfo
Red Hat:rhel_software_collections:3::el7
From an advisory covering 15 CVEs
 before 0:2.4.5-91.el7
0:2.4.5-91.el7
rh-ruby24-ruby-devel
Red Hat:rhel_software_collections:3::el7
From an advisory covering 15 CVEs
 before 0:2.4.5-91.el7
0:2.4.5-91.el7
rh-ruby24-ruby-doc
Red Hat:rhel_software_collections:3::el7
From an advisory covering 15 CVEs
 before 0:2.4.5-91.el7
0:2.4.5-91.el7
rh-ruby24-ruby-irb
Red Hat:rhel_software_collections:3::el7
From an advisory covering 15 CVEs
 before 0:2.4.5-91.el7
0:2.4.5-91.el7
rh-ruby24-ruby-libs
Red Hat:rhel_software_collections:3::el7
From an advisory covering 15 CVEs
 before 0:2.4.5-91.el7
0:2.4.5-91.el7
rh-ruby24-rubygem-bigdecimal
Red Hat:rhel_software_collections:3::el7
From an advisory covering 15 CVEs
 before 0:1.3.2-91.el7
0:1.3.2-91.el7
rh-ruby24-rubygem-did_you_mean
Red Hat:rhel_software_collections:3::el7
From an advisory covering 15 CVEs
 before 0:1.1.0-91.el7
0:1.1.0-91.el7
rh-ruby24-rubygem-io-console
Red Hat:rhel_software_collections:3::el7
From an advisory covering 15 CVEs
 before 0:0.4.6-91.el7
0:0.4.6-91.el7
rh-ruby24-rubygem-json
Red Hat:rhel_software_collections:3::el7
From an advisory covering 15 CVEs
 before 0:2.0.4-91.el7
0:2.0.4-91.el7
rh-ruby24-rubygem-minitest
Red Hat:rhel_software_collections:3::el7
From an advisory covering 15 CVEs
 before 0:5.10.1-91.el7
0:5.10.1-91.el7
rh-ruby24-rubygem-net-telnet
Red Hat:rhel_software_collections:3::el7
From an advisory covering 15 CVEs
 before 0:0.1.1-91.el7
0:0.1.1-91.el7
rh-ruby24-rubygem-openssl
Red Hat:rhel_software_collections:3::el7
From an advisory covering 15 CVEs
 before 0:2.0.9-91.el7
0:2.0.9-91.el7
rh-ruby24-rubygem-power_assert
Red Hat:rhel_software_collections:3::el7
From an advisory covering 15 CVEs
 before 0:0.4.1-91.el7
0:0.4.1-91.el7
rh-ruby24-rubygem-psych
Red Hat:rhel_software_collections:3::el7
From an advisory covering 15 CVEs
 before 0:2.2.2-91.el7
0:2.2.2-91.el7
rh-ruby24-rubygem-rake
Red Hat:rhel_software_collections:3::el7
From an advisory covering 15 CVEs
 before 0:12.0.0-91.el7
0:12.0.0-91.el7
rh-ruby24-rubygem-rdoc
Red Hat:rhel_software_collections:3::el7
From an advisory covering 15 CVEs
 before 0:5.0.0-91.el7
0:5.0.0-91.el7
rh-ruby24-rubygem-test-unit
Red Hat:rhel_software_collections:3::el7
From an advisory covering 15 CVEs
 before 0:3.2.3-91.el7
0:3.2.3-91.el7
rh-ruby24-rubygem-xmlrpc
Red Hat:rhel_software_collections:3::el7
From an advisory covering 15 CVEs
 before 0:0.2.1-91.el7
0:0.2.1-91.el7
rh-ruby24-rubygems
Red Hat:rhel_software_collections:3::el7
From an advisory covering 15 CVEs
 before 0:2.6.14.3-91.el7
0:2.6.14.3-91.el7
rh-ruby24-rubygems-devel
Red Hat:rhel_software_collections:3::el7
From an advisory covering 15 CVEs
 before 0:2.6.14.3-91.el7
0:2.6.14.3-91.el7
rh-ruby25-ruby
Red Hat:rhel_software_collections:3::el7
From an advisory covering 15 CVEs
 before 0:2.5.3-6.el7
0:2.5.3-6.el7
rh-ruby25-ruby-debuginfo
Red Hat:rhel_software_collections:3::el7
From an advisory covering 15 CVEs
 before 0:2.5.3-6.el7
0:2.5.3-6.el7
