CVE-2024-39908 vulnerabilities

2024-09-2909:21:20

packages.wolfi.dev

cve-2024-39908

vulnerabilities

ruby3.2-rexml

unix

CVSS3

4.3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

LOW

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L

AI Score

5.6

Confidence

High

JSON

Vulnerabilities for packages: kube-fluentd-operator, logstash, ruby3.2-rexml, ruby

OSVersionArchitecturePackageVersionFilename
Wolfiunknownx86_64kube-fluentd-operator<= 1.18.2-r13kube-fluentd-operator-1.18.2-r13.apk
Wolfiunknownaarch64kube-fluentd-operator<= 1.18.2-r13kube-fluentd-operator-1.18.2-r13.apk
Wolfiunknownx86_64logstash<= 8.15.0-r0logstash-8.15.0-r0.apk
Wolfiunknownaarch64logstash<= 8.15.0-r0logstash-8.15.0-r0.apk
Wolfiunknownx86_64ruby<= 3.1.6-r2ruby-3.1.6-r2.apk
Wolfiunknownaarch64ruby<= 3.1.6-r2ruby-3.1.6-r2.apk
Wolfiunknownx86_64ruby<= 3.2.4-r6ruby-3.2.4-r6.apk
Wolfiunknownaarch64ruby<= 3.2.4-r6ruby-3.2.4-r6.apk
Wolfiunknownx86_64ruby<= 3.3.4-r1ruby-3.3.4-r1.apk
Wolfiunknownaarch64ruby<= 3.3.4-r1ruby-3.3.4-r1.apk

OS	Version	Architecture	Package	Version	Filename
Wolfi	unknown	x86_64	kube-fluentd-operator	<= 1.18.2-r13	kube-fluentd-operator-1.18.2-r13.apk
Wolfi	unknown	aarch64	kube-fluentd-operator	<= 1.18.2-r13	kube-fluentd-operator-1.18.2-r13.apk
Wolfi	unknown	x86_64	logstash	<= 8.15.0-r0	logstash-8.15.0-r0.apk
Wolfi	unknown	aarch64	logstash	<= 8.15.0-r0	logstash-8.15.0-r0.apk
Wolfi	unknown	x86_64	ruby	<= 3.1.6-r2	ruby-3.1.6-r2.apk
Wolfi	unknown	aarch64	ruby	<= 3.1.6-r2	ruby-3.1.6-r2.apk
Wolfi	unknown	x86_64	ruby	<= 3.2.4-r6	ruby-3.2.4-r6.apk
Wolfi	unknown	aarch64	ruby	<= 3.2.4-r6	ruby-3.2.4-r6.apk
Wolfi	unknown	x86_64	ruby	<= 3.3.4-r1	ruby-3.3.4-r1.apk
Wolfi	unknown	aarch64	ruby	<= 3.3.4-r1	ruby-3.3.4-r1.apk