CVE-2017-0899
Critical · 9.8CVSS
9.8
EPSS
11.1%
Published
Aug 31, 2017
CISA due date
—
The record
RubyGems version 2.6.12 and earlier is vulnerable to maliciously crafted gem specifications that include terminal escape characters. Printing the gem specification would execute terminal escape sequences.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|---|---|---|
| RubyGems | rubygems-update | 0 | 2.6.13 |
| Alpine:v3.10 | ruby | 0 | 2.4.2-r0 |
| Alpine:v3.11 | ruby | 0 | 2.4.2-r0 |
| Alpine:v3.12 | ruby | 0 | 2.4.2-r0 |
| Alpine:v3.13 | ruby | 0 | 2.4.2-r0 |
| Alpine:v3.14 | ruby | 0 | 2.4.2-r0 |
| Alpine:v3.15 | ruby | 0 | 2.4.2-r0 |
| Alpine:v3.16 | ruby | 0 | 2.4.2-r0 |
| Alpine:v3.17 | ruby | 0 | 2.4.2-r0 |
| Alpine:v3.18 | ruby | 0 | 2.4.2-r0 |
| Alpine:v3.19 | ruby | 0 | 2.4.2-r0 |
| Alpine:v3.20 | ruby | 0 | 2.4.2-r0 |
| Alpine:v3.21 | ruby | 0 | 2.4.2-r0 |
| Alpine:v3.22 | ruby | 0 | 2.4.2-r0 |
| Alpine:v3.3 | ruby | 0 | 2.2.8-r0 |
| Alpine:v3.4 | ruby | 0 | 2.3.5-r0 |
| Alpine:v3.5 | ruby | 0 | 2.3.5-r0 |
| Alpine:v3.6 | ruby | 0 | 2.4.2-r0 |
| Alpine:v3.7 | ruby | 0 | 2.4.2-r0 |
| Alpine:v3.8 | ruby | 0 | 2.4.2-r0 |
| Alpine:v3.9 | ruby | 0 | 2.4.2-r0 |
| Debian:11 | rubygems | 0 | 3.2.0~rc.1-1 |
| Debian:12 | rubygems | 0 | 3.2.0~rc.1-1 |
| Debian:13 | rubygems | 0 | 3.2.0~rc.1-1 |
| Debian:7 | ruby1.9.1 | 0 | 1.9.3.194-8.1+deb7u6 |
| Debian:8 | ruby2.1 | 0 | 2.1.5-2+deb8u4 |
| Debian:9 | ruby2.3 | 0 | 2.3.3-1+deb9u1 |
| Mageia:5 | ruby-RubyGems | 0 | 2.1.11-5.2.mga5 |
| Mageia:6 | ruby-RubyGems | 0 | 2.4.8-7.1.mga6 |
| Red Hat:enterprise_linux:7::client | ruby | 0 | 0:2.0.0.648-33.el7_4 |
| Red Hat:enterprise_linux:7::client | ruby-debuginfo | 0 | 0:2.0.0.648-33.el7_4 |
| Red Hat:enterprise_linux:7::client | ruby-devel | 0 | 0:2.0.0.648-33.el7_4 |
| Red Hat:enterprise_linux:7::client | ruby-doc | 0 | 0:2.0.0.648-33.el7_4 |
| Red Hat:enterprise_linux:7::client | ruby-irb | 0 | 0:2.0.0.648-33.el7_4 |
| Red Hat:enterprise_linux:7::client | ruby-libs | 0 | 0:2.0.0.648-33.el7_4 |
| Red Hat:enterprise_linux:7::client | ruby-tcltk | 0 | 0:2.0.0.648-33.el7_4 |
| Red Hat:enterprise_linux:7::client | rubygem-bigdecimal | 0 | 0:1.2.0-33.el7_4 |
| Red Hat:enterprise_linux:7::client | rubygem-io-console | 0 | 0:0.4.2-33.el7_4 |
| Red Hat:enterprise_linux:7::client | rubygem-json | 0 | 0:1.7.7-33.el7_4 |
| Red Hat:enterprise_linux:7::client | rubygem-minitest | 0 | 0:4.3.2-33.el7_4 |
| Red Hat:enterprise_linux:7::client | rubygem-psych | 0 | 0:2.0.0-33.el7_4 |
