ruby-debuginfo vulnerabilities (Red Hat)
137 vulnerabilities.
ruby-debuginfoRed HatWEBrick::HTTPAuth::DigestAuth in Ruby through 2.4.7, 2.5.x through 2.5.6, and 2.6.x through 2.6.4...7.5 Highruby-debuginfoRed HatRuby through 2.4.7, 2.5.x through 2.5.6, and 2.6.x through 2.6.4 mishandles path checking within...6.5 Mediumruby-debuginfoRed HatAn integer overflow in the search_in_range function in regexec.c in Oniguruma 6.x before 6.9...9.8 Criticalruby-debuginfoRed HatRubyzip denial of service5.5 Mediumruby-debuginfoRed HatRubyGems Escape sequence injection in errors7.5 Highruby-debuginfoRed HatCode injection in RubyGems8.8 Highruby-debuginfoRed HatRubyGems Escape sequence injection vulnerability in api response handling7.5 Highruby-debuginfoRed HatRubyGems Escape sequence injection vulnerability in gem owner7.5 Highruby-debuginfoRed HatRubyGems Escape sequence injection vulnerability in verbose7.5 Highruby-debuginfoRed HatRubyGems Delete directory using symlink when decompressing tar7.4 Highruby-debuginfoRed HatAn issue was discovered in Ruby before 2.3.8, 2.4.x before 2.4.5, 2.5.x before 2.5.2, and 2.6.x...8.1 Highruby-debuginfoRed HatRuby Openssl Allows Incorrect Value Comparison9.8 Criticalruby-debuginfoRed HatSinatra Cross-site Scripting vulnerability6.1 Mediumruby-debuginfoRed HatIn Ruby before 2.2.10, 2.3.x before 2.3.7, 2.4.x before 2.4.4, 2.5.x before 2.5.1, and 2.6.0...9.1 Criticalruby-debuginfoRed HatIn Ruby before 2.2.10, 2.3.x before 2.3.7, 2.4.x before 2.4.4, 2.5.x before 2.5.1, and 2.6.0...7.5 Highruby-debuginfoRed HatIn Ruby before 2.2.10, 2.3.x before 2.3.7, 2.4.x before 2.4.4, 2.5.x before 2.5.1, and 2.6.0...7.5 Highruby-debuginfoRed HatIn Ruby before 2.2.10, 2.3.x before 2.3.7, 2.4.x before 2.4.4, 2.5.x before 2.5.1, and 2.6.0...7.5 Highruby-debuginfoRed HatDirectory traversal vulnerability in the Dir.mktmpdir method in the tmpdir library in Ruby before...7.5 Highruby-debuginfoRed HatRuby before 2.2.10, 2.3.x before 2.3.7, 2.4.x before 2.4.4, 2.5.x before 2.5.1, and 2.6.0...5.3 Mediumruby-debuginfoRed Hatrails-html-sanitizer Cross-site Scripting vulnerability6.1 Mediumruby-debuginfoRed HatCross-site Scripting in loofah6.1 Mediumruby-debuginfoRed HatRubyGems Path Traversal vulnerability5.5 Mediumruby-debuginfoRed HatRubyGems Cross-site Scripting vulnerability6.1 Mediumruby-debuginfoRed HatRubyGems Improper Input Validation vulnerability5.3 Mediumruby-debuginfoRed HatRubyGems Improper Verification of Cryptographic Signature vulnerability9.8 Criticalruby-debuginfoRed HatRubyGems Infinite Loop vulnerability7.5 Highruby-debuginfoRed HatRubyGems Deserialization of Untrusted Data vulnerability7.8 Highruby-debuginfoRed HatRubyGems Link Following vulnerability7.5 Highruby-debuginfoRed HatThe lazy_initialize function in lib/resolv.rb in Ruby through 2.4.3 uses Kernel#open, which might...9.8 Criticalruby-debuginfoRed HatRuby before 2.4.3 allows Net::FTP command injection. Net::FTP#get, getbinaryfile, gettextfile,...8.8 Highruby-debuginfoRed HatRubyGems vulnerable to Deserialization of Untrusted Data9.8 Criticalruby-debuginfoRed HatRuby OpenSSL DoS Vulnerability7.5 Highruby-debuginfoRed HatWEBrick RCE Vulnerability8.8 Highruby-debuginfoRed HatRuby before 2.4.2, 2.3.5, and 2.2.8 is vulnerable to a malicious format string which contains a...9.1 Criticalruby-debuginfoRed HatRuby through 2.2.7, 2.3.x through 2.3.4, and 2.4.x through 2.4.1 can expose arbitrary memory...9.8 Criticalruby-debuginfoRed HatRubyGems has Origin Validation Error vulnerability8.1 Highruby-debuginfoRed HatRubyGems may allow a maliciously crafted gem to overwrite files7.5 Highruby-debuginfoRed HatRubyGems Improper Input Validation vulnerability7.5 Highruby-debuginfoRed HatRubyGems Code Injection vulnerability9.8 Criticalruby-debuginfoRed HatNokogiri is vulnerable to XML External Entity (XXE) attack7.5 Highruby-debuginfoRed HatThe REXML parser in Ruby 1.9.x before 1.9.3 patchlevel 551, 2.0.x before 2.0.0 patchlevel 598,...5.0 Mediumruby-debuginfoRed HatThe REXML parser in Ruby 1.9.x before 1.9.3-p550, 2.0.x before 2.0.0-p594, and 2.1.x before 2.1.4...5.0 Mediumruby-debuginfoRed HatOff-by-one error in the encodes function in pack.c in Ruby 1.9.3 and earlier, and 2.x through 2.1...5.0 Mediumruby-debuginfoRed HatHeap-based buffer overflow in Ruby 1.8, 1.9 before 1.9.3-p484, 2.0 before 2.0.0-p353, 2.1 before...6.8 Mediumruby-debuginfoRed HatThe OpenSSL::SSL.verify_certificate_identity function in lib/openssl/ssl.rb in Ruby 1.8 before 1...6.8 Mediumruby-debuginfoRed HatThe safe-level feature in Ruby 1.8.7 allows context-dependent attackers to modify strings via the...4.3 Mediumruby-debuginfoRed HatRuby vulnerable to denial of service5.0 Mediumruby-debuginfoRed HatThe rb_get_path_check function in file.c in Ruby 1.9.3 before patchlevel 286 and Ruby 2.0.0...5.0 Mediumruby-debuginfoRed HatRuby (aka CRuby) before 1.8.7-p357 computes hash values without restricting the ability to...7.8 Highruby-debuginfoRed HatRuby before 1.8.6-p114 does not reset the random seed upon forking, which makes it easier for...5.0 Medium- Show moreLoading…