Lucene search
Ubuntu.comUB:CVE-2013-0334HistoryOct 31, 2014 - 12:00 a.m.
CVE-2013-0334
2014-10-3100:00:00
ubuntu.com
ubuntu.com
5
5 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:L/Au:N/C:N/I:P/A:N
0.006 Low
EPSS
Percentile
78.5%
Bundler before 1.7, when multiple top-level source lines are used, allows
remote attackers to install arbitrary gems by creating a gem with the same
name as another gem in a different source.
Related
cvelist
cvelist
CVE-2013-0334
2014-10-31 14:00:00
CVE-2016-7954
2016-12-22 22:00:00
oraclelinux
oraclelinux
rubygem-bundler and rubygem-thor security, bug fix, and enhancement update
2015-11-23 00:00:00
nessus
nessus
RHEL 7 : rubygem-bundler and rubygem-thor (RHSA-2015:2180)
2015-11-19 00:00:00
Fedora 19 : rubygem-bundler-1.7.3-1.fc19 (2014-11649)
2014-10-12 00:00:00
CentOS 7 : rubygem-bundler / rubygem-thor (CESA-2015:2180)
2015-12-02 00:00:00
fedora
fedora
[SECURITY] Fedora 21 Update: rubygem-bundler-1.7.3-1.fc21
2014-10-12 05:07:35
[SECURITY] Fedora 19 Update: rubygem-bundler-1.7.3-1.fc19
2014-10-12 05:02:47
[SECURITY] Fedora 20 Update: rubygem-bundler-1.7.3-1.fc20
2014-10-12 05:07:22
osv
osv
Bundler may install gems from a different source than expected
2022-05-05 02:48:48
Bundler allows attacker to inject arbitrary code via secondary Gem source
2022-05-14 00:57:16
cve
cve
CVE-2013-0334
2014-10-31 14:55:02
CVE-2016-7954
2016-12-22 22:59:00
redhat
redhat
gentoo
gentoo
Bundler: Insecure installation
2016-09-26 00:00:00
nvd
nvd
CVE-2013-0334
2014-10-31 14:55:02
CVE-2016-7954
2016-12-22 22:59:00
openvas
openvas
RedHat Update for rubygem-bundler and rubygem-thor RHSA-2015:2180-07
2015-11-20 00:00:00
Fedora Update for rubygem-bundler FEDORA-2014-11630
2014-10-13 00:00:00
Fedora Update for rubygem-bundler FEDORA-2014-11649
2014-10-13 00:00:00
centos
centos
rubygem security update
2015-11-30 19:51:23
debiancve
debiancve
CVE-2013-0334
2014-10-31 14:55:02
CVE-2016-7954
2016-12-22 22:59:00
github
github
Bundler may install gems from a different source than expected
2022-05-05 02:48:48
Bundler allows attacker to inject arbitrary code via secondary Gem source
2022-05-14 00:57:16
prion
prion
Code injection
2014-10-31 14:55:00
Design/Logic Flaw
2016-12-22 22:59:00
ubuntucve
ubuntucve
CVE-2016-7954
2016-12-22 00:00:00
rubygems
rubygems
redhatcve
redhatcve
CVE-2016-7954
2016-10-05 12:47:20
5 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:L/Au:N/C:N/I:P/A:N
0.006 Low
EPSS
Percentile
78.5%
Related for UB:CVE-2013-0334