rh-ruby25-ruby-devel
Red Hat:rhel_software_collections:3::el7
From an advisory covering 15 CVEs
 before 0:2.5.3-6.el7
0:2.5.3-6.el7
rh-ruby25-ruby-doc
Red Hat:rhel_software_collections:3::el7
From an advisory covering 15 CVEs
 before 0:2.5.3-6.el7
0:2.5.3-6.el7
rh-ruby25-ruby-irb
Red Hat:rhel_software_collections:3::el7
From an advisory covering 15 CVEs
 before 0:2.5.3-6.el7
0:2.5.3-6.el7
rh-ruby25-ruby-libs
Red Hat:rhel_software_collections:3::el7
From an advisory covering 15 CVEs
 before 0:2.5.3-6.el7
0:2.5.3-6.el7
rh-ruby25-rubygem-bigdecimal
Red Hat:rhel_software_collections:3::el7
From an advisory covering 15 CVEs
 before 0:1.3.4-6.el7
0:1.3.4-6.el7
rh-ruby25-rubygem-did_you_mean
Red Hat:rhel_software_collections:3::el7
From an advisory covering 15 CVEs
 before 0:1.2.0-6.el7
0:1.2.0-6.el7
rh-ruby25-rubygem-io-console
Red Hat:rhel_software_collections:3::el7
From an advisory covering 15 CVEs
 before 0:0.4.6-6.el7
0:0.4.6-6.el7
rh-ruby25-rubygem-json
Red Hat:rhel_software_collections:3::el7
From an advisory covering 15 CVEs
 before 0:2.1.0-6.el7
0:2.1.0-6.el7
rh-ruby25-rubygem-minitest
Red Hat:rhel_software_collections:3::el7
From an advisory covering 15 CVEs
 before 0:5.10.3-6.el7
0:5.10.3-6.el7
rh-ruby25-rubygem-net-telnet
Red Hat:rhel_software_collections:3::el7
From an advisory covering 15 CVEs
 before 0:0.1.1-6.el7
0:0.1.1-6.el7
rh-ruby25-rubygem-openssl
Red Hat:rhel_software_collections:3::el7
From an advisory covering 15 CVEs
 before 0:2.1.2-6.el7
0:2.1.2-6.el7
rh-ruby25-rubygem-power_assert
Red Hat:rhel_software_collections:3::el7
From an advisory covering 15 CVEs
 before 0:1.1.1-6.el7
0:1.1.1-6.el7
rh-ruby25-rubygem-psych
Red Hat:rhel_software_collections:3::el7
From an advisory covering 15 CVEs
 before 0:3.0.2-6.el7
0:3.0.2-6.el7
rh-ruby25-rubygem-rake
Red Hat:rhel_software_collections:3::el7
From an advisory covering 15 CVEs
 before 0:12.3.0-6.el7
0:12.3.0-6.el7
rh-ruby25-rubygem-rdoc
Red Hat:rhel_software_collections:3::el7
From an advisory covering 15 CVEs
 before 0:6.0.1-6.el7
0:6.0.1-6.el7
rh-ruby25-rubygem-test-unit
Red Hat:rhel_software_collections:3::el7
From an advisory covering 15 CVEs
 before 0:3.2.7-6.el7
0:3.2.7-6.el7
rh-ruby25-rubygem-xmlrpc
Red Hat:rhel_software_collections:3::el7
From an advisory covering 15 CVEs
 before 0:0.3.0-6.el7
0:0.3.0-6.el7
rh-ruby25-rubygems
Red Hat:rhel_software_collections:3::el7
From an advisory covering 15 CVEs
 before 0:2.7.6-6.el7
0:2.7.6-6.el7
rh-ruby25-rubygems-devel
Red Hat:rhel_software_collections:3::el7
From an advisory covering 15 CVEs
 before 0:2.7.6-6.el7
0:2.7.6-6.el7
ruby
Red Hat:enterprise_linux:7::client
 before 0:2.0.0.648-34.el7_6
0:2.0.0.648-34.el7_6
ruby-debuginfo
Red Hat:enterprise_linux:7::client
 before 0:2.0.0.648-34.el7_6
0:2.0.0.648-34.el7_6
ruby-irb
Red Hat:enterprise_linux:7::client
 before 0:2.0.0.648-34.el7_6
0:2.0.0.648-34.el7_6
ruby-libs
Red Hat:enterprise_linux:7::client
 before 0:2.0.0.648-34.el7_6
0:2.0.0.648-34.el7_6
rubygem-bigdecimal
Red Hat:enterprise_linux:7::client
