Lucene search
GoogleOSV:CVE-2019-3881HistorySep 04, 2020 - 12:15 p.m.
CVE-2019-3881
2020-09-0412:15:10
Google
osv.dev
6
Bundler prior to 2.1.0 uses a predictable path in /tmp/, created with insecure permissions as a storage location for gems, if locations under the user’s home directory are not available. If Bundler is used in a scenario where the user does not have a writable home directory, an attacker could place malicious code in this directory that would be later loaded and executed.
Related
nessus
nessus
SUSE SLED15 / SLES15 Security Update : rubygem-bundler (SUSE-SU-2020:1582-1)
2020-06-18 00:00:00
RHEL 8 : rubygem-bundler (Unpatched Vulnerability)
2024-05-11 00:00:00
openSUSE Security Update : rubygem-bundler (openSUSE-2020-803)
2020-07-20 00:00:00
osv
osv
Insecure path handling in Bundler
2021-05-10 14:53:59
bundler vulnerability
2021-03-15 22:59:20
Moderate: ruby:2.6 security, bug fix, and enhancement update
2021-06-29 13:58:40
redhatcve
redhatcve
CVE-2019-3881
2019-10-30 09:46:40
openvas
openvas
SUSE: Security Advisory (SUSE-SU-2020:1582-1)
2021-06-09 00:00:00
openSUSE: Security Advisory for rubygem-bundler (openSUSE-SU-2020:0861-1)
2020-06-25 00:00:00
Ubuntu: Security Advisory (USN-4870-1)
2023-01-27 00:00:00
ubuntucve
ubuntucve
CVE-2019-3881
2020-09-04 00:00:00
prion
prion
Code injection
2020-09-04 12:15:00
suse
suse
Security update for rubygem-bundler (moderate)
2020-06-13 00:00:00
Security update for rubygem-bundler (moderate)
2020-06-25 00:00:00
cvelist
cvelist
CVE-2019-3881
2020-09-04 00:00:00
cve
cve
CVE-2019-3881
2020-09-04 12:15:10
github
github
Insecure path handling in Bundler
2021-05-10 14:53:59
nvd
nvd
CVE-2019-3881
2020-09-04 12:15:10
debiancve
debiancve
CVE-2019-3881
2020-09-04 12:15:10
veracode
veracode
Remote Code Execution (RCE)
2019-07-31 09:46:13
alpinelinux
alpinelinux
CVE-2019-3881
2020-09-04 12:15:00
ubuntu
ubuntu
Bundler vulnerability
2021-03-15 00:00:00
freebsd
freebsd
Gitlab -- multiple vulnerabilities
2021-01-07 00:00:00
photon
photon
Critical Photon OS Security Update - PHSA-2021-0060
2021-07-13 00:00:00
Critical Photon OS Security Update - PHSA-2021-4.0-0060
2021-07-13 00:00:00
oraclelinux
oraclelinux
ruby:2.6 security, bug fix, and enhancement update
2021-07-07 00:00:00
redhat
redhat
rocky
rocky
ruby:2.6 security, bug fix, and enhancement update
2021-06-29 13:58:40
almalinux
almalinux
Moderate: ruby:2.6 security, bug fix, and enhancement update
2021-06-29 13:58:40
ibm
ibm
rosalinux
rosalinux
Advisory ROSA-SA-2021-1966
2021-07-02 18:06:34