| Red Hat:enterprise_linux:7::client | rubygem-rake | 0 | 0:0.9.6-33.el7_4 |
| Red Hat:enterprise_linux:7::client | rubygem-rdoc | 0 | 0:4.0.0-33.el7_4 |
| Red Hat:enterprise_linux:7::client | rubygems | 0 | 0:2.0.14.1-33.el7_4 |
| Red Hat:enterprise_linux:7::client | rubygems-devel | 0 | 0:2.0.14.1-33.el7_4 |
| Red Hat:enterprise_linux:7::computenode | ruby | 0 | 0:2.0.0.648-33.el7_4 |
| Red Hat:enterprise_linux:7::computenode | ruby-debuginfo | 0 | 0:2.0.0.648-33.el7_4 |
| Red Hat:enterprise_linux:7::computenode | ruby-devel | 0 | 0:2.0.0.648-33.el7_4 |
| Red Hat:enterprise_linux:7::computenode | ruby-doc | 0 | 0:2.0.0.648-33.el7_4 |
| Red Hat:enterprise_linux:7::computenode | ruby-irb | 0 | 0:2.0.0.648-33.el7_4 |
| Red Hat:enterprise_linux:7::computenode | ruby-libs | 0 | 0:2.0.0.648-33.el7_4 |
| Red Hat:enterprise_linux:7::computenode | ruby-tcltk | 0 | 0:2.0.0.648-33.el7_4 |
| Red Hat:enterprise_linux:7::computenode | rubygem-bigdecimal | 0 | 0:1.2.0-33.el7_4 |
| Red Hat:enterprise_linux:7::computenode | rubygem-io-console | 0 | 0:0.4.2-33.el7_4 |
| Red Hat:enterprise_linux:7::computenode | rubygem-json | 0 | 0:1.7.7-33.el7_4 |
| Red Hat:enterprise_linux:7::computenode | rubygem-minitest | 0 | 0:4.3.2-33.el7_4 |
| Red Hat:enterprise_linux:7::computenode | rubygem-psych | 0 | 0:2.0.0-33.el7_4 |
| Red Hat:enterprise_linux:7::computenode | rubygem-rake | 0 | 0:0.9.6-33.el7_4 |
| Red Hat:enterprise_linux:7::computenode | rubygem-rdoc | 0 | 0:4.0.0-33.el7_4 |
| Red Hat:enterprise_linux:7::computenode | rubygems | 0 | 0:2.0.14.1-33.el7_4 |
| Red Hat:enterprise_linux:7::computenode | rubygems-devel | 0 | 0:2.0.14.1-33.el7_4 |
| Red Hat:enterprise_linux:7::server | ruby | 0 | 0:2.0.0.648-33.el7_4 |
| Red Hat:enterprise_linux:7::server | ruby-debuginfo | 0 | 0:2.0.0.648-33.el7_4 |
| Red Hat:enterprise_linux:7::server | ruby-devel | 0 | 0:2.0.0.648-33.el7_4 |
| Red Hat:enterprise_linux:7::server | ruby-doc | 0 | 0:2.0.0.648-33.el7_4 |
| Red Hat:enterprise_linux:7::server | ruby-irb | 0 | 0:2.0.0.648-33.el7_4 |
| Red Hat:enterprise_linux:7::server | ruby-libs | 0 | 0:2.0.0.648-33.el7_4 |
| Red Hat:enterprise_linux:7::server | ruby-tcltk | 0 | 0:2.0.0.648-33.el7_4 |
| Red Hat:enterprise_linux:7::server | rubygem-bigdecimal | 0 | 0:1.2.0-33.el7_4 |
| Red Hat:enterprise_linux:7::server | rubygem-io-console | 0 | 0:0.4.2-33.el7_4 |
| Red Hat:enterprise_linux:7::server | rubygem-json | 0 | 0:1.7.7-33.el7_4 |
| Red Hat:enterprise_linux:7::server | rubygem-minitest | 0 | 0:4.3.2-33.el7_4 |
