ruby-irb vulnerabilities (TuxCare)
20 vulnerabilities.
-
ruby-irbTuxCare Integer Overflow or Wraparound in GitLab 10.0 Critical -
ruby-irbTuxCare Integer Overflow or Wraparound in GitLab 10.0 Critical -
ruby-irbTuxCare Integer Overflow or Wraparound in GitLab 9.9 Critical -
ruby-irbTuxCare An issue was discovered in the resolv gem before 0.7.2 for Ruby. Resolv::DNS::Resource.get_class,... 7.5 High -
ruby-irbTuxCare net-imap: Command Injection via unvalidated Symbol inputs 5.8 Medium -
ruby-irbTuxCare zlib: Buffer Overflow in Zlib::GzipReader ungetc via large input leads to memory corruption 1.7 Low -
ruby-irbTuxCare net-imap vulnerable to STARTTLS stripping via invalid response timing 7.6 High -
ruby-irbTuxCare URI allows for userinfo Leakage in URI#join, URI#merge, and URI#+ 3.2 Low -
ruby-irbTuxCare CGI has Regular Expression Denial of Service (ReDoS) potential in Util#escapeElement 4.0 Medium -
ruby-irbTuxCare CGI has Denial of Service (DoS) potential in Cookie.parse 5.8 Medium -
ruby-irbTuxCare There is a buffer over-read in Ruby before 2.6.10, 2.7.x before 2.7.6, 3.x before 3.0.4, and 3.1... 7.5 High -
ruby-irbTuxCare Cookie Prefix Spoofing in CGI::Cookie.parse 7.5 High -
ruby-irbTuxCare REXML round-trip instability 7.5 High -
ruby-irbTuxCare An exploitable heap overflow vulnerability exists in the Psych::Emitter start_document function... 9.8 Critical -
ruby-irbTuxCare An issue was discovered in Oniguruma 6.2.0, as used in Oniguruma-mod in Ruby through 2.4.1 and... 9.8 Critical -
ruby-irbTuxCare An issue was discovered in Oniguruma 6.2.0, as used in Oniguruma-mod in Ruby through 2.4.1 and... 9.8 Critical -
ruby-irbTuxCare An issue was discovered in Oniguruma 6.2.0, as used in Oniguruma-mod in Ruby through 2.4.1 and... 9.8 Critical -
ruby-irbTuxCare An issue was discovered in Oniguruma 6.2.0, as used in Oniguruma-mod in Ruby through 2.4.1 and... 9.8 Critical -
ruby-irbTuxCare An exploitable heap overflow vulnerability exists in the Fiddle::Function.new "initialize"... 9.8 Critical -
ruby-irbTuxCare Type confusion exists in _cancel_eval Ruby's TclTkIp class method. Attacker passing different... 9.8 Critical