rh-ruby22-ruby vulnerabilities (Red Hat)

14 vulnerabilities.

• rh-ruby22-ruby Red Hat The lazy_initialize function in lib/resolv.rb in Ruby through 2.4.3 uses Kernel#open, which might... CVE-2017-17790 Fix available 9.8 CriticalDecember 20, 2017
• rh-ruby22-ruby Red Hat Ruby before 2.4.3 allows Net::FTP command injection. Net::FTP#get, getbinaryfile, gettextfile,... CVE-2017-17405 Public exploitFix available EPSS 73.8% 8.8 HighDecember 15, 2017
• rh-ruby22-ruby Red Hat RubyGems vulnerable to Deserialization of Untrusted Data CVE-2017-0903 Fix available EPSS 15.9% 9.8 CriticalOctober 11, 2017
• rh-ruby22-ruby Red Hat Ruby OpenSSL DoS Vulnerability CVE-2017-14033 Fix available 7.5 HighSeptember 19, 2017
• rh-ruby22-ruby Red Hat WEBrick RCE Vulnerability CVE-2017-10784 Fix available EPSS 16.4% 8.8 HighSeptember 19, 2017
• rh-ruby22-ruby Red Hat Ruby before 2.4.2, 2.3.5, and 2.2.8 is vulnerable to a malicious format string which contains a... CVE-2017-0898 Fix available 9.1 CriticalSeptember 15, 2017
• rh-ruby22-ruby Red Hat Ruby through 2.2.7, 2.3.x through 2.3.4, and 2.4.x through 2.4.1 can expose arbitrary memory... CVE-2017-14064 Fix available 9.8 CriticalAugust 31, 2017
• rh-ruby22-ruby Red Hat RubyGems has Origin Validation Error vulnerability CVE-2017-0902 Fix available 8.1 HighAugust 31, 2017
• rh-ruby22-ruby Red Hat RubyGems may allow a maliciously crafted gem to overwrite files CVE-2017-0901 Public exploitFix available EPSS 29.4% 7.5 HighAugust 31, 2017
• rh-ruby22-ruby Red Hat RubyGems Improper Input Validation vulnerability CVE-2017-0900 Fix available 7.5 HighAugust 31, 2017
• rh-ruby22-ruby Red Hat RubyGems Code Injection vulnerability CVE-2017-0899 Fix available EPSS 11.1% 9.8 CriticalAugust 31, 2017
• rh-ruby22-ruby Red Hat The Fiddle::Handle implementation in ext/fiddle/handle.c in Ruby before 2.0.0-p648, 2.1 before 2... CVE-2015-7551 Fix available 8.4 HighJanuary 12, 2016
• rh-ruby22-ruby Red Hat DL::dlopen in Ruby 1.8, 1.9.0, 1.9.2, 1.9.3, 2.0.0 before patchlevel 648, and 2.1 before 2.1.8... CVE-2009-5147 Public exploitFix available 7.3 HighAugust 26, 2015
• rh-ruby22-ruby Red Hat RubyGems vulnerable to DNS hijack attack CVE-2015-3900 Fix available 5.0 MediumJune 24, 2015