| Red Hat:enterprise_linux:7::server | rubygem-psych | 0 | 0:2.0.0-33.el7_4 |
| Red Hat:enterprise_linux:7::server | rubygem-rake | 0 | 0:0.9.6-33.el7_4 |
| Red Hat:enterprise_linux:7::server | rubygem-rdoc | 0 | 0:4.0.0-33.el7_4 |
| Red Hat:enterprise_linux:7::server | rubygems | 0 | 0:2.0.14.1-33.el7_4 |
| Red Hat:enterprise_linux:7::server | rubygems-devel | 0 | 0:2.0.14.1-33.el7_4 |
| Red Hat:enterprise_linux:7::workstation | ruby | 0 | 0:2.0.0.648-33.el7_4 |
| Red Hat:enterprise_linux:7::workstation | ruby-debuginfo | 0 | 0:2.0.0.648-33.el7_4 |
| Red Hat:enterprise_linux:7::workstation | ruby-devel | 0 | 0:2.0.0.648-33.el7_4 |
| Red Hat:enterprise_linux:7::workstation | ruby-doc | 0 | 0:2.0.0.648-33.el7_4 |
| Red Hat:enterprise_linux:7::workstation | ruby-irb | 0 | 0:2.0.0.648-33.el7_4 |
| Red Hat:enterprise_linux:7::workstation | ruby-libs | 0 | 0:2.0.0.648-33.el7_4 |
| Red Hat:enterprise_linux:7::workstation | ruby-tcltk | 0 | 0:2.0.0.648-33.el7_4 |
| Red Hat:enterprise_linux:7::workstation | rubygem-bigdecimal | 0 | 0:1.2.0-33.el7_4 |
| Red Hat:enterprise_linux:7::workstation | rubygem-io-console | 0 | 0:0.4.2-33.el7_4 |
| Red Hat:enterprise_linux:7::workstation | rubygem-json | 0 | 0:1.7.7-33.el7_4 |
| Red Hat:enterprise_linux:7::workstation | rubygem-minitest | 0 | 0:4.3.2-33.el7_4 |
| Red Hat:enterprise_linux:7::workstation | rubygem-psych | 0 | 0:2.0.0-33.el7_4 |
| Red Hat:enterprise_linux:7::workstation | rubygem-rake | 0 | 0:0.9.6-33.el7_4 |
| Red Hat:enterprise_linux:7::workstation | rubygem-rdoc | 0 | 0:4.0.0-33.el7_4 |
| Red Hat:enterprise_linux:7::workstation | rubygems | 0 | 0:2.0.14.1-33.el7_4 |
| Red Hat:enterprise_linux:7::workstation | rubygems-devel | 0 | 0:2.0.14.1-33.el7_4 |
| Red Hat:rhel_software_collections:3::el6 | rh-ruby22-ruby | 0 | 0:2.2.9-19.el6 |
| Red Hat:rhel_software_collections:3::el6 | rh-ruby22-ruby-debuginfo | 0 | 0:2.2.9-19.el6 |
| Red Hat:rhel_software_collections:3::el6 | rh-ruby22-ruby-devel | 0 | 0:2.2.9-19.el6 |
| Red Hat:rhel_software_collections:3::el6 | rh-ruby22-ruby-doc | 0 | 0:2.2.9-19.el6 |
| Red Hat:rhel_software_collections:3::el6 | rh-ruby22-ruby-irb | 0 | 0:2.2.9-19.el6 |
| Red Hat:rhel_software_collections:3::el6 | rh-ruby22-ruby-libs | 0 | 0:2.2.9-19.el6 |
| Red Hat:rhel_software_collections:3::el6 | rh-ruby22-ruby-tcltk | 0 | 0:2.2.9-19.el6 |
| Red Hat:rhel_software_collections:3::el6 | rh-ruby22-rubygem-bigdecimal | 0 | 0:1.2.6-19.el6 |
| Red Hat:rhel_software_collections:3::el6 | rh-ruby22-rubygem-io-console | 0 | 0:0.4.3-19.el6 |
