Lucene search
GoogleOSV:USN-5235-1HistoryJan 18, 2022 - 5:13 p.m.
ruby2.3, ruby2.5, ruby2.7 vulnerabilities
2022-01-1817:13:18
Google
osv.dev
4
It was discovered that Ruby incorrectly handled certain HTML files.
An attacker could possibly use this issue to cause a crash. This
issue only affected Ubuntu 20.04 LTS, Ubuntu 21.04, and Ubuntu 21.10.
(CVE-2021-41816)
It was discovered that Ruby incorrectly handled certain regular expressions.
An attacker could possibly use this issue to cause a regular expression
denial of service. (CVE-2021-41817)
It was discovered that Ruby incorrectly handled certain cookie names.
An attacker could possibly use this issue to access or expose
sensitive information. (CVE-2021-41819)
Related
openvas
openvas
Ubuntu: Security Advisory (USN-5235-1)
2022-01-19 00:00:00
Debian: Security Advisory (DSA-5067-1)
2022-02-05 00:00:00
Debian: Security Advisory (DLA-2853-1)
2021-12-29 00:00:00
nessus
nessus
Ubuntu 16.04 ESM / 18.04 LTS / 20.04 LTS : Ruby vulnerabilities (USN-5235-1)
2022-01-18 00:00:00
Amazon Linux 2 : ruby (ALASRUBY3.0-2023-003)
2023-09-27 00:00:00
Debian DSA-5067-1 : ruby2.7 - security update
2022-02-04 00:00:00
cloudfoundry
cloudfoundry
USN-5235-1: Ruby vulnerabilities | Cloud Foundry
2022-03-09 00:00:00
osv
osv
ruby2.7 - security update
2022-02-03 00:00:00
ruby2.3 - security update
2021-12-27 00:00:00
Moderate: ruby:2.5 security update
2022-08-01 00:00:00
ubuntu
ubuntu
Ruby vulnerabilities
2022-01-18 00:00:00
debian
debian
[SECURITY] [DSA 5067-1] ruby2.7 security update
2022-02-03 19:30:34
[SECURITY] [DLA 2853-1] ruby2.3 security update
2021-12-28 10:36:26
[SECURITY] [DSA 5066-1] ruby2.5 security update
2022-02-03 19:26:40
redhat
redhat
(RHSA-2022:6856) Moderate: rh-ruby27-ruby security, bug fix, and enhancement update
2022-10-11 07:10:36
(RHSA-2022:5779) Moderate: ruby:2.5 security update
2022-08-01 09:05:09
oraclelinux
oraclelinux
ruby:2.5 security update
2022-08-03 00:00:00
ruby:2.7 security, bug fix, and enhancement update
2022-09-15 00:00:00
ruby:3.0 security, bug fix, and enhancement update
2022-09-15 00:00:00
rocky
rocky
ruby:2.5 security update
2022-08-01 09:05:09
ruby:2.7 security, bug fix, and enhancement update
2022-09-13 07:36:49
ruby:3.0 security, bug fix, and enhancement update
2022-09-13 07:36:53
fedora
fedora
[SECURITY] Fedora 34 Update: ruby-3.0.4-153.fc34
2022-05-08 02:03:44
[SECURITY] Fedora 35 Update: ruby-3.0.4-153.fc35
2022-05-08 01:48:39
almalinux
almalinux
Moderate: ruby:2.5 security update
2022-08-01 00:00:00
Moderate: ruby:2.7 security, bug fix, and enhancement update
2022-09-13 00:00:00
Moderate: ruby:3.0 security, bug fix, and enhancement update
2022-09-13 00:00:00
mageia
mageia
Updated ruby packages fix security vulnerability
2021-12-24 00:01:45
freebsd
freebsd
rubygem-cgi -- buffer overrun in CGI.escape_html
2021-11-24 00:00:00
rubygem-date -- Regular Expression Denial of Service Vunlerability of Date Parsing Methods
2021-11-15 00:00:00
rubygem-cgi -- cookie prefix spoofing in CGI::Cookie.parse
2021-11-24 00:00:00
nvd
nvd
prion
prion
Integer overflow
2022-02-06 21:15:00
Design/Logic Flaw
2022-01-01 05:15:00
Code injection
2022-01-01 06:15:00
redhatcve
redhatcve
cnvd
cnvd
Ruby Buffer Overflow Vulnerability (CNVD-2022-18048)
2021-11-29 00:00:00
Ruby has unspecified vulnerabilities (CNVD-2022-06510)
2021-11-29 00:00:00
alpinelinux
alpinelinux
cvelist
cvelist
veracode
veracode
Denial Of Service (DoS)
2021-11-25 17:08:05
Regular Expression Denial Of Service (ReDoS)
2021-11-17 06:57:56
Denial Of Service (DoS)
2021-11-25 17:08:14
debiancve
debiancve
ubuntucve
ubuntucve
hackerone
hackerone
cve
cve
github
github
Buffer overrun in CGI.escape_html
2021-12-14 21:36:20
Regular expression denial of service vulnerability (ReDoS) in date
2021-11-16 00:32:30
Cookie Prefix Spoofing in CGI::Cookie.parse
2022-01-21 23:22:17
amazon
amazon
Medium: ruby
2023-11-09 19:19:00
Important: ruby
2024-02-29 10:03:00
f5
f5
K30272432 : RubyGems vulnerability CVE-2021-41817
2022-06-01 00:00:00
suse
suse
Security update for ruby2.5 (moderate)
2022-09-16 00:00:00
Security update for ruby2.5 (important)
2022-05-03 00:00:00
photon
photon
Important Photon OS Security Update - PHSA-2024-4.0-0562
2024-02-08 00:00:00
Important Photon OS Security Update - PHSA-2024-3.0-0732
2024-02-29 00:00:00
Critical Photon OS Security Update - PHSA-2024-4.0-0592
2024-04-17 00:00:00
cbl_mariner
cbl_mariner
CVE-2021-41817 affecting package ruby for versions less than 3.1.2-2
2022-04-26 20:17:12
CVE-2021-41819 affecting package ruby for versions less than 3.1.2-2
2022-04-26 20:17:12
gentoo
gentoo
Ruby: Multiple vulnerabilities
2024-01-24 00:00:00
ibm
ibm