Lucene search
PRIOn knowledge basePRION:CVE-2013-2065HistoryNov 02, 2013 - 7:55 p.m.
Code injection
2013-11-0219:55:00
PRIOn knowledge base
www.prio-n.com
4
(1) DL and (2) Fiddle in Ruby 1.9 before 1.9.3 patchlevel 426, and 2.0 before 2.0.0 patchlevel 195, do not perform taint checking for native functions, which allows context-dependent attackers to bypass intended $SAFE level restrictions.
| CPE | Name | Operator | Version |
|---|---|---|---|
| opensuse | eq | 12.3 | |
| opensuse | eq | 12.2 | |
| ruby | eq | 2.0.0 | |
| ruby | eq | 1.9.3 p286 | |
| ruby | eq | 1.9.3 p385 | |
| ruby | eq | 1.9.3 p383 | |
| ruby | eq | 2.0 | |
| ruby | eq | 2.0.0 preview1 | |
| ruby | eq | 1.9.2 | |
| ruby | eq | 1.9.1 |
References
lists.opensuse.org/opensuse-updates/2013-10/msg00057.html
www.ubuntu.com/usn/USN-2035-1
lists.fedoraproject.org/pipermail/package-announce/2013-May/107064.html
lists.fedoraproject.org/pipermail/package-announce/2013-May/107098.html
lists.fedoraproject.org/pipermail/package-announce/2013-May/107120.html
puppet.com/security/cve/cve-2013-2065
www.ruby-lang.org/en/news/2013/05/14/taint-bypass-dl-fiddle-cve-2013-2065/
Related
fedora
fedora
[SECURITY] Fedora 18 Update: ruby-1.9.3.429-30.fc18
2013-05-30 03:09:30
[SECURITY] Fedora 19 Update: ruby-2.0.0.195-8.fc19
2013-05-30 03:37:44
[SECURITY] Fedora 18 Update: ruby-1.9.3.448-31.fc18
2013-07-11 02:28:11
freebsd
freebsd
ruby -- Object taint bypassing in DL and Fiddle in Ruby
2013-05-14 00:00:00
openvas
openvas
Amazon Linux: Security Advisory (ALAS-2013-229)
2015-09-08 00:00:00
Fedora Update for ruby FEDORA-2013-8375
2013-05-31 00:00:00
Fedora Update for ruby FEDORA-2013-8375
2013-05-31 00:00:00
nessus
nessus
Fedora 18 : ruby-1.9.3.429-30.fc18 (2013-8375)
2013-05-30 00:00:00
Fedora 19 : ruby-2.0.0.195-8.fc19 (2013-8738)
2013-05-30 00:00:00
slackware
slackware
ruby
2013-05-16 15:44:50
nvd
nvd
CVE-2013-2065
2013-11-02 19:55:04
cve
cve
CVE-2013-2065
2013-11-02 19:55:04
cvelist
cvelist
CVE-2013-2065
2013-11-02 19:00:00
amazon
amazon
Low: ruby19
2013-09-26 22:21:00
ubuntucve
ubuntucve
CVE-2013-2065
2013-11-02 00:00:00
rubygems
rubygems
CVE-2013-2065 Ruby: Object taint bypassing in DL and Fiddle
2013-05-13 20:00:00
securityvulns
securityvulns
[USN-2035-1] Ruby vulnerabilities
2013-12-01 00:00:00
Ruby security vulnerabilities
2014-05-29 00:00:00
ubuntu
ubuntu
Ruby vulnerabilities
2013-11-27 00:00:00
osv
osv
ruby1.9.1 - security update
2015-05-30 00:00:00
debian
debian
[SECURITY] [DLA 235-1] ruby1.9.1 security update
2015-05-30 20:45:15