Red Hat Hardened Images/ruby

Red Hat · Package

9 reports

Vulnerability alerts

Report	Product	Ecosystem	Severity	Fix status	Last updated
WEBRick vulnerable to HTTP Request/Response SmugglingCVE-2020-25613 · GHSA-GWFG-CQMG-CF8F	CloudForms Management Engine 5/ruby Red Hat 3scale API Management Platform 2/ruby-rack	Red HatRubyGems	High	Fix reported	2025-05-30
WEBrick RCE VulnerabilityCVE-2017-10784 · GHSA-369M-2GV6-MW28	Red Hat Enterprise Linux 5/ruby Red Hat Enterprise Linux 6/ruby	Red HatRubyGems	High	Fix reported	2024-03-13
REXML round-trip instabilityCVE-2021-28965 · GHSA-8CR8-4VFW-MR7H	Red Hat Enterprise Linux 6/ruby Red Hat Enterprise Linux 7/ruby	Red HatRubyGems	High	Fix reported	2023-02-03
ruby: Murmur hash-flooding DoS flaw in ruby 1.9 (oCERT-2012-001)CVE-2012-5371	Red Hat Hardened Images/ruby	Red Hat	Medium	No fix reported	Not recorded
ruby: off-by-one stack-based buffer overflow in the encodes() functionCVE-2014-4975	CloudForms Management Engine 5/mingw-ruby CloudForms Management Engine 5/ruby193-ruby	Red Hat	Low	No fix reported	Not recorded
ruby: Unintentional directory traversal by poisoned NULL byte in DirCVE-2018-8780	CloudForms Management Engine 5/rh-ruby22-ruby CloudForms Management Engine 5/ruby-200-ruby	Red Hat	Medium	No fix reported	Not recorded
ruby: FTP PASV command response can cause Net::FTP to connect to arbitrary hostCVE-2021-31810	Red Hat Enterprise Linux 6/ruby Red Hat Enterprise Linux 7/ruby	Red Hat	Medium	No fix reported	Not recorded
ruby: Buffer overrun in String-to-Float conversionCVE-2022-28739	Red Hat Enterprise Linux 6/ruby Red Hat Enterprise Linux 7/ruby	Red Hat	Medium	No fix reported	Not recorded
ruby: Arbitrary memory address read vulnerability with Regex searchCVE-2024-27282	Red Hat Enterprise Linux 6/ruby Red Hat Enterprise Linux 7/ruby	Red Hat	Medium	No fix reported	Not recorded