| Red Hat:rhel_software_collections:3::el6 | rh-ruby22-rubygem-json | 0 | 0:1.8.1.1-19.el6 |
| Red Hat:rhel_software_collections:3::el6 | rh-ruby22-rubygem-minitest | 0 | 0:5.4.3-19.el6 |
| Red Hat:rhel_software_collections:3::el6 | rh-ruby22-rubygem-power_assert | 0 | 0:0.2.2-19.el6 |
| Red Hat:rhel_software_collections:3::el6 | rh-ruby22-rubygem-psych | 0 | 0:2.0.8.1-19.el6 |
| Red Hat:rhel_software_collections:3::el6 | rh-ruby22-rubygem-rake | 0 | 0:10.4.2-19.el6 |
| Red Hat:rhel_software_collections:3::el6 | rh-ruby22-rubygem-rdoc | 0 | 0:4.2.0-19.el6 |
| Red Hat:rhel_software_collections:3::el6 | rh-ruby22-rubygem-test-unit | 0 | 0:3.0.8-19.el6 |
| Red Hat:rhel_software_collections:3::el6 | rh-ruby22-rubygems | 0 | 0:2.4.5.4-19.el6 |
| Red Hat:rhel_software_collections:3::el6 | rh-ruby22-rubygems-devel | 0 | 0:2.4.5.4-19.el6 |
| Red Hat:rhel_software_collections:3::el6 | rh-ruby23-ruby | 0 | 0:2.3.6-67.el6 |
| Red Hat:rhel_software_collections:3::el6 | rh-ruby23-ruby-debuginfo | 0 | 0:2.3.6-67.el6 |
| Red Hat:rhel_software_collections:3::el6 | rh-ruby23-ruby-devel | 0 | 0:2.3.6-67.el6 |
| Red Hat:rhel_software_collections:3::el6 | rh-ruby23-ruby-doc | 0 | 0:2.3.6-67.el6 |
| Red Hat:rhel_software_collections:3::el6 | rh-ruby23-ruby-irb | 0 | 0:2.3.6-67.el6 |
| Red Hat:rhel_software_collections:3::el6 | rh-ruby23-ruby-libs | 0 | 0:2.3.6-67.el6 |
| Red Hat:rhel_software_collections:3::el6 | rh-ruby23-ruby-tcltk | 0 | 0:2.3.6-67.el6 |
| Red Hat:rhel_software_collections:3::el6 | rh-ruby23-rubygem-bigdecimal | 0 | 0:1.2.8-67.el6 |
| Red Hat:rhel_software_collections:3::el6 | rh-ruby23-rubygem-did_you_mean | 0 | 0:1.0.0-67.el6 |
| Red Hat:rhel_software_collections:3::el6 | rh-ruby23-rubygem-io-console | 0 | 0:0.4.5-67.el6 |
| Red Hat:rhel_software_collections:3::el6 | rh-ruby23-rubygem-json | 0 | 0:1.8.3.1-67.el6 |
| Red Hat:rhel_software_collections:3::el6 | rh-ruby23-rubygem-minitest | 0 | 0:5.8.5-67.el6 |
| Red Hat:rhel_software_collections:3::el6 | rh-ruby23-rubygem-net-telnet | 0 | 0:0.1.1-67.el6 |
| Red Hat:rhel_software_collections:3::el6 | rh-ruby23-rubygem-power_assert | 0 | 0:0.2.6-67.el6 |
| Red Hat:rhel_software_collections:3::el6 | rh-ruby23-rubygem-psych | 0 | 0:2.1.0.1-67.el6 |
| Red Hat:rhel_software_collections:3::el6 | rh-ruby23-rubygem-rake | 0 | 0:10.4.2-67.el6 |
| Red Hat:rhel_software_collections:3::el6 | rh-ruby23-rubygem-rdoc | 0 | 0:4.2.1-67.el6 |
| Red Hat:rhel_software_collections:3::el6 | rh-ruby23-rubygem-test-unit | 0 | 0:3.1.5-67.el6 |