 before 0:1.2.0-34.el7_6
0:1.2.0-34.el7_6
rubygem-io-console
Red Hat:enterprise_linux:7::client
 before 0:0.4.2-34.el7_6
0:0.4.2-34.el7_6
rubygem-json
Red Hat:enterprise_linux:7::client
 before 0:1.7.7-34.el7_6
0:1.7.7-34.el7_6
rubygem-psych
Red Hat:enterprise_linux:7::client
 before 0:2.0.0-34.el7_6
0:2.0.0-34.el7_6
rubygem-rdoc
Red Hat:enterprise_linux:7::client
 before 0:4.0.0-34.el7_6
0:4.0.0-34.el7_6
rubygems
Red Hat:enterprise_linux:7::client
 before 0:2.0.14.1-34.el7_6
0:2.0.14.1-34.el7_6
ruby-devel
Red Hat:enterprise_linux:7::client
 before 0:2.0.0.648-34.el7_6
0:2.0.0.648-34.el7_6
ruby-doc
Red Hat:enterprise_linux:7::client
 before 0:2.0.0.648-34.el7_6
0:2.0.0.648-34.el7_6
ruby-tcltk
Red Hat:enterprise_linux:7::client
 before 0:2.0.0.648-34.el7_6
0:2.0.0.648-34.el7_6
rubygem-minitest
Red Hat:enterprise_linux:7::client
 before 0:4.3.2-34.el7_6
0:4.3.2-34.el7_6
rubygem-rake
Red Hat:enterprise_linux:7::client
 before 0:0.9.6-34.el7_6
0:0.9.6-34.el7_6
rubygems-devel
Red Hat:enterprise_linux:7::client
 before 0:2.0.14.1-34.el7_6
0:2.0.14.1-34.el7_6
ruby
Red Hat:enterprise_linux:7::computenode
 before 0:2.0.0.648-34.el7_6
0:2.0.0.648-34.el7_6
ruby-debuginfo
Red Hat:enterprise_linux:7::computenode
 before 0:2.0.0.648-34.el7_6
0:2.0.0.648-34.el7_6
ruby-irb
Red Hat:enterprise_linux:7::computenode
 before 0:2.0.0.648-34.el7_6
0:2.0.0.648-34.el7_6
ruby-libs
Red Hat:enterprise_linux:7::computenode
 before 0:2.0.0.648-34.el7_6
0:2.0.0.648-34.el7_6
rubygem-bigdecimal
Red Hat:enterprise_linux:7::computenode
 before 0:1.2.0-34.el7_6
0:1.2.0-34.el7_6
rubygem-io-console
Red Hat:enterprise_linux:7::computenode
 before 0:0.4.2-34.el7_6
0:0.4.2-34.el7_6
rubygem-json
Red Hat:enterprise_linux:7::computenode
 before 0:1.7.7-34.el7_6
0:1.7.7-34.el7_6
rubygem-psych
Red Hat:enterprise_linux:7::computenode
 before 0:2.0.0-34.el7_6
0:2.0.0-34.el7_6
rubygem-rdoc
Red Hat:enterprise_linux:7::computenode
 before 0:4.0.0-34.el7_6
0:4.0.0-34.el7_6
rubygems
Red Hat:enterprise_linux:7::computenode
 before 0:2.0.14.1-34.el7_6
0:2.0.14.1-34.el7_6
ruby-devel
Red Hat:enterprise_linux:7::computenode
 before 0:2.0.0.648-34.el7_6
0:2.0.0.648-34.el7_6
ruby-doc
Red Hat:enterprise_linux:7::computenode
 before 0:2.0.0.648-34.el7_6
0:2.0.0.648-34.el7_6
ruby-tcltk
Red Hat:enterprise_linux:7::computenode
 before 0:2.0.0.648-34.el7_6
0:2.0.0.648-34.el7_6
rubygem-minitest
Red Hat:enterprise_linux:7::computenode
 before 0:4.3.2-34.el7_6
0:4.3.2-34.el7_6
rubygem-rake
Red Hat:enterprise_linux:7::computenode
 before 0:0.9.6-34.el7_6
0:0.9.6-34.el7_6
rubygems-devel
Red Hat:enterprise_linux:7::computenode
 before 0:2.0.14.1-34.el7_6
0:2.0.14.1-34.el7_6
ruby
Red Hat:enterprise_linux:7::server
 before 0:2.0.0.648-34.el7_6
0:2.0.0.648-34.el7_6
ruby-debuginfo
Red Hat:enterprise_linux:7::server
 before 0:2.0.0.648-34.el7_6
0:2.0.0.648-34.el7_6
ruby-irb
Red Hat:enterprise_linux:7::server
 before 0:2.0.0.648-34.el7_6
0:2.0.0.648-34.el7_6
ruby-libs
Red Hat:enterprise_linux:7::server
 before 0:2.0.0.648-34.el7_6
0:2.0.0.648-34.el7_6
