Most recent entries from all

bdu:2017-02342

Withdrawn: BELL-CVE-2017-10784 — CVE-2017-10784 does not affect BellSoft software

Withdrawn by the publisher.

BREW-serveit-CVE-2017-10784 — WEBrick RCE Vulnerability

Affected: Homebrew: serveit

The Basic authentication code in WEBrick library in Ruby before 2.2.8, 2.3.x before 2.3.5, and 2.4.x through 2.4.1 allows remote attackers to inject terminal emulator escape sequences into its log and possibly execute arbitrary commands via a crafted user name.

certfr-2018-avi-524 — De multiples vulnérabilités ont été découvertes dans les produits Apple. Certaines d'entre elles permettent à un attaqu…

certfr-2018-avi-524

CLEANSTART-2026-MZ31215 — Security fix for CVE-2017-10784 applied in: ruby 2.4.2-r0

Affected: CleanStart: ruby

Security vulnerability affects the ruby package. This issue is resolved in later releases. See references for vulnerability details.

cnvd-2017-34706

EUVD-2026-76346

fkie_cve-2017-10784

GHSA-369m-2gv6-mw28 — WEBrick RCE Vulnerability

Affected: RubyGems: webrick

gsd-2017-10784

RHSA-2017:3485 — Red Hat Security Advisory: rh-ruby24-ruby security, bug fix, and enhancement update

ruby: Buffer underrun vulnerability in Kernel.sprintf rubygems: Escape sequence in the "summary" field of gemspec rubygems: No size limit in summary length of gem spec rubygems: Arbitrary file overwrite due to incorrect validation of specification name rubygems: DNS hijacking vulnerability rubygems: Unsafe object deserialization through YAML formatted gem specifications ruby: Escape sequence injection vulnerability in the Basic authentication of WEBrick ruby: Arbitrary heap exposure during a JSON.generate call

RHSA-2018:0378 — Red Hat Security Advisory: ruby security update

ruby: Buffer underrun vulnerability in Kernel.sprintf rubygems: Escape sequence in the "summary" field of gemspec rubygems: No size limit in summary length of gem spec rubygems: Arbitrary file overwrite due to incorrect validation of specification name rubygems: DNS hijacking vulnerability rubygems: Unsafe object deserialization through YAML formatted gem specifications ruby: Escape sequence injection vulnerability in the Basic authentication of WEBrick ruby: Buffer underrun in OpenSSL ASN1 decode ruby: Arbitrary heap exposure during a JSON.generate call ruby: Command injection vulnerability in Net::FTP ruby: Command injection in lib/resolv.rb:lazy_initialize() allows arbitrary code execution

SUSE-SU-2020:1570-1 — Security update for ruby2.1

Security update for ruby2.1

UBUNTU-CVE-2017-10784

Affected: Ubuntu:14.04:LTS: ruby1.9.1, Ubuntu:14.04:LTS: ruby2.0, Ubuntu:16.04:LTS: ruby2.3

WID-SEC-W-2026-1423 — Ruby: Mehrere Schwachstellen

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Ruby ausnutzen, um beliebigen Programmcode mit den Rechten des Dienstes auszuführen, einen Denial of Service Angriff durchzuführen oder Sicherheitsmechanismen zu umgehen.