| Red Hat:rhel_software_collections:3::el6 | rh-ruby23-rubygems | 0 | 0:2.5.2.2-67.el6 |
| Red Hat:rhel_software_collections:3::el6 | rh-ruby23-rubygems-devel | 0 | 0:2.5.2.2-67.el6 |
| Red Hat:rhel_software_collections:3::el6 | rh-ruby24-ruby | 0 | 0:2.4.2-86.el6 |
| Red Hat:rhel_software_collections:3::el6 | rh-ruby24-ruby-debuginfo | 0 | 0:2.4.2-86.el6 |
| Red Hat:rhel_software_collections:3::el6 | rh-ruby24-ruby-devel | 0 | 0:2.4.2-86.el6 |
| Red Hat:rhel_software_collections:3::el6 | rh-ruby24-ruby-doc | 0 | 0:2.4.2-86.el6 |
| Red Hat:rhel_software_collections:3::el6 | rh-ruby24-ruby-irb | 0 | 0:2.4.2-86.el6 |
| Red Hat:rhel_software_collections:3::el6 | rh-ruby24-ruby-libs | 0 | 0:2.4.2-86.el6 |
| Red Hat:rhel_software_collections:3::el6 | rh-ruby24-rubygem-bigdecimal | 0 | 0:1.3.0-86.el6 |
| Red Hat:rhel_software_collections:3::el6 | rh-ruby24-rubygem-did_you_mean | 0 | 0:1.1.0-86.el6 |
| Red Hat:rhel_software_collections:3::el6 | rh-ruby24-rubygem-io-console | 0 | 0:0.4.6-86.el6 |
| Red Hat:rhel_software_collections:3::el6 | rh-ruby24-rubygem-json | 0 | 0:2.0.4-86.el6 |
| Red Hat:rhel_software_collections:3::el6 | rh-ruby24-rubygem-minitest | 0 | 0:5.10.1-86.el6 |
| Red Hat:rhel_software_collections:3::el6 | rh-ruby24-rubygem-net-telnet | 0 | 0:0.1.1-86.el6 |
| Red Hat:rhel_software_collections:3::el6 | rh-ruby24-rubygem-openssl | 0 | 0:2.0.5-86.el6 |
| Red Hat:rhel_software_collections:3::el6 | rh-ruby24-rubygem-power_assert | 0 | 0:0.4.1-86.el6 |
| Red Hat:rhel_software_collections:3::el6 | rh-ruby24-rubygem-psych | 0 | 0:2.2.2-86.el6 |
| Red Hat:rhel_software_collections:3::el6 | rh-ruby24-rubygem-rake | 0 | 0:12.0.0-86.el6 |
| Red Hat:rhel_software_collections:3::el6 | rh-ruby24-rubygem-rdoc | 0 | 0:5.0.0-86.el6 |
| Red Hat:rhel_software_collections:3::el6 | rh-ruby24-rubygem-test-unit | 0 | 0:3.2.3-86.el6 |
| Red Hat:rhel_software_collections:3::el6 | rh-ruby24-rubygem-xmlrpc | 0 | 0:0.2.1-86.el6 |
| Red Hat:rhel_software_collections:3::el6 | rh-ruby24-rubygems | 0 | 0:2.6.14-86.el6 |
| Red Hat:rhel_software_collections:3::el6 | rh-ruby24-rubygems-devel | 0 | 0:2.6.14-86.el6 |
| Red Hat:rhel_software_collections:3::el7 | rh-ruby22-ruby | 0 | 0:2.2.9-19.el7 |
| Red Hat:rhel_software_collections:3::el7 | rh-ruby22-ruby-debuginfo | 0 | 0:2.2.9-19.el7 |
| Red Hat:rhel_software_collections:3::el7 | rh-ruby22-ruby-devel | 0 | 0:2.2.9-19.el7 |
| Red Hat:rhel_software_collections:3::el7 | rh-ruby22-ruby-doc | 0 | 0:2.2.9-19.el7 |
