ruby4.0 vulnerabilities (AlmaLinux)
12 vulnerabilities.
-
ruby4.0AlmaLinux An issue was discovered in the resolv gem before 0.7.2 for Ruby. Resolv::DNS::Resource.get_class,... 7.5 High -
ruby4.0AlmaLinux Net::IMAP: Command Injection via ID command argument 5.8 Medium -
ruby4.0AlmaLinux Net::IMAP: Denial of Service via incomplete raw argument validation 2.1 Low -
ruby4.0AlmaLinux Net::IMAP: Command Injection via non-synchronizing literal in "raw" argument 5.8 Medium -
ruby4.0AlmaLinux net-imap: Command Injection via "raw" arguments to multiple commands 5.8 Medium -
ruby4.0AlmaLinux net-imap: Command Injection via unvalidated Symbol inputs 5.8 Medium -
ruby4.0AlmaLinux net-imap: Denial of service via high iteration count for `SCRAM-*` authentication 6.0 Medium -
ruby4.0AlmaLinux net-imap: Quadratic complexity when reading response literals 2.3 Low -
ruby4.0AlmaLinux ERB has an @_init deserialization guard bypass via def_module / def_method / def_class 8.1 High -
ruby4.0AlmaLinux zlib: Buffer Overflow in Zlib::GzipReader ungetc via large input leads to memory corruption 1.7 Low -
ruby4.0AlmaLinux Ruby JSON has a format string injection vulnerability 8.3 High -
ruby4.0AlmaLinux net-imap vulnerable to STARTTLS stripping via invalid response timing 7.6 High