rubygem-bigdecimal
Red Hat:enterprise_linux:7::server
 before 0:1.2.0-34.el7_6
0:1.2.0-34.el7_6
rubygem-io-console
Red Hat:enterprise_linux:7::server
 before 0:0.4.2-34.el7_6
0:0.4.2-34.el7_6
rubygem-json
Red Hat:enterprise_linux:7::server
 before 0:1.7.7-34.el7_6
0:1.7.7-34.el7_6
rubygem-psych
Red Hat:enterprise_linux:7::server
 before 0:2.0.0-34.el7_6
0:2.0.0-34.el7_6
rubygem-rdoc
Red Hat:enterprise_linux:7::server
 before 0:4.0.0-34.el7_6
0:4.0.0-34.el7_6
rubygems
Red Hat:enterprise_linux:7::server
 before 0:2.0.14.1-34.el7_6
0:2.0.14.1-34.el7_6
ruby-devel
Red Hat:enterprise_linux:7::server
 before 0:2.0.0.648-34.el7_6
0:2.0.0.648-34.el7_6
ruby-doc
Red Hat:enterprise_linux:7::server
 before 0:2.0.0.648-34.el7_6
0:2.0.0.648-34.el7_6
ruby-tcltk
Red Hat:enterprise_linux:7::server
 before 0:2.0.0.648-34.el7_6
0:2.0.0.648-34.el7_6
rubygem-minitest
Red Hat:enterprise_linux:7::server
 before 0:4.3.2-34.el7_6
0:4.3.2-34.el7_6
rubygem-rake
Red Hat:enterprise_linux:7::server
 before 0:0.9.6-34.el7_6
0:0.9.6-34.el7_6
rubygems-devel
Red Hat:enterprise_linux:7::server
 before 0:2.0.14.1-34.el7_6
0:2.0.14.1-34.el7_6
ruby
Red Hat:enterprise_linux:7::workstation
 before 0:2.0.0.648-34.el7_6
0:2.0.0.648-34.el7_6
ruby-debuginfo
Red Hat:enterprise_linux:7::workstation
 before 0:2.0.0.648-34.el7_6
0:2.0.0.648-34.el7_6
ruby-irb
Red Hat:enterprise_linux:7::workstation
 before 0:2.0.0.648-34.el7_6
0:2.0.0.648-34.el7_6
ruby-libs
Red Hat:enterprise_linux:7::workstation
 before 0:2.0.0.648-34.el7_6
0:2.0.0.648-34.el7_6
rubygem-bigdecimal
Red Hat:enterprise_linux:7::workstation
 before 0:1.2.0-34.el7_6
0:1.2.0-34.el7_6
rubygem-io-console
Red Hat:enterprise_linux:7::workstation
 before 0:0.4.2-34.el7_6
0:0.4.2-34.el7_6
rubygem-json
Red Hat:enterprise_linux:7::workstation
 before 0:1.7.7-34.el7_6
0:1.7.7-34.el7_6
rubygem-psych
Red Hat:enterprise_linux:7::workstation
 before 0:2.0.0-34.el7_6
0:2.0.0-34.el7_6
rubygem-rdoc
Red Hat:enterprise_linux:7::workstation
 before 0:4.0.0-34.el7_6
0:4.0.0-34.el7_6
rubygems
Red Hat:enterprise_linux:7::workstation
 before 0:2.0.14.1-34.el7_6
0:2.0.14.1-34.el7_6
ruby-devel
Red Hat:enterprise_linux:7::workstation
 before 0:2.0.0.648-34.el7_6
0:2.0.0.648-34.el7_6
ruby-doc
Red Hat:enterprise_linux:7::workstation
 before 0:2.0.0.648-34.el7_6
0:2.0.0.648-34.el7_6
ruby-tcltk
Red Hat:enterprise_linux:7::workstation
 before 0:2.0.0.648-34.el7_6
0:2.0.0.648-34.el7_6
rubygem-minitest
Red Hat:enterprise_linux:7::workstation
 before 0:4.3.2-34.el7_6
0:4.3.2-34.el7_6
rubygem-rake
Red Hat:enterprise_linux:7::workstation
 before 0:0.9.6-34.el7_6
0:0.9.6-34.el7_6
rubygems-devel
Red Hat:enterprise_linux:7::workstation
 before 0:2.0.14.1-34.el7_6
0:2.0.14.1-34.el7_6
ruby
Red Hat:rhel_eus:7.4::computenode
 before 0:2.0.0.648-34.el7_4
0:2.0.0.648-34.el7_4
ruby-debuginfo
Red Hat:rhel_eus:7.4::computenode
 before 0:2.0.0.648-34.el7_4
0:2.0.0.648-34.el7_4
ruby-irb
Red Hat:rhel_eus:7.4::computenode
 before 0:2.0.0.648-34.el7_4
0:2.0.0.648-34.el7_4
ruby-libs
Red Hat:rhel_eus:7.4::computenode