| Red Hat:rhel_software_collections:3::el7 | rh-ruby22-ruby-irb | 0 | 0:2.2.9-19.el7 |
| Red Hat:rhel_software_collections:3::el7 | rh-ruby22-ruby-libs | 0 | 0:2.2.9-19.el7 |
| Red Hat:rhel_software_collections:3::el7 | rh-ruby22-ruby-tcltk | 0 | 0:2.2.9-19.el7 |
| Red Hat:rhel_software_collections:3::el7 | rh-ruby22-rubygem-bigdecimal | 0 | 0:1.2.6-19.el7 |
| Red Hat:rhel_software_collections:3::el7 | rh-ruby22-rubygem-io-console | 0 | 0:0.4.3-19.el7 |
| Red Hat:rhel_software_collections:3::el7 | rh-ruby22-rubygem-json | 0 | 0:1.8.1.1-19.el7 |
| Red Hat:rhel_software_collections:3::el7 | rh-ruby22-rubygem-minitest | 0 | 0:5.4.3-19.el7 |
| Red Hat:rhel_software_collections:3::el7 | rh-ruby22-rubygem-power_assert | 0 | 0:0.2.2-19.el7 |
| Red Hat:rhel_software_collections:3::el7 | rh-ruby22-rubygem-psych | 0 | 0:2.0.8.1-19.el7 |
| Red Hat:rhel_software_collections:3::el7 | rh-ruby22-rubygem-rake | 0 | 0:10.4.2-19.el7 |
| Red Hat:rhel_software_collections:3::el7 | rh-ruby22-rubygem-rdoc | 0 | 0:4.2.0-19.el7 |
| Red Hat:rhel_software_collections:3::el7 | rh-ruby22-rubygem-test-unit | 0 | 0:3.0.8-19.el7 |
| Red Hat:rhel_software_collections:3::el7 | rh-ruby22-rubygems | 0 | 0:2.4.5.4-19.el7 |
| Red Hat:rhel_software_collections:3::el7 | rh-ruby22-rubygems-devel | 0 | 0:2.4.5.4-19.el7 |
| Red Hat:rhel_software_collections:3::el7 | rh-ruby23-ruby | 0 | 0:2.3.6-67.el7 |
| Red Hat:rhel_software_collections:3::el7 | rh-ruby23-ruby-debuginfo | 0 | 0:2.3.6-67.el7 |
| Red Hat:rhel_software_collections:3::el7 | rh-ruby23-ruby-devel | 0 | 0:2.3.6-67.el7 |
| Red Hat:rhel_software_collections:3::el7 | rh-ruby23-ruby-doc | 0 | 0:2.3.6-67.el7 |
| Red Hat:rhel_software_collections:3::el7 | rh-ruby23-ruby-irb | 0 | 0:2.3.6-67.el7 |
| Red Hat:rhel_software_collections:3::el7 | rh-ruby23-ruby-libs | 0 | 0:2.3.6-67.el7 |
| Red Hat:rhel_software_collections:3::el7 | rh-ruby23-ruby-tcltk | 0 | 0:2.3.6-67.el7 |
| Red Hat:rhel_software_collections:3::el7 | rh-ruby23-rubygem-bigdecimal | 0 | 0:1.2.8-67.el7 |
| Red Hat:rhel_software_collections:3::el7 | rh-ruby23-rubygem-did_you_mean | 0 | 0:1.0.0-67.el7 |
| Red Hat:rhel_software_collections:3::el7 | rh-ruby23-rubygem-io-console | 0 | 0:0.4.5-67.el7 |
| Red Hat:rhel_software_collections:3::el7 | rh-ruby23-rubygem-json | 0 | 0:1.8.3.1-67.el7 |
| Red Hat:rhel_software_collections:3::el7 | rh-ruby23-rubygem-minitest | 0 | 0:5.8.5-67.el7 |
| Red Hat:rhel_software_collections:3::el7 | rh-ruby23-rubygem-net-telnet | 0 | 0:0.1.1-67.el7 |
