ruby2.3 vulnerabilities (Ubuntu)
87 vulnerabilities.
ruby2.3UbuntuRubyGems Escape sequence injection vulnerability in api response handling7.5 Highruby2.3UbuntuRubyGems Escape sequence injection vulnerability in gem owner7.5 Highruby2.3UbuntuRubyGems Escape sequence injection vulnerability in verbose7.5 Highruby2.3UbuntuRubyGems Delete directory using symlink when decompressing tar7.4 Highruby2.3UbuntuAn issue was discovered in Ruby before 2.3.8, 2.4.x before 2.4.5, 2.5.x before 2.5.2, and 2.6.x...8.1 Highruby2.3UbuntuRuby Openssl Allows Incorrect Value Comparison9.8 Criticalruby2.3UbuntuIn Ruby before 2.2.10, 2.3.x before 2.3.7, 2.4.x before 2.4.4, 2.5.x before 2.5.1, and 2.6.0...9.1 Criticalruby2.3UbuntuIn Ruby before 2.2.10, 2.3.x before 2.3.7, 2.4.x before 2.4.4, 2.5.x before 2.5.1, and 2.6.0...7.5 Highruby2.3UbuntuIn Ruby before 2.2.10, 2.3.x before 2.3.7, 2.4.x before 2.4.4, 2.5.x before 2.5.1, and 2.6.0...7.5 Highruby2.3UbuntuIn Ruby before 2.2.10, 2.3.x before 2.3.7, 2.4.x before 2.4.4, 2.5.x before 2.5.1, and 2.6.0...7.5 Highruby2.3UbuntuDirectory traversal vulnerability in the Dir.mktmpdir method in the tmpdir library in Ruby before...7.5 Highruby2.3UbuntuRuby before 2.2.10, 2.3.x before 2.3.7, 2.4.x before 2.4.4, 2.5.x before 2.5.1, and 2.6.0...5.3 Mediumruby2.3UbuntuRubyGems Path Traversal vulnerability5.5 Mediumruby2.3UbuntuRubyGems Cross-site Scripting vulnerability6.1 Mediumruby2.3UbuntuRubyGems Improper Input Validation vulnerability5.3 Mediumruby2.3UbuntuRubyGems Improper Verification of Cryptographic Signature vulnerability9.8 Criticalruby2.3UbuntuRubyGems Infinite Loop vulnerability7.5 Highruby2.3UbuntuRubyGems Deserialization of Untrusted Data vulnerability7.8 Highruby2.3UbuntuRubyGems Link Following vulnerability7.5 Highruby2.3UbuntuThe lazy_initialize function in lib/resolv.rb in Ruby through 2.4.3 uses Kernel#open, which might...9.8 Criticalruby2.3UbuntuRuby before 2.4.3 allows Net::FTP command injection. Net::FTP#get, getbinaryfile, gettextfile,...8.8 Highruby2.3UbuntuRubyGems vulnerable to Deserialization of Untrusted Data9.8 Criticalruby2.3UbuntuRuby OpenSSL DoS Vulnerability7.5 Highruby2.3UbuntuWEBrick RCE Vulnerability8.8 Highruby2.3UbuntuRuby before 2.4.2, 2.3.5, and 2.2.8 is vulnerable to a malicious format string which contains a...9.1 Criticalruby2.3UbuntuRuby through 2.2.7, 2.3.x through 2.3.4, and 2.4.x through 2.4.1 can expose arbitrary memory...9.8 Criticalruby2.3UbuntuRubyGems has Origin Validation Error vulnerability8.1 Highruby2.3UbuntuRubyGems may allow a maliciously crafted gem to overwrite files7.5 Highruby2.3UbuntuRubyGems Improper Input Validation vulnerability7.5 Highruby2.3UbuntuRubyGems Code Injection vulnerability9.8 Criticalruby2.3UbuntuNet::SMTP in Ruby before 2.4.0 is vulnerable to SMTP command injection via CRLF sequences in a...6.1 Mediumruby2.3UbuntuAn exploitable heap overflow vulnerability exists in the Fiddle::Function.new "initialize"...9.8 Criticalruby2.3UbuntuType confusion exists in _cancel_eval Ruby's TclTkIp class method. Attacker passing different...9.8 Criticalruby2.3UbuntuOpenSSL gem for Ruby using inadequate encryption strength7.5 Highruby2.3UbuntuThe Fiddle::Handle implementation in ext/fiddle/handle.c in Ruby before 2.0.0-p648, 2.1 before 2...8.4 Highruby2.3UbuntuDL::dlopen in Ruby 1.8, 1.9.0, 1.9.2, 1.9.3, 2.0.0 before patchlevel 648, and 2.1 before 2.1.8...7.3 Highruby2.3Ubuntuverify_certificate_identity in the OpenSSL extension in Ruby before 2.0.0 patchlevel 645, 2.1.x...5.9 Medium