 before 0:2.0.0.648-34.el7_4
0:2.0.0.648-34.el7_4
rubygem-bigdecimal
Red Hat:rhel_eus:7.4::computenode
 before 0:1.2.0-34.el7_4
0:1.2.0-34.el7_4
rubygem-io-console
Red Hat:rhel_eus:7.4::computenode
 before 0:0.4.2-34.el7_4
0:0.4.2-34.el7_4
rubygem-json
Red Hat:rhel_eus:7.4::computenode
 before 0:1.7.7-34.el7_4
0:1.7.7-34.el7_4
rubygem-psych
Red Hat:rhel_eus:7.4::computenode
 before 0:2.0.0-34.el7_4
0:2.0.0-34.el7_4
rubygem-rdoc
Red Hat:rhel_eus:7.4::computenode
 before 0:4.0.0-34.el7_4
0:4.0.0-34.el7_4
rubygems
Red Hat:rhel_eus:7.4::computenode
 before 0:2.0.14.1-34.el7_4
0:2.0.14.1-34.el7_4
ruby-devel
Red Hat:rhel_eus:7.4::computenode
 before 0:2.0.0.648-34.el7_4
0:2.0.0.648-34.el7_4
ruby-doc
Red Hat:rhel_eus:7.4::computenode
 before 0:2.0.0.648-34.el7_4
0:2.0.0.648-34.el7_4
ruby-tcltk
Red Hat:rhel_eus:7.4::computenode
 before 0:2.0.0.648-34.el7_4
0:2.0.0.648-34.el7_4
rubygem-minitest
Red Hat:rhel_eus:7.4::computenode
 before 0:4.3.2-34.el7_4
0:4.3.2-34.el7_4
rubygem-rake
Red Hat:rhel_eus:7.4::computenode
 before 0:0.9.6-34.el7_4
0:0.9.6-34.el7_4
rubygems-devel
Red Hat:rhel_eus:7.4::computenode
 before 0:2.0.14.1-34.el7_4
0:2.0.14.1-34.el7_4
ruby
Red Hat:rhel_eus:7.4::server
 before 0:2.0.0.648-34.el7_4
0:2.0.0.648-34.el7_4
ruby-debuginfo
Red Hat:rhel_eus:7.4::server
 before 0:2.0.0.648-34.el7_4
0:2.0.0.648-34.el7_4
ruby-irb
Red Hat:rhel_eus:7.4::server
 before 0:2.0.0.648-34.el7_4
0:2.0.0.648-34.el7_4
ruby-libs
Red Hat:rhel_eus:7.4::server
 before 0:2.0.0.648-34.el7_4
0:2.0.0.648-34.el7_4
rubygem-bigdecimal
Red Hat:rhel_eus:7.4::server
 before 0:1.2.0-34.el7_4
0:1.2.0-34.el7_4
rubygem-io-console
Red Hat:rhel_eus:7.4::server
 before 0:0.4.2-34.el7_4
0:0.4.2-34.el7_4
rubygem-json
Red Hat:rhel_eus:7.4::server
 before 0:1.7.7-34.el7_4
0:1.7.7-34.el7_4
rubygem-psych
Red Hat:rhel_eus:7.4::server
 before 0:2.0.0-34.el7_4
0:2.0.0-34.el7_4
rubygem-rdoc
Red Hat:rhel_eus:7.4::server
 before 0:4.0.0-34.el7_4
0:4.0.0-34.el7_4
rubygems
Red Hat:rhel_eus:7.4::server
 before 0:2.0.14.1-34.el7_4
0:2.0.14.1-34.el7_4
ruby-devel
Red Hat:rhel_eus:7.4::server
 before 0:2.0.0.648-34.el7_4
0:2.0.0.648-34.el7_4
ruby-doc
Red Hat:rhel_eus:7.4::server
 before 0:2.0.0.648-34.el7_4
0:2.0.0.648-34.el7_4
ruby-tcltk
Red Hat:rhel_eus:7.4::server
 before 0:2.0.0.648-34.el7_4
0:2.0.0.648-34.el7_4
rubygem-minitest
Red Hat:rhel_eus:7.4::server
 before 0:4.3.2-34.el7_4
0:4.3.2-34.el7_4
rubygem-rake
Red Hat:rhel_eus:7.4::server
 before 0:0.9.6-34.el7_4
0:0.9.6-34.el7_4
rubygems-devel
Red Hat:rhel_eus:7.4::server
 before 0:2.0.14.1-34.el7_4
0:2.0.14.1-34.el7_4
ruby
Red Hat:rhel_eus:7.5::computenode
 before 0:2.0.0.648-34.el7_5
0:2.0.0.648-34.el7_5
ruby-debuginfo
Red Hat:rhel_eus:7.5::computenode
 before 0:2.0.0.648-34.el7_5
0:2.0.0.648-34.el7_5
ruby-irb
Red Hat:rhel_eus:7.5::computenode
 before 0:2.0.0.648-34.el7_5
0:2.0.0.648-34.el7_5
ruby-libs
Red Hat:rhel_eus:7.5::computenode
 before 0:2.0.0.648-34.el7_5
0:2.0.0.648-34.el7_5
rubygem-bigdecimal
Red Hat:rhel_eus:7.5::computenode
 before 0:1.2.0-34.el7_5
