Lucene search
Veracode Vulnerability DatabaseVERACODE:22181HistoryDec 17, 2019 - 1:56 a.m.
Information Disclosure
2019-12-1701:56:32
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
5
0.008 Low
EPSS
Percentile
81.5%
excon is vulnerable to information disclosure. The vulnerability exists as a race condition, whereby an attacker could cause interrupted persistent connections to leave data on the socket, allowing subsequent requests to read the content.
References
lists.opensuse.org/opensuse-security-announce/2020-01/msg00021.html
lists.opensuse.org/opensuse-security-announce/2020-01/msg00062.html
github.com/excon/excon/commit/ccb57d7a422f020dc74f1de4e8fb505ab46d8a29
github.com/excon/excon/security/advisories/GHSA-q58g-455p-8vw9
lists.debian.org/debian-lts-announce/2020/01/msg00015.html
Related
ubuntucve
ubuntucve
CVE-2019-16779
2019-12-16 00:00:00
osv
osv
ruby-excon - security update
2020-01-19 00:00:00
CVE-2019-16779
2019-12-16 20:15:15
In RubyGem excon, interrupted Persistent Connections May Leak Response Data
2019-12-16 19:30:17
cve
cve
CVE-2019-16779
2019-12-16 20:15:15
nessus
nessus
Debian DLA-2070-1 : ruby-excon security update
2020-01-21 00:00:00
openSUSE Security Update : rubygem-excon (openSUSE-2020-36)
2020-01-15 00:00:00
suse
suse
Security update for rubygem-excon (moderate)
2020-01-29 00:00:00
Security update for rubygem-excon (moderate)
2020-01-14 00:00:00
prion
prion
Race condition
2019-12-16 20:15:00
cvelist
cvelist
debiancve
debiancve
CVE-2019-16779
2019-12-16 20:15:15
openvas
openvas
openSUSE: Security Advisory for rubygem-excon (openSUSE-SU-2020:0036-1)
2020-01-14 00:00:00
Debian: Security Advisory (DLA-2070-1)
2020-01-20 00:00:00
SUSE: Security Advisory (SUSE-SU-2020:2053-1)
2021-06-09 00:00:00
ibm
ibm
nvd
nvd
CVE-2019-16779
2019-12-16 20:15:15
debian
debian
[SECURITY] [DLA 2070-1] ruby-excon security update
2020-01-19 12:50:38
github
github
In RubyGem excon, interrupted Persistent Connections May Leak Response Data
2019-12-16 19:30:17
freebsd
freebsd
Gitlab -- Multiple Vulnerabilities
2020-01-30 00:00:00