Skip to content

ruby-docs vulnerabilities (Red Hat)

42 vulnerabilities.

ruby-docs Red Hat The REXML parser in Ruby 1.9.x before 1.9.3 patchlevel 551, 2.0.x before 2.0.0 patchlevel 598,... CVE-2014-8090 Fix available 5.0 MediumNovember 14, 2014
ruby-docs Red Hat The REXML parser in Ruby 1.9.x before 1.9.3-p550, 2.0.x before 2.0.0-p594, and 2.1.x before 2.1.4... CVE-2014-8080 Fix available 5.0 MediumOctober 29, 2014
ruby-docs Red Hat Heap-based buffer overflow in Ruby 1.8, 1.9 before 1.9.3-p484, 2.0 before 2.0.0-p353, 2.1 before... CVE-2013-4164 Fix available EPSS 35.0% 6.8 MediumNovember 22, 2013
ruby-docs Red Hat The OpenSSL::SSL.verify_certificate_identity function in lib/openssl/ssl.rb in Ruby 1.8 before 1... CVE-2013-4073 Fix available 6.8 MediumJuly 26, 2013
ruby-docs Red Hat The safe-level feature in Ruby 1.8.7 allows context-dependent attackers to modify strings via the... CVE-2012-4481 Fix available 4.3 MediumMay 2, 2013
ruby-docs Red Hat Ruby vulnerable to denial of service CVE-2013-1821 Fix available 5.0 MediumApril 9, 2013
ruby-docs Red Hat The rb_get_path_check function in file.c in Ruby 1.9.3 before patchlevel 286 and Ruby 2.0.0... CVE-2012-4522 Fix available 5.0 MediumNovember 24, 2012
ruby-docs Red Hat Ruby (aka CRuby) before 1.8.7-p357 computes hash values without restricting the ability to... CVE-2011-4815 Fix available 7.8 HighDecember 30, 2011
ruby-docs Red Hat Ruby before 1.8.6-p114 does not reset the random seed upon forking, which makes it easier for... CVE-2011-3009 Fix available 5.0 MediumAugust 5, 2011
ruby-docs Red Hat The SecureRandom.random_bytes function in lib/securerandom.rb in Ruby before 1.8.7-p352 and 1.9.x... CVE-2011-2705 Fix available 5.0 MediumAugust 5, 2011
ruby-docs Red Hat The VpMemAlloc function in bigdecimal.c in the BigDecimal class in Ruby 1.9.2-p136 and earlier,... CVE-2011-0188 Fix available 6.8 MediumMarch 23, 2011
ruby-docs Red Hat The safe-level feature in Ruby 1.8.6 through 1.8.6-420, 1.8.7 through 1.8.7-330, and 1.8.8dev... CVE-2011-1005 Fix available 5.0 MediumMarch 2, 2011
ruby-docs Red Hat The FileUtils.remove_entry_secure method in Ruby 1.8.6 through 1.8.6-420, 1.8.7 through 1.8.7-330... CVE-2011-1004 Fix available 6.3 MediumMarch 2, 2011
ruby-docs Red Hat Cross-site scripting (XSS) vulnerability in the WEBrick HTTP server in Ruby in Apple Mac OS X 10... CVE-2010-0541 Fix available 4.3 MediumJune 17, 2010
ruby-docs Red Hat WEBrick Improper Input Validation vulnerability CVE-2009-4492 Public exploitFix available EPSS 16.2% 7.5 HighJanuary 13, 2010
ruby-docs Red Hat The BigDecimal library in Ruby 1.8.6 before p369 and 1.8.7 before p173 allows context-dependent... CVE-2009-1904 Public exploitFix available EPSS 12.8% 5.0 MediumJune 11, 2009
ruby-docs Red Hat ext/openssl/ossl_ocsp.c in Ruby 1.8 and 1.9 does not properly check the return value from the... CVE-2009-0642 Fix available 6.8 MediumFebruary 18, 2009
ruby-docs Red Hat WEBrick Denial of Service Vulnerability CVE-2008-4310 Public exploitFix available EPSS 13.6% 7.8 HighDecember 9, 2008
ruby-docs Red Hat resolv.rb in Ruby 1.8.5 and earlier, 1.8.6 before 1.8.6-p287, 1.8.7 before 1.8.7-p72, and 1.9... CVE-2008-3905 Fix available 5.8 MediumSeptember 4, 2008
ruby-docs Red Hat The REXML module in Ruby 1.8.6 through 1.8.6-p287, 1.8.7 through 1.8.7-p72, and 1.9 allows... CVE-2008-3790 Public exploitFix available EPSS 15.2% 5.0 MediumAugust 27, 2008
ruby-docs Red Hat The regular expression engine (regex.c) in Ruby 1.8.5 and earlier, 1.8.6 through 1.8.6-p286, 1.8... CVE-2008-3443 Public exploitFix available EPSS 15.7% 5.0 MediumAugust 14, 2008