0:1.2.0-34.el7_5
rubygem-io-console
Red Hat:rhel_eus:7.5::computenode
 before 0:0.4.2-34.el7_5
0:0.4.2-34.el7_5
rubygem-json
Red Hat:rhel_eus:7.5::computenode
 before 0:1.7.7-34.el7_5
0:1.7.7-34.el7_5
rubygem-psych
Red Hat:rhel_eus:7.5::computenode
 before 0:2.0.0-34.el7_5
0:2.0.0-34.el7_5
rubygem-rdoc
Red Hat:rhel_eus:7.5::computenode
 before 0:4.0.0-34.el7_5
0:4.0.0-34.el7_5
rubygems
Red Hat:rhel_eus:7.5::computenode
 before 0:2.0.14.1-34.el7_5
0:2.0.14.1-34.el7_5
ruby-devel
Red Hat:rhel_eus:7.5::computenode
 before 0:2.0.0.648-34.el7_5
0:2.0.0.648-34.el7_5
ruby-doc
Red Hat:rhel_eus:7.5::computenode
 before 0:2.0.0.648-34.el7_5
0:2.0.0.648-34.el7_5
ruby-tcltk
Red Hat:rhel_eus:7.5::computenode
 before 0:2.0.0.648-34.el7_5
0:2.0.0.648-34.el7_5
rubygem-minitest
Red Hat:rhel_eus:7.5::computenode
 before 0:4.3.2-34.el7_5
0:4.3.2-34.el7_5
rubygem-rake
Red Hat:rhel_eus:7.5::computenode
 before 0:0.9.6-34.el7_5
0:0.9.6-34.el7_5
rubygems-devel
Red Hat:rhel_eus:7.5::computenode
 before 0:2.0.14.1-34.el7_5
0:2.0.14.1-34.el7_5
ruby
Red Hat:rhel_eus:7.5::server
 before 0:2.0.0.648-34.el7_5
0:2.0.0.648-34.el7_5
ruby-debuginfo
Red Hat:rhel_eus:7.5::server
 before 0:2.0.0.648-34.el7_5
0:2.0.0.648-34.el7_5
ruby-irb
Red Hat:rhel_eus:7.5::server
 before 0:2.0.0.648-34.el7_5
0:2.0.0.648-34.el7_5
ruby-libs
Red Hat:rhel_eus:7.5::server
 before 0:2.0.0.648-34.el7_5
0:2.0.0.648-34.el7_5
rubygem-bigdecimal
Red Hat:rhel_eus:7.5::server
 before 0:1.2.0-34.el7_5
0:1.2.0-34.el7_5
rubygem-io-console
Red Hat:rhel_eus:7.5::server
 before 0:0.4.2-34.el7_5
0:0.4.2-34.el7_5
rubygem-json
Red Hat:rhel_eus:7.5::server
 before 0:1.7.7-34.el7_5
0:1.7.7-34.el7_5
rubygem-psych
Red Hat:rhel_eus:7.5::server
 before 0:2.0.0-34.el7_5
0:2.0.0-34.el7_5
rubygem-rdoc
Red Hat:rhel_eus:7.5::server
 before 0:4.0.0-34.el7_5
0:4.0.0-34.el7_5
rubygems
Red Hat:rhel_eus:7.5::server
 before 0:2.0.14.1-34.el7_5
0:2.0.14.1-34.el7_5
ruby-devel
Red Hat:rhel_eus:7.5::server
 before 0:2.0.0.648-34.el7_5
0:2.0.0.648-34.el7_5
ruby-doc
Red Hat:rhel_eus:7.5::server
 before 0:2.0.0.648-34.el7_5
0:2.0.0.648-34.el7_5
ruby-tcltk
Red Hat:rhel_eus:7.5::server
 before 0:2.0.0.648-34.el7_5
0:2.0.0.648-34.el7_5
rubygem-minitest
Red Hat:rhel_eus:7.5::server
 before 0:4.3.2-34.el7_5
0:4.3.2-34.el7_5
rubygem-rake
Red Hat:rhel_eus:7.5::server
 before 0:0.9.6-34.el7_5
0:0.9.6-34.el7_5
rubygems-devel
Red Hat:rhel_eus:7.5::server
 before 0:2.0.14.1-34.el7_5
0:2.0.14.1-34.el7_5
ruby2.5
SUSE:Linux Enterprise Module for Basesystem 15
From an advisory covering 21 CVEs
 before 2.5.5-4.3.1
2.5.5-4.3.1
ruby2.5
SUSE:Linux Enterprise Module for Basesystem 15 SP1
From an advisory covering 21 CVEs
 before 2.5.5-4.3.1
2.5.5-4.3.1
ruby2.1
SUSE:HPE Helion OpenStack 8
From an advisory covering 42 CVEs
 before 2.1.9-19.3.2
2.1.9-19.3.2
ruby2.1
SUSE:OpenStack Cloud 7
From an advisory covering 42 CVEs
 before 2.1.9-19.3.2
2.1.9-19.3.2
yast2-ruby-bindings
SUSE:OpenStack Cloud 7
From an advisory covering 42 CVEs
 before 3.1.53-9.8.1
3.1.53-9.8.1
ruby2.1
