Security
فارسی
All products

Red Hat Enterprise Linux 8/ruby:2.5/ruby

Red Hat · Package
20 reports
Vulnerability alerts
Follow
ReportProductEcosystemSeverityFix statusLast updated
CGI has Regular Expression Denial of Service (ReDoS) potential in Util#escapeElementCVE-2025-27220 · GHSA-MHWM-JH88-3GJF Red Hat Enterprise Linux 6/rubyRed Hat Enterprise Linux 7/ruby Red HatRubyGems Medium Fix reported
REXML denial of service vulnerabilityCVE-2024-43398 · GHSA-VMWR-MC7X-5VC3 Red Hat 3scale API Management Platform 2/3scale-amp2/backend-rhel8Red Hat 3scale API Management Platform 2/3scale-amp2/system-rhel7 Red HatRubyGems High Fix reported
Buffer Overflow in Zlib::GzipReader ungetc via large input leads to memory corruptionCVE-2026-27820 · GHSA-G857-HHFV-J68W Red Hat Enterprise Linux 6/rubyRed Hat Enterprise Linux 7/ruby Red HatRubyGems Medium Fix reported
resolv vulnerable to DoS via insufficient DNS domain name length validationCVE-2025-24294 · GHSA-XH69-987W-HRP8 Red Hat Enterprise Linux 6/rubyRed Hat Enterprise Linux 7/ruby Red HatRubyGems Medium Fix reported
Possible DoS by memory exhaustion in net-imapCVE-2025-25186 · GHSA-7FC5-F82F-CX69 Red Hat 3scale API Management Platform 2/3scale-amp2/zync-rhel8Red Hat Enterprise Linux 10/rhel10-beta/flatpak-sdk Red HatRubyGems Medium Fix reported
REXML DoS vulnerabilityCVE-2024-41946 · GHSA-5866-49GR-22V4 Red Hat Enterprise Linux 8/ruby:2.5/rubyRed Hat Enterprise Linux 9/pcs Red HatRubyGems Medium Fix reported
REXML DoS vulnerabilityCVE-2024-41123 · GHSA-R55C-59QM-VJW6 Red Hat 3scale API Management Platform 2/3scale-amp2/backend-rhel8Red Hat 3scale API Management Platform 2/3scale-amp2/system-rhel7 Red HatRubyGems Medium Fix reported
REXML denial of service vulnerabilityCVE-2024-39908 · GHSA-4XQQ-M2HX-25V8 Red Hat 3scale API Management Platform 2/3scale-amp2/backend-rhel8Red Hat 3scale API Management Platform 2/3scale-amp2/system-rhel7 Red HatRubyGems Medium Fix reported
CGI has Denial of Service (DoS) potential in Cookie.parseCVE-2025-27219 · GHSA-GH9Q-2XRM-X6QV Red Hat Enterprise Linux 6/rubyRed Hat Enterprise Linux 7/ruby Red HatRubyGems Medium Fix reported
Ruby WEBrick read_headers method can lead to HTTP Request/Response SmugglingCVE-2025-6442 · GHSA-R995-Q44H-HR64 Logging Subsystem for Red Hat OpenShift/openshift-logging/fluentd-rhel8Logging Subsystem for Red Hat OpenShift/openshift-logging/fluentd-rhel9 Red HatRubyGems Medium Fix reported
onigmo: NULL pointer dereference in onig_error_code_to_str because of fetch_token in regparse.cCVE-2019-16161 Red Hat Enterprise Linux 7/rubyRed Hat Enterprise Linux 8/ruby:2.5/ruby Red Hat Low No fix reported
oniguruma: Stack exhaustion in regcomp.c because of recursion in regparse.cCVE-2019-16163 Red Hat Enterprise Linux 5/php53Red Hat Enterprise Linux 5/php Red Hat Medium No fix reported
oniguruma: Heap-based buffer overflow in str_lower_case_match in regexec.cCVE-2019-19246 Red Hat Enterprise Linux 6/onigurumaRed Hat Enterprise Linux 6/php Red Hat Medium No fix reported
oniguruma: Heap-based buffer over-read in function gb18030_mbc_enc_len in file gb18030.cCVE-2019-19203 Red Hat Enterprise Linux 5/php53Red Hat Enterprise Linux 6/oniguruma Red Hat Medium No fix reported
ruby: openssl: Ruby Marvin AttackCVE-2025-0306 Red Hat Enterprise Linux 6/rubyRed Hat Enterprise Linux 7/ruby Red Hat Medium No fix reported
resolv: Resolv gem: DNS allowlist and egress bypass, and cache poisoning via crafted hostnamesCVE-2026-80213 Lightspeed Core/lightspeed-core/rag-tool-cpu-rhel9Lightspeed Core/lightspeed-core/rag-tool-cuda-12.9-rhel9 Red Hat Medium No fix reported
ruby: integer overflow issue in regular expression compilerCVE-2026-93577 Red Hat Enterprise Linux 6/rubyRed Hat Enterprise Linux 7/ruby Red Hat Critical No fix reported
ruby: double free issue in regular expression parserCVE-2026-89078 Red Hat Enterprise Linux 6/rubyRed Hat Enterprise Linux 7/ruby Red Hat Critical No fix reported
ruby: integer overflow issue in CI/CD regular expression compilerCVE-2026-97229 Red Hat Enterprise Linux 6/rubyRed Hat Enterprise Linux 7/ruby Red Hat Critical No fix reported
ruby: integer overflow issue in regular expression compilerCVE-2026-110264 Red Hat Enterprise Linux 6/rubyRed Hat Enterprise Linux 7/ruby Red Hat Critical No fix reported