ruby-docs Red Hat The dl module in Ruby 1.8.5 and earlier, 1.8.6 through 1.8.6-p286, 1.8.7 through 1.8.7-p71, and 1... CVE-2008-3657 Public exploitFix available EPSS 13.7% 7.5 HighAugust 13, 2008
ruby-docs Red Hat Algorithmic complexity vulnerability in the WEBrick::HTTPUtils.split_header_value function in... CVE-2008-3656 Public exploitFix available EPSS 70.2% 7.8 HighAugust 13, 2008
ruby-docs Red Hat Ruby 1.8.5 and earlier, 1.8.6 through 1.8.6-p286, 1.8.7 through 1.8.7-p71, and 1.9 through r18423... CVE-2008-3655 Public exploitFix available EPSS 14.1% 7.5 HighAugust 13, 2008
ruby-docs Red Hat Integer overflow in the rb_ary_fill function in array.c in Ruby before revision 17756 allows... CVE-2008-2376 Fix available 7.5 HighJuly 9, 2008
ruby-docs Red Hat Integer overflow in the (1) rb_ary_splice function in Ruby 1.8.4 and earlier, 1.8.5 before 1.8.5... CVE-2008-2726 Fix available 7.8 HighJune 24, 2008
ruby-docs Red Hat Integer overflow in the (1) rb_ary_splice function in Ruby 1.8.4 and earlier, 1.8.5 before 1.8.5... CVE-2008-2725 Fix available 7.8 HighJune 24, 2008
ruby-docs Red Hat The rb_str_format function in Ruby 1.8.4 and earlier, 1.8.5 before 1.8.5-p231, 1.8.6 before 1.8.6... CVE-2008-2664 Fix available 7.8 HighJune 24, 2008
ruby-docs Red Hat Multiple integer overflows in the rb_ary_store function in Ruby 1.8.4 and earlier, 1.8.5 before 1... CVE-2008-2663 Fix available 10.0 HighJune 24, 2008
ruby-docs Red Hat Multiple integer overflows in the rb_str_buf_append function in Ruby 1.8.4 and earlier, 1.8.5... CVE-2008-2662 Fix available 10.0 HighJune 24, 2008
ruby-docs Red Hat Directory traversal vulnerability in WEBrick in Ruby 1.8 before 1.8.5-p115 and 1.8.6-p114, and 1... CVE-2008-1145 Public exploitFix available EPSS 27.1% 5.0 MediumMarch 4, 2008
ruby-docs Red Hat The (1) Net::ftptls, (2) Net::telnets, (3) Net::imap, (4) Net::pop, and (5) Net::smtp libraries... CVE-2007-5770 Fix available 5.0 MediumNovember 14, 2007
ruby-docs Red Hat The connect method in lib/net/http.rb in the (1) Net::HTTP and (2) Net::HTTPS libraries in Ruby 1... CVE-2007-5162 Fix available 4.3 MediumOctober 1, 2007
ruby-docs Red Hat The APOP protocol allows remote attackers to guess the first 3 characters of a password via man... CVE-2007-1558 Fix available 2.6 LowApril 16, 2007
ruby-docs Red Hat The read_multipart function in cgi.rb in Ruby before 1.8.5-p2 does not properly detect boundaries... CVE-2006-6303 Fix available 5.0 MediumDecember 6, 2006
ruby-docs Red Hat The cgi.rb CGI library for Ruby 1.8 allows remote attackers to cause a denial of service ... CVE-2006-5467 Fix available 5.0 MediumOctober 27, 2006
ruby-docs Red Hat Multiple unspecified vulnerabilities in Ruby before 1.8.5 allow remote attackers to bypass "safe... CVE-2006-3694 Fix available 6.4 MediumJuly 19, 2006
ruby-docs Red Hat The HTTP/XMLRPC server in Ruby before 1.8.2 uses blocking sockets, which allows attackers to... CVE-2006-1931 Public exploitFix available EPSS 10.4% 5.0 MediumApril 20, 2006
ruby-docs Red Hat Ruby 1.6.x up to 1.6.8, 1.8.x up to 1.8.2, and 1.9.0 development up to 2005-09-01 allows... CVE-2005-2337 Fix available 7.5 HighOctober 7, 2005
ruby-docs Red Hat The XMLRPC server in utils.rb for the ruby library (libruby) 1.8 sets an invalid default value... CVE-2005-1992 Fix available 7.5 HighJune 20, 2005
ruby-docs Red Hat The CGI module in Ruby 1.6 before 1.6.8, and 1.8 before 1.8.2, allows remote attackers to cause a... CVE-2004-0983 Fix available 5.0 MediumNovember 8, 2004
ruby-docs Red Hat The FileStore capability in CGI::Session for Ruby before 1.8.1, and possibly PStore, creates... CVE-2004-0755 Fix available 2.1 LowAugust 16, 2004