rubygem3.3-psych vulnerabilities (Red Hat)
30 vulnerabilities.
-
rubygem3.3-psychRed Hat DTLS Retransmits Handshake Messages From a Stale Buffer Offset 8.2 High -
rubygem3.3-psychRed Hat AEAD Forgeries with Empty Ciphertext When Using EVP_Cipher() 9.1 Critical -
rubygem3.3-psychRed Hat An issue was discovered in the resolv gem before 0.7.2 for Ruby. Resolv::DNS::MessageEncoder... 4.0 Medium -
rubygem3.3-psychRed Hat An issue was discovered in the resolv gem before 0.7.2 for Ruby. Resolv::DNS::Resource.get_class,... 7.5 High -
rubygem3.3-psychRed Hat Net::IMAP: Command Injection via ID command argument 5.8 Medium -
rubygem3.3-psychRed Hat Net::IMAP: Denial of Service via incomplete raw argument validation 2.1 Low -
rubygem3.3-psychRed Hat Net::IMAP: Command Injection via non-synchronizing literal in "raw" argument 5.8 Medium -
rubygem3.3-psychRed Hat Out-of-Bounds Read in CMS Password-Based Decryption 7.5 High -
rubygem3.3-psychRed Hat Possible Heap Buffer Overflow in ASN.1 Multibyte String Conversion 8.1 High -
rubygem3.3-psychRed Hat Heap Use-After-Free in the PKCS7_verify() Function 8.8 High -
rubygem3.3-psychRed Hat Incorrect Tag Processing for Empty Messages in AES-GCM-SIV and AES-SIV modes 4.8 Medium -
rubygem3.3-psychRed Hat AES-OCB IV Ignored on EVP_Cipher() Path 7.5 High -
rubygem3.3-psychRed Hat Possible Out of Bounds Read in X509_VERIFY_PARAM_set1_email() 6.2 Medium -
rubygem3.3-psychRed Hat FFC-DH Peer Validation Uses Attacker-Supplied q 3.7 Low -
rubygem3.3-psychRed Hat Trust-Anchor Substitution via cert/issuer Typo in CMP rootCaKeyUpdate 5.3 Medium -
rubygem3.3-psychRed Hat Multi-RecipientInfo Bleichenbacher Oracle in CMS_decrypt() and PKCS7_decrypt() 3.7 Low -
rubygem3.3-psychRed Hat NULL Pointer Dereference in CRMF EncryptedValue Decryption 5.9 Medium -
rubygem3.3-psychRed Hat Possible NULL Dereference in Password-Based CMS Decryption 5.9 Medium -
rubygem3.3-psychRed Hat NULL Dereference in Certificate Verification with OCSP Checking 7.5 High -
rubygem3.3-psychRed Hat NULL Pointer Dereference in QUIC Server Initial Packet Handling 7.5 High -
rubygem3.3-psychRed Hat Double-free When Checking OCSP Stapled Response 5.0 Medium -
rubygem3.3-psychRed Hat Unbounded Memory Growth in the QUIC PATH_CHALLENGE Handler 7.5 High -
rubygem3.3-psychRed Hat CMS AuthEnvelopedData Processing May Accept Forged Messages 9.1 Critical -
rubygem3.3-psychRed Hat PKCS#12 Files with PBMAC1 Are Accepted with Short HMAC Keys 7.4 High -
rubygem3.3-psychRed Hat Heap Buffer Over-read in ASN.1 Content Parsing 7.5 High -
rubygem3.3-psychRed Hat net-imap: Command Injection via "raw" arguments to multiple commands 5.8 Medium -
rubygem3.3-psychRed Hat net-imap: Command Injection via unvalidated Symbol inputs 5.8 Medium -
rubygem3.3-psychRed Hat net-imap: Denial of service via high iteration count for `SCRAM-*` authentication 6.0 Medium -
rubygem3.3-psychRed Hat net-imap: Quadratic complexity when reading response literals 2.3 Low -
rubygem3.3-psychRed Hat net-imap vulnerable to STARTTLS stripping via invalid response timing 7.6 High