SUSE:OpenStack Cloud 8
From an advisory covering 42 CVEs
 before 2.1.9-19.3.2
2.1.9-19.3.2
ruby2.1
SUSE:OpenStack Cloud Crowbar 8
From an advisory covering 42 CVEs
 before 2.1.9-19.3.2
2.1.9-19.3.2
ruby2.1
SUSE:Linux Enterprise Server for SAP Applications 12 SP2
From an advisory covering 42 CVEs
 before 2.1.9-19.3.2
2.1.9-19.3.2
yast2-ruby-bindings
SUSE:Linux Enterprise Server for SAP Applications 12 SP2
From an advisory covering 42 CVEs
 before 3.1.53-9.8.1
3.1.53-9.8.1
ruby2.1
SUSE:Linux Enterprise Server for SAP Applications 12 SP3
From an advisory covering 42 CVEs
 before 2.1.9-19.3.2
2.1.9-19.3.2
ruby2.1
SUSE:Linux Enterprise Software Development Kit 12 SP4
From an advisory covering 42 CVEs
 before 2.1.9-19.3.2
2.1.9-19.3.2
ruby2.1
SUSE:Linux Enterprise Software Development Kit 12 SP5
From an advisory covering 42 CVEs
 before 2.1.9-19.3.2
2.1.9-19.3.2
ruby2.1
SUSE:Linux Enterprise Server 12 SP2-LTSS
From an advisory covering 42 CVEs
 before 2.1.9-19.3.2
2.1.9-19.3.2
yast2-ruby-bindings
SUSE:Linux Enterprise Server 12 SP2-LTSS
From an advisory covering 42 CVEs
 before 3.1.53-9.8.1
3.1.53-9.8.1
ruby2.1
SUSE:Linux Enterprise Server 12 SP2-BCL
From an advisory covering 42 CVEs
 before 2.1.9-19.3.2
2.1.9-19.3.2
yast2-ruby-bindings
SUSE:Linux Enterprise Server 12 SP2-BCL
From an advisory covering 42 CVEs
 before 3.1.53-9.8.1
3.1.53-9.8.1
ruby2.1
SUSE:Linux Enterprise Server 12 SP3-LTSS
From an advisory covering 42 CVEs
 before 2.1.9-19.3.2
2.1.9-19.3.2
ruby2.1
SUSE:Linux Enterprise Server 12 SP3-BCL
From an advisory covering 42 CVEs
 before 2.1.9-19.3.2
2.1.9-19.3.2
ruby2.1
SUSE:Linux Enterprise Server 12 SP4
From an advisory covering 42 CVEs
 before 2.1.9-19.3.2
2.1.9-19.3.2
ruby2.1
SUSE:Linux Enterprise Server for SAP Applications 12 SP4
From an advisory covering 42 CVEs
 before 2.1.9-19.3.2
2.1.9-19.3.2
ruby2.1
SUSE:Linux Enterprise Server 12 SP5
From an advisory covering 42 CVEs
 before 2.1.9-19.3.2
2.1.9-19.3.2
ruby2.1
SUSE:Linux Enterprise Server for SAP Applications 12 SP5
From an advisory covering 42 CVEs
 before 2.1.9-19.3.2
2.1.9-19.3.2
ruby2.1
SUSE:Enterprise Storage 5
From an advisory covering 42 CVEs
 before 2.1.9-19.3.2
2.1.9-19.3.2
ruby
SUSE:WebYast 1.3
From an advisory covering 4 CVEs
 before 1.8.7.p357-0.9.20.3.1
1.8.7.p357-0.9.20.3.1
ruby1.9.1
Ubuntu:14.04:LTS
 before 1.9.3.484-2ubuntu1.13, plus listed versions
1.9.3.194-8.1ubuntu21.9.3.448-1ubuntu11.9.3.448-1ubuntu21.9.3.484-1ubuntu11.9.3.484-1ubuntu2
Show 11 moreShow less
1.9.3.484-2ubuntu11.9.3.484-2ubuntu1.11.9.3.484-2ubuntu1.21.9.3.484-2ubuntu1.31.9.3.484-2ubuntu1.51.9.3.484-2ubuntu1.61.9.3.484-2ubuntu1.71.9.3.484-2ubuntu1.81.9.3.484-2ubuntu1.101.9.3.484-2ubuntu1.111.9.3.484-2ubuntu1.12
1.9.3.484-2ubuntu1.13
ruby2.0
Ubuntu:14.04:LTS
 before 2.0.0.484-1ubuntu2.11, plus listed versions
2.0.0.299-22.0.0.343-12.0.0.343-1ubuntu12.0.0.353-12.0.0.353-1ubuntu1
Show 10 moreShow less
2.0.0.484-1ubuntu12.0.0.484-1ubuntu22.0.0.484-1ubuntu2.12.0.0.484-1ubuntu2.22.0.0.484-1ubuntu2.42.0.0.484-1ubuntu2.52.0.0.484-1ubuntu2.62.0.0.484-1ubuntu2.82.0.0.484-1ubuntu2.92.0.0.484-1ubuntu2.10
