Security
فارسی
All products

Red Hat Enterprise Linux 5/ruby

Red Hat · Package
32 reports
Vulnerability alerts
Follow
ReportProductEcosystemSeverityFix statusLast updated
WEBRick vulnerable to HTTP Request/Response SmugglingCVE-2020-25613 · GHSA-GWFG-CQMG-CF8F CloudForms Management Engine 5/rubyRed Hat 3scale API Management Platform 2/ruby-rack Red HatRubyGems High Fix reported
Ruby Openssl Allows Incorrect Value ComparisonCVE-2018-16395 · GHSA-MMRQ-6999-72V8 Red Hat Enterprise Linux 5/rubyRed Hat Enterprise Linux 6/ruby Red HatRubyGems Critical Fix reported
WEBrick RCE VulnerabilityCVE-2017-10784 · GHSA-369M-2GV6-MW28 Red Hat Enterprise Linux 5/rubyRed Hat Enterprise Linux 6/ruby Red HatRubyGems High Fix reported
OpenSSL gem for Ruby using inadequate encryption strengthCVE-2016-7798 · GHSA-6H88-QJPV-P32M CloudForms Management Engine 5/rh-ruby22-rubyCloudForms Management Engine 5/ruby-200-ruby Red HatRubyGems High Fix reported
ruby: dlopen could open a library with tainted library nameCVE-2009-5147 CloudForms Management Engine 5/ruby193-rubyRed Hat Enterprise Linux 4/ruby Red Hat Low No fix reported
CVE-2015-7551CVE-2015-7551 CloudForms Management Engine 5/ruby193-rubyRed Hat Enterprise Linux 4/ruby Red Hat Low No fix reported
ruby: Properly initialize the random number generator when forking new processCVE-2011-2686 Red Hat Enterprise Linux 4/rubyRed Hat Enterprise Linux 5/ruby Red Hat Low No fix reported
CVE-2011-2705CVE-2011-2705 Red Hat Enterprise Linux 4/rubyRed Hat Enterprise Linux 5/ruby Red Hat Low No fix reported
WEBrick:: HTTPRequest X-Forwarded-* allows arbitrary dataCVE-2011-3624 Red Hat Enterprise Linux 4/rubyRed Hat Enterprise Linux 5/ruby Red Hat Low No fix reported
ruby: Unsafe parsing of long strings via decode_www_form_component methodCVE-2014-6438 Red Hat Enterprise Linux 5/rubyRed Hat Enterprise Linux 6/ruby Red Hat Medium No fix reported
ruby: REXML billion laughs attack via parameter entity expansionCVE-2014-8080 CloudForms Management Engine 5/ruby193-rubyOpenShift Enterprise 1/ruby193-ruby Red Hat Medium No fix reported
ruby: REXML incomplete fix for CVE-2014-8080CVE-2014-8090 CloudForms Management Engine 5/ruby193-rubyOpenShift Enterprise 1/ruby193-ruby Red Hat Medium No fix reported
ruby: OpenSSL extension hostname matching implementation violates RFC 6125CVE-2015-1855 CloudForms Management Engine 5/ruby193-rubyRed Hat Enterprise Linux 5/ruby Red Hat Medium No fix reported
ruby: TclTkIp ip_cancel_eval type confusion vulnerabilityCVE-2016-2337 CloudForms Management Engine 5/rh-ruby22-rubyCloudForms Management Engine 5/ruby-200-ruby Red Hat Medium No fix reported
oniguruma: Heap buffer overflow in next_state_val() during regular expression compilationCVE-2017-9226 Red Hat Enterprise Linux 5/php53Red Hat Enterprise Linux 5/php Red Hat Medium No fix reported
oniguruma: Out-of-bounds stack read in match_at() during regular expression searchingCVE-2017-9224 Red Hat Enterprise Linux 5/php53Red Hat Enterprise Linux 5/php Red Hat Medium No fix reported
oniguruma: Invalid pointer dereference in left_adjust_char_head()CVE-2017-9229 Red Hat Enterprise Linux 5/php53Red Hat Enterprise Linux 5/php Red Hat Medium No fix reported
oniguruma: Out-of-bounds heap write in bitset_set_range()CVE-2017-9228 Red Hat Enterprise Linux 5/php53Red Hat Enterprise Linux 5/php Red Hat Medium No fix reported
oniguruma: Out-of-bounds stack read in mbc_enc_len() during regular expression searchingCVE-2017-9227 Red Hat Enterprise Linux 5/php53Red Hat Enterprise Linux 5/php Red Hat Medium No fix reported
ruby: SMTP command injection via CRLF sequences in RCPT TO or MAIL FROM commands in Net::SMTPCVE-2015-9096 CloudForms Management Engine 5/rh-ruby22-rubyCloudForms Management Engine 5/ruby-200-ruby Red Hat Low No fix reported