Lucene search
MitreCVELIST:CVE-2016-7954HistoryDec 22, 2016 - 10:00 p.m.
CVE-2016-7954
2016-12-2222:00:00
mitre
www.cve.org
Bundler 1.x might allow remote attackers to inject arbitrary Ruby code into an application by leveraging a gem name collision on a secondary source. NOTE: this might overlap CVE-2013-0334.
References
collectiveidea.com/blog/archives/2016/10/06/bundlers-multiple-source-security-vulnerability/
www.openwall.com/lists/oss-security/2016/10/04/5
www.openwall.com/lists/oss-security/2016/10/04/7
www.openwall.com/lists/oss-security/2016/10/05/3
www.securityfocus.com/bid/93423
bugzilla.redhat.com/show_bug.cgi?id=1381951
github.com/bundler/bundler/issues/5051
github.com/bundler/bundler/issues/5062
Related
ubuntucve
ubuntucve
CVE-2016-7954
2016-12-22 00:00:00
CVE-2013-0334
2014-10-31 00:00:00
cve
cve
CVE-2016-7954
2016-12-22 22:59:00
CVE-2013-0334
2014-10-31 14:55:02
github
github
Bundler allows attacker to inject arbitrary code via secondary Gem source
2022-05-14 00:57:16
Bundler may install gems from a different source than expected
2022-05-05 02:48:48
debiancve
debiancve
CVE-2016-7954
2016-12-22 22:59:00
CVE-2013-0334
2014-10-31 14:55:02
osv
osv
Bundler allows attacker to inject arbitrary code via secondary Gem source
2022-05-14 00:57:16
Bundler may install gems from a different source than expected
2022-05-05 02:48:48
prion
prion
Design/Logic Flaw
2016-12-22 22:59:00
Code injection
2014-10-31 14:55:00
redhatcve
redhatcve
CVE-2016-7954
2016-10-05 12:47:20
nvd
nvd
CVE-2016-7954
2016-12-22 22:59:00
CVE-2013-0334
2014-10-31 14:55:02
nessus
nessus
RHEL 6 : rubygem-bundler (Unpatched Vulnerability)
2024-05-11 00:00:00
RHEL 6 : rubygem-bundler (Unpatched Vulnerability)
2024-06-03 00:00:00
RHEL 7 : rubygem-bundler (Unpatched Vulnerability)
2024-06-03 00:00:00
cvelist
cvelist
CVE-2013-0334
2014-10-31 14:00:00
oraclelinux
oraclelinux
rubygem-bundler and rubygem-thor security, bug fix, and enhancement update
2015-11-23 00:00:00
fedora
fedora
[SECURITY] Fedora 21 Update: rubygem-bundler-1.7.3-1.fc21
2014-10-12 05:07:35
[SECURITY] Fedora 19 Update: rubygem-bundler-1.7.3-1.fc19
2014-10-12 05:02:47
[SECURITY] Fedora 20 Update: rubygem-bundler-1.7.3-1.fc20
2014-10-12 05:07:22
redhat
redhat
gentoo
gentoo
Bundler: Insecure installation
2016-09-26 00:00:00
openvas
openvas
RedHat Update for rubygem-bundler and rubygem-thor RHSA-2015:2180-07
2015-11-20 00:00:00
Fedora Update for rubygem-bundler FEDORA-2014-11630
2014-10-13 00:00:00
Fedora Update for rubygem-bundler FEDORA-2014-11649
2014-10-13 00:00:00
centos
centos
rubygem security update
2015-11-30 19:51:23
rubygems
rubygems