2.0.0.484-1ubuntu2.11
ruby2.3
Ubuntu:16.04:LTS
 before 2.3.1-2~16.04.11, plus listed versions
2.3.0-12.3.0-22.3.0-4ubuntu22.3.0-4ubuntu32.3.0-5ubuntu1
Show 8 moreShow less
2.3.1-2~16.042.3.1-2~16.04.22.3.1-2~16.04.42.3.1-2~16.04.52.3.1-2~16.04.62.3.1-2~16.04.72.3.1-2~16.04.92.3.1-2~16.04.10
2.3.1-2~16.04.11
ruby2.5
Ubuntu:18.04:LTS
 before 2.5.1-1ubuntu1.1, plus listed versions
2.5.0~preview1-1ubuntu22.5.0-4ubuntu12.5.0-4ubuntu42.5.0-5ubuntu12.5.0-6ubuntu12.5.1-1ubuntu1
2.5.1-1ubuntu1.1
ruby1.9.1
Ubuntu:14.04:LTS
From an advisory covering 2 CVEs
 before 1.9.3.484-2ubuntu1.13, plus listed versions
1.9.3.194-8.1ubuntu21.9.3.448-1ubuntu11.9.3.448-1ubuntu21.9.3.484-1ubuntu11.9.3.484-1ubuntu2
Show 11 moreShow less
1.9.3.484-2ubuntu11.9.3.484-2ubuntu1.11.9.3.484-2ubuntu1.21.9.3.484-2ubuntu1.31.9.3.484-2ubuntu1.51.9.3.484-2ubuntu1.61.9.3.484-2ubuntu1.71.9.3.484-2ubuntu1.81.9.3.484-2ubuntu1.101.9.3.484-2ubuntu1.111.9.3.484-2ubuntu1.12
1.9.3.484-2ubuntu1.13
ruby2.0
Ubuntu:14.04:LTS
From an advisory covering 2 CVEs
 before 2.0.0.484-1ubuntu2.11, plus listed versions
2.0.0.299-22.0.0.343-12.0.0.343-1ubuntu12.0.0.353-12.0.0.353-1ubuntu1
Show 10 moreShow less
2.0.0.484-1ubuntu12.0.0.484-1ubuntu22.0.0.484-1ubuntu2.12.0.0.484-1ubuntu2.22.0.0.484-1ubuntu2.42.0.0.484-1ubuntu2.52.0.0.484-1ubuntu2.62.0.0.484-1ubuntu2.82.0.0.484-1ubuntu2.92.0.0.484-1ubuntu2.10
2.0.0.484-1ubuntu2.11
ruby2.3
Ubuntu:16.04:LTS
From an advisory covering 2 CVEs
 before 2.3.1-2~16.04.11, plus listed versions
2.3.0-12.3.0-22.3.0-4ubuntu22.3.0-4ubuntu32.3.0-5ubuntu1
Show 8 moreShow less
2.3.1-2~16.042.3.1-2~16.04.22.3.1-2~16.04.42.3.1-2~16.04.52.3.1-2~16.04.62.3.1-2~16.04.72.3.1-2~16.04.92.3.1-2~16.04.10
2.3.1-2~16.04.11
ruby2.5
Ubuntu:18.04:LTS
From an advisory covering 2 CVEs
 before 2.5.1-1ubuntu1.1, plus listed versions
2.5.0~preview1-1ubuntu22.5.0-4ubuntu12.5.0-4ubuntu42.5.0-5ubuntu12.5.0-6ubuntu12.5.1-1ubuntu1
2.5.1-1ubuntu1.1
ruby-bundled-gems-rpmhelper
openSUSE:Leap 15.0
From an advisory covering 21 CVEs
 before 0.0.2-lp151.2.1
0.0.2-lp151.2.1
ruby2.5
openSUSE:Leap 15.0
From an advisory covering 21 CVEs
 before 2.5.5-lp151.4.3.1
2.5.5-lp151.4.3.1
ruby-bundled-gems-rpmhelper
openSUSE:Leap 15.1
From an advisory covering 21 CVEs
 before 0.0.2-lp151.2.1
0.0.2-lp151.2.1
ruby2.5
openSUSE:Leap 15.1
From an advisory covering 21 CVEs
 before 2.5.5-lp151.4.3.1
2.5.5-lp151.4.3.1

History

History
RecordedChangedSources
affected, facts
aliasesEUVD
first indexedCVE List, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2018-16395 is a critical vulnerability (CVSS 9.8) in Ruby-lang Openssl, published October 26, 2018. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 10.7%, the 95th percentile. Fixed in openssl 2.0.9.

References

Show 194 moreShow less
This page doesn't list everything

Left out here: 2 references and the rest of 1 source description. The JSON record has them.

Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open