ruby-irb vulnerabilities (Red Hat)
101 vulnerabilities.
ruby-irbRed HatRubyGems Improper Verification of Cryptographic Signature vulnerability9.8 Criticalruby-irbRed HatRubyGems Infinite Loop vulnerability7.5 Highruby-irbRed HatRubyGems Deserialization of Untrusted Data vulnerability7.8 Highruby-irbRed HatRubyGems Link Following vulnerability7.5 Highruby-irbRed HatThe lazy_initialize function in lib/resolv.rb in Ruby through 2.4.3 uses Kernel#open, which might...9.8 Criticalruby-irbRed HatRuby before 2.4.3 allows Net::FTP command injection. Net::FTP#get, getbinaryfile, gettextfile,...8.8 Highruby-irbRed HatRubyGems vulnerable to Deserialization of Untrusted Data9.8 Criticalruby-irbRed HatRuby OpenSSL DoS Vulnerability7.5 Highruby-irbRed HatWEBrick RCE Vulnerability8.8 Highruby-irbRed HatRuby before 2.4.2, 2.3.5, and 2.2.8 is vulnerable to a malicious format string which contains a...9.1 Criticalruby-irbRed HatRuby through 2.2.7, 2.3.x through 2.3.4, and 2.4.x through 2.4.1 can expose arbitrary memory...9.8 Criticalruby-irbRed HatRubyGems has Origin Validation Error vulnerability8.1 Highruby-irbRed HatRubyGems may allow a maliciously crafted gem to overwrite files7.5 Highruby-irbRed HatRubyGems Improper Input Validation vulnerability7.5 Highruby-irbRed HatRubyGems Code Injection vulnerability9.8 Criticalruby-irbRed HatNokogiri is vulnerable to XML External Entity (XXE) attack7.5 Highruby-irbRed HatThe REXML parser in Ruby 1.9.x before 1.9.3 patchlevel 551, 2.0.x before 2.0.0 patchlevel 598,...5.0 Mediumruby-irbRed HatThe REXML parser in Ruby 1.9.x before 1.9.3-p550, 2.0.x before 2.0.0-p594, and 2.1.x before 2.1.4...5.0 Mediumruby-irbRed HatOff-by-one error in the encodes function in pack.c in Ruby 1.9.3 and earlier, and 2.x through 2.1...5.0 Mediumruby-irbRed HatHeap-based buffer overflow in Ruby 1.8, 1.9 before 1.9.3-p484, 2.0 before 2.0.0-p353, 2.1 before...6.8 Mediumruby-irbRed HatThe OpenSSL::SSL.verify_certificate_identity function in lib/openssl/ssl.rb in Ruby 1.8 before 1...6.8 Mediumruby-irbRed HatThe safe-level feature in Ruby 1.8.7 allows context-dependent attackers to modify strings via the...4.3 Mediumruby-irbRed HatRuby vulnerable to denial of service5.0 Mediumruby-irbRed HatThe rb_get_path_check function in file.c in Ruby 1.9.3 before patchlevel 286 and Ruby 2.0.0...5.0 Mediumruby-irbRed HatRuby (aka CRuby) before 1.8.7-p357 computes hash values without restricting the ability to...7.8 Highruby-irbRed HatRuby before 1.8.6-p114 does not reset the random seed upon forking, which makes it easier for...5.0 Mediumruby-irbRed HatThe SecureRandom.random_bytes function in lib/securerandom.rb in Ruby before 1.8.7-p352 and 1.9.x...5.0 Mediumruby-irbRed HatThe VpMemAlloc function in bigdecimal.c in the BigDecimal class in Ruby 1.9.2-p136 and earlier,...6.8 Mediumruby-irbRed HatThe safe-level feature in Ruby 1.8.6 through 1.8.6-420, 1.8.7 through 1.8.7-330, and 1.8.8dev...5.0 Mediumruby-irbRed HatThe FileUtils.remove_entry_secure method in Ruby 1.8.6 through 1.8.6-420, 1.8.7 through 1.8.7-330...6.3 Mediumruby-irbRed HatCross-site scripting (XSS) vulnerability in the WEBrick HTTP server in Ruby in Apple Mac OS X 10...4.3 Mediumruby-irbRed HatWEBrick Improper Input Validation vulnerability7.5 Highruby-irbRed HatThe BigDecimal library in Ruby 1.8.6 before p369 and 1.8.7 before p173 allows context-dependent...5.0 Mediumruby-irbRed Hatext/openssl/ossl_ocsp.c in Ruby 1.8 and 1.9 does not properly check the return value from the...6.8 Mediumruby-irbRed HatWEBrick Denial of Service Vulnerability7.8 Highruby-irbRed Hatresolv.rb in Ruby 1.8.5 and earlier, 1.8.6 before 1.8.6-p287, 1.8.7 before 1.8.7-p72, and 1.9...5.8 Mediumruby-irbRed HatThe REXML module in Ruby 1.8.6 through 1.8.6-p287, 1.8.7 through 1.8.7-p72, and 1.9 allows...5.0 Mediumruby-irbRed HatThe regular expression engine (regex.c) in Ruby 1.8.5 and earlier, 1.8.6 through 1.8.6-p286, 1.8...5.0 Mediumruby-irbRed HatThe dl module in Ruby 1.8.5 and earlier, 1.8.6 through 1.8.6-p286, 1.8.7 through 1.8.7-p71, and 1...7.5 Highruby-irbRed HatAlgorithmic complexity vulnerability in the WEBrick::HTTPUtils.split_header_value function in...7.8 Highruby-irbRed HatRuby 1.8.5 and earlier, 1.8.6 through 1.8.6-p286, 1.8.7 through 1.8.7-p71, and 1.9 through r18423...7.5 Highruby-irbRed HatInteger overflow in the rb_ary_fill function in array.c in Ruby before revision 17756 allows...7.5 Highruby-irbRed HatInteger overflow in the (1) rb_ary_splice function in Ruby 1.8.4 and earlier, 1.8.5 before 1.8.5...7.8 Highruby-irbRed HatInteger overflow in the (1) rb_ary_splice function in Ruby 1.8.4 and earlier, 1.8.5 before 1.8.5...7.8 Highruby-irbRed HatThe rb_str_format function in Ruby 1.8.4 and earlier, 1.8.5 before 1.8.5-p231, 1.8.6 before 1.8.6...7.8 Highruby-irbRed HatMultiple integer overflows in the rb_ary_store function in Ruby 1.8.4 and earlier, 1.8.5 before 1...10.0 Highruby-irbRed HatMultiple integer overflows in the rb_str_buf_append function in Ruby 1.8.4 and earlier, 1.8.5...10.0 Highruby-irbRed HatDirectory traversal vulnerability in WEBrick in Ruby 1.8 before 1.8.5-p115 and 1.8.6-p114, and 1...5.0 Mediumruby-irbRed HatThe (1) Net::ftptls, (2) Net::telnets, (3) Net::imap, (4) Net::pop, and (5) Net::smtp libraries...5.0 Mediumruby-irbRed HatThe connect method in lib/net/http.rb in the (1) Net::HTTP and (2) Net::HTTPS libraries in Ruby 1...4.3 Medium- Show moreLoading…