Most recent entries from all

bdu:2021-06123

Withdrawn: BELL-CVE-2021-41816 — CVE-2021-41816 does not affect BellSoft software

Withdrawn by the publisher.

CLEANSTART-2026-RW40260 — Security fix for CVE-2021-41816 applied in: ruby 3.0.3-r0

Affected: CleanStart: ruby

Security vulnerability affects the ruby package. This issue is resolved in later releases. See references for vulnerability details.

cnvd-2022-18048

EUVD-2026-31888

fkie_cve-2021-41816

CGI.escape_html in Ruby before 2.7.5 and 3.x before 3.0.3 has an integer overflow and resultant buffer overflow via a long string on platforms (such as Windows) where size_t and long have different numbers of bytes. This also affects the CGI gem before 0.3.1 for Ruby.

GHSA-5cqm-crxm-6qpv — Buffer overrun in CGI.escape_html

Affected: RubyGems: cgi

A buffer overrun vulnerability was discovered in CGI.escape_html. This can lead to a buffer overflow when a user passes a very large string (> 700 MB) to CGI.escape_html on a platform where long type takes 4 bytes, typically, Windows.

gsd-2021-41816

openSUSE-SU-2024:11657-1 — libruby2_7-2_7-2.7.5-1.1 on GA media

libruby2_7-2_7-2.7.5-1.1 on GA media

RHSA-2022:6855 — Red Hat Security Advisory: rh-ruby30-ruby security, bug fix, and enhancement update

ruby: buffer overflow in CGI.escape_html ruby: Regular expression denial of service vulnerability of Date parsing methods ruby: Cookie prefix spoofing in CGI::Cookie.parse Ruby: Double free in Regexp compilation ruby: Buffer overrun in String-to-Float conversion

UBUNTU-CVE-2021-41816

Affected: Ubuntu:20.04:LTS: ruby2.7, Ubuntu:22.04:LTS: ruby3.0

WID-SEC-W-2022-0877 — Ruby: Mehrere Schwachstellen

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Ruby ausnutzen, um einen Denial of Service Angriff durchzuführen oder Informationen offenzulegen.