ruby3.3 vulnerabilities (Ubuntu)
21 vulnerabilities.
-
ruby3.3Ubuntu Mail: Email address spoofing via malformed RFC 2047 encoded-words 5.3 Medium -
ruby3.3Ubuntu Ruby JSON: JSON generator heap buffer overflow when streaming to an IO 3.7 Low -
ruby3.3Ubuntu Net::IMAP: Command Injection via ID command argument 5.8 Medium -
ruby3.3Ubuntu Net::IMAP: Denial of Service via incomplete raw argument validation 2.1 Low -
ruby3.3Ubuntu Net::IMAP: Command Injection via non-synchronizing literal in "raw" argument 5.8 Medium -
ruby3.3Ubuntu An issue was discovered in Ruby 4 before 4.0.5. A race condition leading to a use-after-free in... 8.1 High -
ruby3.3Ubuntu net-imap: Command Injection via "raw" arguments to multiple commands 5.8 Medium -
ruby3.3Ubuntu net-imap: Command Injection via unvalidated Symbol inputs 5.8 Medium -
ruby3.3Ubuntu net-imap: Denial of service via high iteration count for `SCRAM-*` authentication 6.0 Medium -
ruby3.3Ubuntu net-imap: Quadratic complexity when reading response literals 2.3 Low -
ruby3.3Ubuntu ERB has an @_init deserialization guard bypass via def_module / def_method / def_class 8.1 High -
ruby3.3Ubuntu zlib: Buffer Overflow in Zlib::GzipReader ungetc via large input leads to memory corruption 1.7 Low -
ruby3.3Ubuntu URI Credential Leakage Bypass over CVE-2025-27221 2.1 Low -
ruby3.3Ubuntu REXML has a DoS condition when parsing malformed XML file 1.2 Low -
ruby3.3Ubuntu resolv vulnerable to DoS via insufficient DNS domain name length validation 7.5 High -
ruby3.3Ubuntu net-imap vulnerable to STARTTLS stripping via invalid response timing 7.6 High -
ruby3.3Ubuntu net-imap rubygem vulnerable to possible DoS by memory exhaustion 6.0 Medium -
ruby3.3Ubuntu URI allows for userinfo Leakage in URI#join, URI#merge, and URI#+ 3.2 Low -
ruby3.3Ubuntu CGI has Regular Expression Denial of Service (ReDoS) potential in Util#escapeElement 4.0 Medium -
ruby3.3Ubuntu CGI has Denial of Service (DoS) potential in Cookie.parse 5.8 Medium -
ruby3.3Ubuntu Rexml: rexml: denial of service via inefficient regex parsing 7.5 High