Lucene search
Veracode Vulnerability DatabaseVERACODE:12847HistoryJan 15, 2019 - 9:22 a.m.
Arbitrary Code Execution
2019-01-1509:22:36
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
11
0.008 Low
EPSS
Percentile
81.3%
rh-ruby22-ruby is vulnerable to arbitrary code execution attacks. The vulnerability exists as DL::dlopen in Ruby 1.8, 1.9.0, 1.9.2, 1.9.3, 2.0.0 before patchlevel 648, and 2.1 before 2.1.8 opens libraries with tainted names.
Related
cve
cve
CVE-2009-5147
2017-03-29 14:59:00
CVE-2015-7551
2016-03-24 01:59:03
osv
osv
ruby1.9.1 - security update
2015-08-26 00:00:00
ruby1.8 - security update
2015-08-26 00:00:00
debian
debian
[SECURITY] [DLA 300-1] ruby1.9.1 security update
2015-08-26 12:22:21
[SECURITY] [DLA 299-1] ruby1.8 security update
2015-08-26 12:22:01
openvas
openvas
Debian: Security Advisory (DLA-299-1)
2023-03-08 00:00:00
Debian: Security Advisory (DLA-300-1)
2023-03-08 00:00:00
Mageia: Security Advisory (MGASA-2016-0007)
2016-01-14 00:00:00
nvd
nvd
CVE-2009-5147
2017-03-29 14:59:00
CVE-2015-7551
2016-03-24 01:59:03
nessus
nessus
Debian DLA-300-1 : ruby1.9.1 security update
2015-08-27 00:00:00
Debian DLA-299-1 : ruby1.8 security update
2015-08-27 00:00:00
Fedora 22 : ruby-2.2.4-47.fc22 (2015-c4409eb73a)
2016-03-04 00:00:00
cvelist
cvelist
CVE-2009-5147
2017-03-29 14:00:00
CVE-2015-7551
2016-03-24 01:00:00
prion
prion
Design/Logic Flaw
2017-03-29 14:59:00
Design/Logic Flaw
2016-03-24 01:59:00
rubygems
rubygems
Unsafe tainted string usage in Fiddle and DL
2015-12-15 21:00:00
ubuntucve
ubuntucve
CVE-2009-5147
2017-03-29 00:00:00
CVE-2015-7551
2016-03-23 00:00:00
freebsd
freebsd
Ruby -- unsafe tainted string vulnerability
2015-12-16 00:00:00
fedora
fedora
[SECURITY] Fedora 22 Update: ruby-2.2.4-47.fc22
2016-01-08 03:36:39
[SECURITY] Fedora 23 Update: ruby-2.2.4-47.fc23
2015-12-29 22:26:04
mageia
mageia
Updated ruby packages fix security vulnerability
2016-01-12 12:13:53
archlinux
archlinux
ruby: unsafe tainted string usage
2015-12-17 00:00:00
ubuntu
ubuntu
Ruby vulnerabilities
2017-07-25 00:00:00
redhat
redhat