Lucene search
Veracode Vulnerability DatabaseVERACODE:19707HistoryMay 16, 2019 - 3:22 a.m.
Deserialization Of Untrusted Data
2019-05-1603:22:56
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
13
EPSS
0.022
Percentile
89.4%
Ruby is vulnerable to deserialization of untrusted data vulnerability. This attack appear to be exploitable via victim must run the gem owner command on a gem with a specially crafted YAML file which may leads to a code execution.
Related
openvas
openvas
Debian: Security Advisory (DLA-1352-1)
2018-04-18 00:00:00
Debian: Security Advisory (DLA-1480-1)
2018-09-02 00:00:00
Huawei EulerOS: Security Advisory for ruby (EulerOS-SA-2019-2250)
2020-01-23 00:00:00
prion
prion
Deserialization of untrusted data
2018-03-13 15:29:00
ubuntucve
ubuntucve
CVE-2018-1000074
2018-03-13 00:00:00
nvd
nvd
CVE-2018-1000074
2018-03-13 15:29:00
cvelist
cvelist
CVE-2018-1000074
2018-03-13 15:00:00
osv
osv
CVE-2018-1000074
2018-03-13 15:29:00
RubyGems Deserialization of Untrusted Data vulnerability
2022-05-14 01:01:12
jruby - security update
2018-04-17 00:00:00
debian
debian
[SECURITY] [DLA 1352-1] jruby security update
2018-04-17 22:53:01
[SECURITY] [DLA 1480-1] ruby2.1 security update
2018-08-27 20:25:50
[SECURITY] [DSA 4219-1] jruby security update
2018-06-08 09:31:46
debiancve
debiancve
CVE-2018-1000074
2018-03-13 15:29:00
github
github
RubyGems Deserialization of Untrusted Data vulnerability
2022-05-14 01:01:12
rubygems
rubygems
RubyGems Deserialization of Untrusted Data vulnerability
2022-05-13 21:00:00
nessus
nessus
Debian DLA-1352-1 : jruby security update
2018-04-18 00:00:00
Debian DLA-1480-1 : ruby2.1 security update
2018-08-29 00:00:00
EulerOS 2.0 SP3 : ruby (EulerOS-SA-2019-2250)
2019-11-08 00:00:00
cve
cve
CVE-2018-1000074
2018-03-13 15:29:00
redhatcve
redhatcve
CVE-2018-1000074
2020-04-08 04:56:25
f5
f5
K84262603 : Multiple Ruby vulnerabilities
2022-04-22 00:00:00
K52952871 : Multiple RubyGems vulnerabilities
2022-02-16 00:00:00
fedora
fedora
[SECURITY] Fedora 26 Update: ruby-2.4.3-87.fc26
2018-03-11 20:00:06
[SECURITY] Fedora 27 Update: ruby-2.4.3-87.fc27
2018-03-02 16:26:05
ubuntu
ubuntu
Ruby vulnerabilities
2018-04-05 00:00:00
Ruby regression
2018-04-13 00:00:00
Ruby regression
2021-03-25 00:00:00
mageia
mageia
Updated jruby packages fix security vulnerability
2019-02-13 14:08:25
Updated ruby-RubyGems packages fix security vulnerability
2020-06-11 00:39:20
amazon
amazon
Medium: ruby
2018-04-05 16:06:00
Medium: ruby
2019-08-23 03:41:00
Medium: ruby20, ruby22, ruby23, ruby24
2018-04-04 23:18:00
redhat
redhat
(RHSA-2020:0542) Moderate: ruby security update
2020-02-18 13:56:05
(RHSA-2020:0591) Moderate: ruby security update
2020-02-25 11:32:20
(RHSA-2020:0663) Moderate: ruby security update
2020-03-03 13:41:04
centos
centos
ruby, rubygem, rubygems security update
2019-08-30 04:17:17
oraclelinux
oraclelinux
ruby security update
2019-08-13 00:00:00
suse
suse
Security update for ruby-bundled-gems-rpmhelper, ruby2.5 (important)
2019-07-21 00:00:00