ruby3.4-devel vulnerabilities (Red Hat)
67 vulnerabilities.
-
ruby3.4-develRed Hat DTLS Retransmits Handshake Messages From a Stale Buffer Offset 8.2 High -
ruby3.4-develRed Hat AEAD Forgeries with Empty Ciphertext When Using EVP_Cipher() 9.1 Critical -
ruby3.4-develRed Hat An issue was discovered in the resolv gem before 0.7.2 for Ruby. Resolv::DNS::MessageEncoder... 4.0 Medium -
ruby3.4-develRed Hat An issue was discovered in the resolv gem before 0.7.2 for Ruby. Resolv::DNS::Resource.get_class,... 7.5 High -
ruby3.4-develRed Hat Client-Side Memory Leak in OCSP Response Checking 7.5 High -
ruby3.4-develRed Hat Ruby JSON: JSON generator heap buffer overflow when streaming to an IO 3.7 Low -
ruby3.4-develRed Hat Net::IMAP: Command Injection via ID command argument 5.8 Medium -
ruby3.4-develRed Hat Net::IMAP: Denial of Service via incomplete raw argument validation 2.1 Low -
ruby3.4-develRed Hat Out-of-Bounds Read in CMS Password-Based Decryption 7.5 High -
ruby3.4-develRed Hat Possible Heap Buffer Overflow in ASN.1 Multibyte String Conversion 8.1 High -
ruby3.4-develRed Hat Heap Use-After-Free in the PKCS7_verify() Function 8.8 High -
ruby3.4-develRed Hat Incorrect Tag Processing for Empty Messages in AES-GCM-SIV and AES-SIV modes 4.8 Medium -
ruby3.4-develRed Hat AES-OCB IV Ignored on EVP_Cipher() Path 7.5 High -
ruby3.4-develRed Hat Possible Out of Bounds Read in X509_VERIFY_PARAM_set1_email() 6.2 Medium -
ruby3.4-develRed Hat FFC-DH Peer Validation Uses Attacker-Supplied q 3.7 Low -
ruby3.4-develRed Hat Trust-Anchor Substitution via cert/issuer Typo in CMP rootCaKeyUpdate 5.3 Medium -
ruby3.4-develRed Hat Multi-RecipientInfo Bleichenbacher Oracle in CMS_decrypt() and PKCS7_decrypt() 3.7 Low -
ruby3.4-develRed Hat NULL Pointer Dereference in CRMF EncryptedValue Decryption 5.9 Medium -
ruby3.4-develRed Hat Possible NULL Dereference in Password-Based CMS Decryption 5.9 Medium -
ruby3.4-develRed Hat NULL Dereference in Certificate Verification with OCSP Checking 7.5 High -
ruby3.4-develRed Hat NULL Pointer Dereference in QUIC Server Initial Packet Handling 7.5 High -
ruby3.4-develRed Hat Double-free When Checking OCSP Stapled Response 5.0 Medium -
ruby3.4-develRed Hat Unbounded Memory Growth in the QUIC PATH_CHALLENGE Handler 7.5 High -
ruby3.4-develRed Hat CMS AuthEnvelopedData Processing May Accept Forged Messages 9.1 Critical -
ruby3.4-develRed Hat PKCS#12 Files with PBMAC1 Are Accepted with Short HMAC Keys 7.4 High -
ruby3.4-develRed Hat Heap Buffer Over-read in ASN.1 Content Parsing 7.5 High -
ruby3.4-develRed Hat net-imap: Command Injection via "raw" arguments to multiple commands 5.8 Medium -
ruby3.4-develRed Hat net-imap: Command Injection via unvalidated Symbol inputs 5.8 Medium -
ruby3.4-develRed Hat net-imap: Denial of service via high iteration count for `SCRAM-*` authentication 6.0 Medium -
ruby3.4-develRed Hat net-imap: Quadratic complexity when reading response literals 2.3 Low -
ruby3.4-develRed Hat zlib: Buffer Overflow in Zlib::GzipReader ungetc via large input leads to memory corruption 1.7 Low -
ruby3.4-develRed Hat net-imap vulnerable to STARTTLS stripping via invalid response timing 7.6 High -
ruby3.4-develRed Hat An issue was discovered in Ruby 3.x through 3.3.0. If attacker-supplied data is provided to the... 6.6 Medium -
ruby3.4-develRed Hat Ruby Time component ReDoS issue 5.3 Medium -
ruby3.4-develRed Hat There is a buffer over-read in Ruby before 2.6.10, 2.7.x before 2.7.6, 3.x before 3.0.4, and 3.1... 7.5 High -
ruby3.4-develRed Hat Cookie Prefix Spoofing in CGI::Cookie.parse 7.5 High -
ruby3.4-develRed Hat An issue was discovered in Ruby through 2.6.7, 2.7.x through 2.7.3, and 3.x through 3.0.1. A... 5.8 Medium -
ruby3.4-develRed Hat REXML round-trip instability 7.5 High -
ruby3.4-develRed Hat WEBRick vulnerable to HTTP Request/Response Smuggling 7.5 High -
ruby3.4-develRed Hat Ruby through 2.4.7, 2.5.x through 2.5.6, and 2.6.x through 2.6.4 allows HTTP Response Splitting.... 5.3 Medium -
ruby3.4-develRed Hat In Ruby before 2.2.10, 2.3.x before 2.3.7, 2.4.x before 2.4.4, 2.5.x before 2.5.1, and 2.6.0... 9.1 Critical -
ruby3.4-develRed Hat WEBrick RCE Vulnerability 8.8 High -
ruby3.4-develRed Hat Ruby through 2.2.7, 2.3.x through 2.3.4, and 2.4.x through 2.4.1 can expose arbitrary memory... 9.8 Critical -
ruby3.4-develRed Hat Net::SMTP in Ruby before 2.4.0 is vulnerable to SMTP command injection via CRLF sequences in a... 6.1 Medium -
ruby3.4-develRed Hat The Fiddle::Handle implementation in ext/fiddle/handle.c in Ruby before 2.0.0-p648, 2.1 before 2... 8.4 High -
ruby3.4-develRed Hat DL::dlopen in Ruby 1.8, 1.9.0, 1.9.2, 1.9.3, 2.0.0 before patchlevel 648, and 2.1 before 2.1.8... 7.3 High -
ruby3.4-develRed Hat The URI.decode_www_form_component method in Ruby before 1.9.2-p330 allows remote attackers to... 7.5 High -
ruby3.4-develRed Hat The REXML parser in Ruby 1.9.x before 1.9.3 patchlevel 551, 2.0.x before 2.0.0 patchlevel 598,... 5.0 Medium -
ruby3.4-develRed Hat The REXML parser in Ruby 1.9.x before 1.9.3-p550, 2.0.x before 2.0.0-p594, and 2.1.x before 2.1.4... 5.0 Medium -
ruby3.4-develRed Hat Off-by-one error in the encodes function in pack.c in Ruby 1.9.3 and earlier, and 2.x through 2.1... 5.0 Medium - Show olderLoading…