Lucene search
GoogleOSV:GHSA-FR32-GR5C-XQ5CHistoryJun 20, 2019 - 4:06 p.m.
RubyGems Escape sequence injection vulnerability in verbose
2019-06-2016:06:04
Google
osv.dev
14
0.002 Low
EPSS
Percentile
58.4%
An issue was discovered in RubyGems 2.6 and later through 3.0.2. Since Gem::UserInteraction#verbose calls say without escaping, escape sequence injection is possible.
References
lists.opensuse.org/opensuse-security-announce/2019-07/msg00036.html
blog.rubygems.org/2019/03/05/security-advisories-2019-03.html
github.com/rubysec/ruby-advisory-db/blob/master/gems/rubygems-update/CVE-2019-8321.yml
lists.debian.org/debian-lts-announce/2020/08/msg00027.html
nvd.nist.gov/vuln/detail/CVE-2019-8321
Related
openvas
openvas
Huawei EulerOS: Security Advisory for ruby (EulerOS-SA-2019-1932)
2020-01-23 00:00:00
Huawei EulerOS: Security Advisory for ruby (EulerOS-SA-2019-1895)
2020-01-23 00:00:00
Fedora Update for ruby FEDORA-2019-feac6674b7
2019-05-10 00:00:00
alpinelinux
alpinelinux
CVE-2019-8321
2019-06-17 20:15:10
nvd
nvd
CVE-2019-8321
2019-06-17 20:15:10
cve
cve
CVE-2019-8321
2019-06-17 20:15:10
veracode
veracode
Escape Sequence Injection
2019-05-16 04:01:21
osv
osv
CVE-2019-8321
2019-06-17 20:15:10
ruby:2.5 bug fix and enhancement update
2019-11-05 17:38:32
ruby2.3 - security update
2019-04-16 00:00:00
github
github
RubyGems Escape sequence injection vulnerability in verbose
2019-06-20 16:06:04
nessus
nessus
EulerOS Virtualization for ARM 64 3.0.2.0 : ruby (EulerOS-SA-2019-1932)
2019-09-17 00:00:00
EulerOS 2.0 SP5 : ruby (EulerOS-SA-2019-1895)
2019-09-16 00:00:00
Amazon Linux AMI : ruby20 / ruby21, ruby24 (ALAS-2019-1255)
2019-08-13 00:00:00
ubuntucve
ubuntucve
CVE-2019-8321
2019-03-27 00:00:00
prion
prion
Design/Logic Flaw
2019-06-17 20:15:00
debiancve
debiancve
CVE-2019-8321
2019-06-17 20:15:10
redhatcve
redhatcve
CVE-2019-8321
2020-04-01 20:04:09
cvelist
cvelist
CVE-2019-8321
2019-06-17 19:02:34
centos
centos
ruby, rubygem, rubygems security update
2019-05-21 21:25:00
redhat
redhat
(RHSA-2019:1235) Important: ruby security update
2019-05-15 17:11:12
fedora
fedora
[SECURITY] Fedora 28 Update: ruby-2.5.5-108.fc28
2019-05-10 01:35:27
[SECURITY] Fedora 29 Update: ruby-2.5.5-101.fc29
2019-05-03 03:43:05
cloudfoundry
cloudfoundry
USN-3945-1: Ruby vulnerabilities | Cloud Foundry
2019-04-12 00:00:00
rocky
rocky
2.5 bug fix and enhancement update
2019-11-05 17:38:32
oraclelinux
oraclelinux
ruby security update
2019-05-16 00:00:00
ruby security update
2019-08-13 00:00:00
amazon
amazon
Important: ruby20, ruby21, ruby24
2019-08-07 22:58:00
freebsd
freebsd
RubyGems -- multiple vulnerabilities
2019-03-05 00:00:00
ubuntu
ubuntu
Ruby vulnerabilities
2019-04-11 00:00:00
debian
debian
[SECURITY] [DSA 4433-1] ruby2.3 security update
2019-04-16 20:57:32
[SECURITY] [DLA 1796-1] jruby security update
2019-05-20 11:06:55
[SECURITY] [DLA 2330-1] jruby security update
2020-08-16 13:13:11
mageia
mageia
Updated jruby packages fix security vulnerabilities
2020-11-27 23:14:57
Updated ruby-RubyGems packages fix security vulnerability
2020-06-11 00:39:20
ibm
ibm
Security Bulletin: Vyatta 5600 vRouter Software Patches - Release 1801-z
2019-07-15 22:35:01
suse
suse
Security update for ruby-bundled-gems-rpmhelper, ruby2.5 (important)
2019-07-21 00:00:00