ruby2.3 vulnerabilities (Ubuntu)
87 vulnerabilities.
-
ruby2.3Ubuntu Mail: Email address spoofing via malformed RFC 2047 encoded-words 5.3 Medium -
ruby2.3Ubuntu Ruby JSON: JSON generator heap buffer overflow when streaming to an IO 3.7 Low -
ruby2.3Ubuntu Net::IMAP: Command Injection via ID command argument 5.8 Medium -
ruby2.3Ubuntu Net::IMAP: Denial of Service via incomplete raw argument validation 2.1 Low -
ruby2.3Ubuntu Net::IMAP: Command Injection via non-synchronizing literal in "raw" argument 5.8 Medium -
ruby2.3Ubuntu An issue was discovered in Ruby 4 before 4.0.5. A race condition leading to a use-after-free in... 8.1 High -
ruby2.3Ubuntu net-imap: Command Injection via "raw" arguments to multiple commands 5.8 Medium -
ruby2.3Ubuntu net-imap: Command Injection via unvalidated Symbol inputs 5.8 Medium -
ruby2.3Ubuntu ERB has an @_init deserialization guard bypass via def_module / def_method / def_class 8.1 High -
ruby2.3Ubuntu zlib: Buffer Overflow in Zlib::GzipReader ungetc via large input leads to memory corruption 1.7 Low -
ruby2.3Ubuntu URI Credential Leakage Bypass over CVE-2025-27221 2.1 Low -
ruby2.3Ubuntu REXML has a DoS condition when parsing malformed XML file 1.2 Low -
ruby2.3Ubuntu resolv vulnerable to DoS via insufficient DNS domain name length validation 7.5 High -
ruby2.3Ubuntu net-imap vulnerable to STARTTLS stripping via invalid response timing 7.6 High -
ruby2.3Ubuntu Ruby WEBrick read_header HTTP Request Smuggling Vulnerability 6.5 Medium -
ruby2.3Ubuntu URI allows for userinfo Leakage in URI#join, URI#merge, and URI#+ 3.2 Low -
ruby2.3Ubuntu CGI has Regular Expression Denial of Service (ReDoS) potential in Util#escapeElement 4.0 Medium -
ruby2.3Ubuntu CGI has Denial of Service (DoS) potential in Cookie.parse 5.8 Medium -
ruby2.3Ubuntu Rexml: rexml: denial of service via inefficient regex parsing 7.5 High -
ruby2.3Ubuntu REXML ReDoS vulnerability 6.6 Medium -
ruby2.3Ubuntu HTTP Request Smuggling in ruby webrick 7.5 High -
ruby2.3Ubuntu REXML denial of service vulnerability 5.9 Medium -
ruby2.3Ubuntu REXML DoS vulnerability 5.3 Medium -
ruby2.3Ubuntu REXML DoS vulnerability 5.3 Medium -
ruby2.3Ubuntu Denial of service in REXML 4.3 Medium -
ruby2.3Ubuntu REXML contains a denial of service vulnerability 5.3 Medium -
ruby2.3Ubuntu An issue was discovered in Ruby 3.x through 3.3.0. If attacker-supplied data is provided to the... 6.6 Medium -
ruby2.3Ubuntu RDoc RCE vulnerability with .rdoc_options 4.5 Medium -
ruby2.3Ubuntu StringIO buffer overread vulnerability 9.8 Critical -
ruby2.3Ubuntu URI gem has ReDoS vulnerability 5.3 Medium -
ruby2.3Ubuntu Ruby Time component ReDoS issue 5.3 Medium -
ruby2.3Ubuntu Ruby URI component ReDoS issue 5.3 Medium -
ruby2.3Ubuntu HTTP response splitting in CGI 8.8 High -
ruby2.3Ubuntu There is a buffer over-read in Ruby before 2.6.10, 2.7.x before 2.7.6, 3.x before 3.0.4, and 3.1... 7.5 High -
ruby2.3Ubuntu Cookie Prefix Spoofing in CGI::Cookie.parse 7.5 High -
ruby2.3Ubuntu Buffer overrun in CGI.escape_html 9.8 Critical -
ruby2.3Ubuntu Regular expression denial of service vulnerability (ReDoS) in date 7.5 High -
ruby2.3Ubuntu An issue was discovered in Ruby through 2.6.7, 2.7.x through 2.7.3, and 3.x through 3.0.1. Net:... 7.4 High -
ruby2.3Ubuntu Arbitrary Code Execution in Rdoc 7.0 High -
ruby2.3Ubuntu An issue was discovered in Ruby through 2.6.7, 2.7.x through 2.7.3, and 3.x through 3.0.1. A... 5.8 Medium -
ruby2.3Ubuntu REXML round-trip instability 7.5 High -
ruby2.3Ubuntu WEBRick vulnerable to HTTP Request/Response Smuggling 7.5 High -
ruby2.3Ubuntu An issue was discovered in Ruby 2.5.x through 2.5.7, 2.6.x through 2.6.5, and 2.7.0. If a victim... 5.3 Medium -
ruby2.3Ubuntu Unsafe object creation in json RubyGem 7.5 High -
ruby2.3Ubuntu Ruby through 2.4.7, 2.5.x through 2.5.6, and 2.6.x through 2.6.4 allows code injection if the... 8.1 High -
ruby2.3Ubuntu Ruby through 2.4.7, 2.5.x through 2.5.6, and 2.6.x through 2.6.4 allows HTTP Response Splitting.... 5.3 Medium -
ruby2.3Ubuntu WEBrick::HTTPAuth::DigestAuth in Ruby through 2.4.7, 2.5.x through 2.5.6, and 2.6.x through 2.6.4... 7.5 High -
ruby2.3Ubuntu Ruby through 2.4.7, 2.5.x through 2.5.6, and 2.6.x through 2.6.4 mishandles path checking within... 6.5 Medium -
ruby2.3Ubuntu RubyGems Escape sequence injection in errors 7.5 High -
ruby2.3Ubuntu Code injection in RubyGems 8.8 High - Show olderLoading…