Lucene search
GoogleOSV:USN-4882-1HistoryMar 18, 2021 - 5:00 p.m.
ruby2.3, ruby2.5, ruby2.7 vulnerabilities
2021-03-1817:00:33
Google
osv.dev
5
It was discovered that the Ruby JSON gem incorrectly handled certain JSON
files. If a user or automated system were tricked into parsing a specially
crafted JSON file, a remote attacker could use this issue to execute
arbitrary code. This issue only affected Ubuntu 16.04 LTS and Ubuntu 18.04
LTS. (CVE-2020-10663)
It was discovered that Ruby incorrectly handled certain socket memory
operations. A remote attacker could possibly use this issue to obtain
sensitive information. This issue only affected Ubuntu 18.04 LTS and
Ubuntu 20.04 LTS. (CVE-2020-10933)
It was discovered that Ruby incorrectly handled certain transfer-encoding
headers when using Webrick. A remote attacker could possibly use this issue
to bypass a reverse proxy. (CVE-2020-25613)
Related
ubuntu
ubuntu
Ruby vulnerabilities
2021-03-18 00:00:00
cloudfoundry
cloudfoundry
USN-4882-1: Ruby vulnerabilities | Cloud Foundry
2021-04-14 00:00:00
openvas
openvas
Ubuntu: Security Advisory (USN-4882-1)
2021-03-19 00:00:00
openSUSE: Security Advisory for ruby2.5 (openSUSE-SU-2020:0586-1)
2020-05-02 00:00:00
SUSE: Security Advisory (SUSE-SU-2020:0995-1)
2021-06-09 00:00:00
nessus
nessus
Ubuntu 16.04 LTS / 18.04 LTS / 20.04 LTS : Ruby vulnerabilities (USN-4882-1)
2021-03-23 00:00:00
Photon OS 1.0: Ruby PHSA-2020-1.0-0294
2020-05-18 00:00:00
SUSE SLED15 / SLES15 Security Update : ruby2.5 (SUSE-SU-2020:0995-1)
2020-04-16 00:00:00
fedora
fedora
[SECURITY] Fedora 31 Update: ruby-2.6.6-125.fc31
2020-05-22 03:19:32
[SECURITY] Fedora 33 Update: ruby-2.7.2-135.fc33
2020-10-23 22:25:31
[SECURITY] Fedora 31 Update: rubygem-json-2.2.0-202.fc31
2020-05-03 04:55:27
osv
osv
ruby2.5 - security update
2020-07-08 00:00:00
Moderate: ruby:2.5 security, bug fix, and enhancement update
2021-06-29 13:58:20
Moderate: ruby:2.5 security, bug fix, and enhancement update
2021-06-29 13:58:20
debian
debian
[SECURITY] [DSA 4721-1] ruby2.5 security update
2020-07-08 15:31:57
[SECURITY] [DSA 4721-1] ruby2.5 security update
2020-07-08 15:31:57
[SECURITY] [DLA 2392-1] jruby security update
2020-10-01 15:52:45
suse
suse
Security update for ruby2.5 (moderate)
2020-05-02 00:00:00
Security update for ruby2.5 (important)
2021-03-25 00:00:00
amazon
amazon
photon
photon
Home
Download Photon OS
User Documentation
FAQ
Security Advisories
Related Information
Lightwave - PHSA-2020-1.0-0294
2020-05-14 00:00:00
Important Photon OS Security Update - PHSA-2020-0089
2020-05-13 00:00:00
Important Photon OS Security Update - PHSA-2020-3.0-0089
2020-05-13 00:00:00
redhat
redhat
oraclelinux
oraclelinux
ruby:2.5 security, bug fix, and enhancement update
2021-07-02 00:00:00
pcs security update
2020-06-12 00:00:00
ruby:2.6 security, bug fix, and enhancement update
2021-07-07 00:00:00
almalinux
almalinux
Moderate: ruby:2.5 security, bug fix, and enhancement update
2021-06-29 13:58:20
Moderate: ruby:2.6 security, bug fix, and enhancement update
2021-06-29 13:58:40
Moderate: ruby:2.7 security, bug fix, and enhancement update
2021-06-29 13:57:50
rocky
rocky
ruby:2.5 security, bug fix, and enhancement update
2021-06-29 13:58:20
ruby:2.6 security, bug fix, and enhancement update
2021-06-29 13:58:40
pcs security and bug fix update
2021-07-22 18:18:27
cbl_mariner
cbl_mariner
CVE-2020-10933 affecting package ruby 2.6.3-3
2021-06-09 03:50:37
CVE-2020-25613 affecting package ruby 2.6.6-4
2020-11-30 19:30:48
mageia
mageia
Updated ruby packages fix security vulnerability
2020-07-07 16:47:37
Updated ruby-json packages fix security vulnerability
2020-05-05 15:20:37
Updated ruby packages fix a security vulnerability
2020-11-14 00:20:36
cvelist
cvelist
nvd
nvd
veracode
veracode
HTTP Request Smuggling
2020-09-30 00:35:20
Information Disclosure
2020-08-06 21:34:05
Denial Of Service (DoS)
2020-03-23 03:14:43
debiancve
debiancve
cve
cve
ibm
ibm
alpinelinux
alpinelinux
prion
prion
Authorization
2020-10-06 13:15:00
Heap overflow
2020-05-04 15:15:00
Design/Logic Flaw
2020-04-28 21:15:00
redhatcve
redhatcve
ubuntucve
ubuntucve
github
github
WEBRick vulnerable to HTTP Request/Response Smuggling
2022-05-24 17:30:10
Unsafe object creation in json RubyGem
2020-07-27 18:08:21
githubexploit
githubexploit
Exploit for Improper Input Validation in Json Project Json
2020-03-24 09:53:23
rubygems
rubygems
Heap exposure vulnerability in the socket library
2020-03-30 21:00:00
json Gem for Ruby Unsafe Object Creation Vulnerability (additional fix)
2020-03-18 21:00:00
freebsd
freebsd