Lucene search
Redhat.comRH:CVE-2018-1000073HistoryFeb 21, 2018 - 11:16 a.m.
CVE-2018-1000073
2018-02-2111:16:12
redhat.com
access.redhat.com
11
EPSS
0.006
Percentile
77.6%
RubyGems version Ruby 2.2 series: 2.2.9 and earlier, Ruby 2.3 series: 2.3.6 and earlier, Ruby 2.4 series: 2.4.3 and earlier, Ruby 2.5 series: 2.5.0 and earlier, prior to trunk revision 62422 contains a Directory Traversal vulnerability in install_location function of package.rb that can result in path traversal when writing to a symlinked basedir outside of the root. This vulnerability appears to have been fixed in 2.7.6.
Related
rubygems
rubygems
RubyGems Link Following vulnerability
2022-05-12 21:00:00
nessus
nessus
RHEL 6 : jruby (Unpatched Vulnerability)
2024-06-03 00:00:00
Fedora 26 : ruby (2018-1fffa787e7)
2018-03-12 00:00:00
Fedora 27 : ruby (2018-40ed78700c)
2018-03-05 00:00:00
cvelist
cvelist
CVE-2018-1000073
2018-03-13 15:00:00
nvd
nvd
CVE-2018-1000073
2018-03-13 15:29:00
debiancve
debiancve
CVE-2018-1000073
2018-03-13 15:29:00
github
github
RubyGems Link Following vulnerability
2022-05-13 01:18:44
cve
cve
CVE-2018-1000073
2018-03-13 15:29:00
ubuntucve
ubuntucve
CVE-2018-1000073
2018-03-13 00:00:00
osv
osv
RubyGems Link Following vulnerability
2022-05-13 01:18:44
CVE-2018-1000073
2018-03-13 15:29:00
ruby2.1 - security update
2018-08-27 00:00:00
prion
prion
Design/Logic Flaw
2018-03-13 15:29:00
veracode
veracode
Directory Traversal Vulnerability
2019-05-16 03:22:56
openvas
openvas
Debian: Security Advisory (DLA-1480-1)
2018-09-02 00:00:00
Huawei EulerOS: Security Advisory for ruby (EulerOS-SA-2019-2250)
2020-01-23 00:00:00
Huawei EulerOS: Security Advisory for ruby (EulerOS-SA-2020-2395)
2020-11-04 00:00:00
debian
debian
[SECURITY] [DLA 1480-1] ruby2.1 security update
2018-08-27 20:25:50
[SECURITY] [DSA 4219-1] jruby security update
2018-06-08 09:31:46
[SECURITY] [DSA 4219-1] jruby security update
2018-06-08 09:31:46
f5
f5
K84262603 : Multiple Ruby vulnerabilities
2022-04-22 00:00:00
K52952871 : Multiple RubyGems vulnerabilities
2022-02-16 00:00:00
fedora
fedora
[SECURITY] Fedora 26 Update: ruby-2.4.3-87.fc26
2018-03-11 20:00:06
[SECURITY] Fedora 27 Update: ruby-2.4.3-87.fc27
2018-03-02 16:26:05
ubuntu
ubuntu
Ruby vulnerabilities
2018-04-05 00:00:00
Ruby regression
2018-04-13 00:00:00
mageia
mageia
Updated jruby packages fix security vulnerability
2019-02-13 14:08:25
Updated ruby-RubyGems packages fix security vulnerability
2020-06-11 00:39:20
redhat
redhat
(RHSA-2020:0542) Moderate: ruby security update
2020-02-18 13:56:05
(RHSA-2020:0663) Moderate: ruby security update
2020-03-03 13:41:04
(RHSA-2020:0591) Moderate: ruby security update
2020-02-25 11:32:20
amazon
amazon
Medium: ruby
2018-04-05 16:06:00
Medium: ruby
2019-08-23 03:41:00
Medium: ruby20, ruby22, ruby23, ruby24
2018-04-04 23:18:00
centos
centos
ruby, rubygem, rubygems security update
2019-08-30 04:17:17
oraclelinux
oraclelinux
ruby security update
2019-08-13 00:00:00
suse
suse
Security update for ruby-bundled-gems-rpmhelper, ruby2.5 (important)
2019-07-21 00:00:00