| Red Hat:rhel_software_collections:3::el7 | rh-ruby23-rubygem-power_assert | 0 | 0:0.2.6-67.el7 |
| Red Hat:rhel_software_collections:3::el7 | rh-ruby23-rubygem-psych | 0 | 0:2.1.0.1-67.el7 |
| Red Hat:rhel_software_collections:3::el7 | rh-ruby23-rubygem-rake | 0 | 0:10.4.2-67.el7 |
| Red Hat:rhel_software_collections:3::el7 | rh-ruby23-rubygem-rdoc | 0 | 0:4.2.1-67.el7 |
| Red Hat:rhel_software_collections:3::el7 | rh-ruby23-rubygem-test-unit | 0 | 0:3.1.5-67.el7 |
| Red Hat:rhel_software_collections:3::el7 | rh-ruby23-rubygems | 0 | 0:2.5.2.2-67.el7 |
| Red Hat:rhel_software_collections:3::el7 | rh-ruby23-rubygems-devel | 0 | 0:2.5.2.2-67.el7 |
| Red Hat:rhel_software_collections:3::el7 | rh-ruby24-ruby | 0 | 0:2.4.2-86.el7 |
| Red Hat:rhel_software_collections:3::el7 | rh-ruby24-ruby-debuginfo | 0 | 0:2.4.2-86.el7 |
| Red Hat:rhel_software_collections:3::el7 | rh-ruby24-ruby-devel | 0 | 0:2.4.2-86.el7 |
| Red Hat:rhel_software_collections:3::el7 | rh-ruby24-ruby-doc | 0 | 0:2.4.2-86.el7 |
| Red Hat:rhel_software_collections:3::el7 | rh-ruby24-ruby-irb | 0 | 0:2.4.2-86.el7 |
| Red Hat:rhel_software_collections:3::el7 | rh-ruby24-ruby-libs | 0 | 0:2.4.2-86.el7 |
| Red Hat:rhel_software_collections:3::el7 | rh-ruby24-rubygem-bigdecimal | 0 | 0:1.3.0-86.el7 |
| Red Hat:rhel_software_collections:3::el7 | rh-ruby24-rubygem-did_you_mean | 0 | 0:1.1.0-86.el7 |
| Red Hat:rhel_software_collections:3::el7 | rh-ruby24-rubygem-io-console | 0 | 0:0.4.6-86.el7 |
| Red Hat:rhel_software_collections:3::el7 | rh-ruby24-rubygem-json | 0 | 0:2.0.4-86.el7 |
Related vulnerabilities
- CVE-2017-0903 RubyGems versions between 2.0.0 and 2.6.13 are vulnerable to a possible remote code… Also affects rubygems-update
- CVE-2017-0901 RubyGems version 2.6.12 and earlier fails to validate specification names, allowing a… Also affects rubygems-update
- CVE-2017-17405 Ruby before 2.4.3 allows Net::FTP command injection. Also affects ruby
- CVE-2017-10784 The Basic authentication code in WEBrick library in Ruby before 2.2.8, 2.3.x before… Also affects ruby
- CVE-2017-0898 Ruby before 2.4.2, 2.3.5, and 2.2.8 is vulnerable to a malicious format string which… Also affects ruby
- CVE-2025-27221 In the URI gem before 1.0.3 for Ruby, the URI handling methods (URI.join, URI#merge… Also affects rubygems
- CVE-2014-8090 The REXML parser in Ruby 1.9.x before 1.9.3 patchlevel 551, 2.0.x before 2.0.0 patchlevel… Also affects ruby1.9.1
- CVE-2014-4975 Off-by-one error in the encodes function in pack.c in Ruby 1.9.3 and earlier, and 2.x… Also affects ruby1.9.1