ruby1.8 vulnerabilities (Debian)
42 vulnerabilities.
-
ruby1.8Debian In Ruby before 2.2.10, 2.3.x before 2.3.7, 2.4.x before 2.4.4, 2.5.x before 2.5.1, and 2.6.0... 9.1 Critical -
ruby1.8Debian In Ruby before 2.2.10, 2.3.x before 2.3.7, 2.4.x before 2.4.4, 2.5.x before 2.5.1, and 2.6.0... 7.5 High -
ruby1.8Debian In Ruby before 2.2.10, 2.3.x before 2.3.7, 2.4.x before 2.4.4, 2.5.x before 2.5.1, and 2.6.0... 7.5 High -
ruby1.8Debian In Ruby before 2.2.10, 2.3.x before 2.3.7, 2.4.x before 2.4.4, 2.5.x before 2.5.1, and 2.6.0... 7.5 High -
ruby1.8Debian Directory traversal vulnerability in the Dir.mktmpdir method in the tmpdir library in Ruby before... 7.5 High -
ruby1.8Debian Ruby before 2.2.10, 2.3.x before 2.3.7, 2.4.x before 2.4.4, 2.5.x before 2.5.1, and 2.6.0... 5.3 Medium -
ruby1.8Debian The lazy_initialize function in lib/resolv.rb in Ruby through 2.4.3 uses Kernel#open, which might... 9.8 Critical -
ruby1.8Debian Ruby before 2.4.3 allows Net::FTP command injection. Net::FTP#get, getbinaryfile, gettextfile,... 8.8 High -
ruby1.8Debian WEBrick RCE Vulnerability 8.8 High -
ruby1.8Debian Ruby before 2.4.2, 2.3.5, and 2.2.8 is vulnerable to a malicious format string which contains a... 9.1 Critical -
ruby1.8Debian DL::dlopen in Ruby 1.8, 1.9.0, 1.9.2, 1.9.3, 2.0.0 before patchlevel 648, and 2.1 before 2.1.8... 7.3 High -
ruby1.8Debian verify_certificate_identity in the OpenSSL extension in Ruby before 2.0.0 patchlevel 645, 2.1.x... 5.9 Medium -
ruby1.8Debian The REXML parser in Ruby 1.9.x before 1.9.3 patchlevel 551, 2.0.x before 2.0.0 patchlevel 598,... 5.0 Medium -
ruby1.8Debian The REXML parser in Ruby 1.9.x before 1.9.3-p550, 2.0.x before 2.0.0-p594, and 2.1.x before 2.1.4... 5.0 Medium -
ruby1.8Debian Heap-based buffer overflow in Ruby 1.8, 1.9 before 1.9.3-p484, 2.0 before 2.0.0-p353, 2.1 before... 6.8 Medium -
ruby1.8Debian The OpenSSL::SSL.verify_certificate_identity function in lib/openssl/ssl.rb in Ruby 1.8 before 1... 6.8 Medium -
ruby1.8Debian Ruby vulnerable to denial of service 5.0 Medium -
ruby1.8Debian Ruby (aka CRuby) before 1.8.7-p357 computes hash values without restricting the ability to... 7.8 High -
ruby1.8Debian The SecureRandom.random_bytes function in lib/securerandom.rb in Ruby before 1.8.7-p352 and 1.9.x... 5.0 Medium -
ruby1.8Debian Ruby before 1.8.7-p352 does not reset the random seed upon forking, which makes it easier for... 5.0 Medium -
ruby1.8Debian The VpMemAlloc function in bigdecimal.c in the BigDecimal class in Ruby 1.9.2-p136 and earlier,... 6.8 Medium -
ruby1.8Debian The BigDecimal library in Ruby 1.8.6 before p369 and 1.8.7 before p173 allows context-dependent... 5.0 Medium -
ruby1.8Debian ext/openssl/ossl_ocsp.c in Ruby 1.8 and 1.9 does not properly check the return value from the... 6.8 Medium -
ruby1.8Debian resolv.rb in Ruby 1.8.5 and earlier, 1.8.6 before 1.8.6-p287, 1.8.7 before 1.8.7-p72, and 1.9... 5.8 Medium -
ruby1.8Debian The REXML module in Ruby 1.8.6 through 1.8.6-p287, 1.8.7 through 1.8.7-p72, and 1.9 allows... 5.0 Medium -
ruby1.8Debian The regular expression engine (regex.c) in Ruby 1.8.5 and earlier, 1.8.6 through 1.8.6-p286, 1.8... 5.0 Medium -
ruby1.8Debian The dl module in Ruby 1.8.5 and earlier, 1.8.6 through 1.8.6-p286, 1.8.7 through 1.8.7-p71, and 1... 7.5 High -
ruby1.8Debian Algorithmic complexity vulnerability in the WEBrick::HTTPUtils.split_header_value function in... 7.8 High -
ruby1.8Debian Ruby 1.8.5 and earlier, 1.8.6 through 1.8.6-p286, 1.8.7 through 1.8.7-p71, and 1.9 through r18423... 7.5 High -
ruby1.8Debian Integer overflow in the rb_ary_fill function in array.c in Ruby before revision 17756 allows... 7.5 High -
ruby1.8Debian Integer overflow in the (1) rb_ary_splice function in Ruby 1.8.4 and earlier, 1.8.5 before 1.8.5... 7.8 High -
ruby1.8Debian Integer overflow in the (1) rb_ary_splice function in Ruby 1.8.4 and earlier, 1.8.5 before 1.8.5... 7.8 High -
ruby1.8Debian The rb_str_format function in Ruby 1.8.4 and earlier, 1.8.5 before 1.8.5-p231, 1.8.6 before 1.8.6... 7.8 High -
ruby1.8Debian Multiple integer overflows in the rb_ary_store function in Ruby 1.8.4 and earlier, 1.8.5 before 1... 10.0 High -
ruby1.8Debian Multiple integer overflows in the rb_str_buf_append function in Ruby 1.8.4 and earlier, 1.8.5... 10.0 High -
ruby1.8Debian The (1) Net::ftptls, (2) Net::telnets, (3) Net::imap, (4) Net::pop, and (5) Net::smtp libraries... 5.0 Medium -
ruby1.8Debian The connect method in lib/net/http.rb in the (1) Net::HTTP and (2) Net::HTTPS libraries in Ruby 1... 4.3 Medium -
ruby1.8Debian The cgi.rb CGI library for Ruby 1.8 allows remote attackers to cause a denial of service ... 5.0 Medium -
ruby1.8Debian Multiple unspecified vulnerabilities in Ruby before 1.8.5 allow remote attackers to bypass "safe... 6.4 Medium -
ruby1.8Debian The HTTP/XMLRPC server in Ruby before 1.8.2 uses blocking sockets, which allows attackers to... 5.0 Medium -
ruby1.8Debian Ruby 1.6.x up to 1.6.8, 1.8.x up to 1.8.2, and 1.9.0 development up to 2005-09-01 allows... 7.5 High -
ruby1.8Debian The XMLRPC server in utils.rb for the ruby library (libruby) 1.8 sets an invalid default value... 7.5 High