Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
archlinuxArch LinuxASA-201512-11
HistoryDec 17, 2015 - 12:00 a.m.

ruby: unsafe tainted string usage

2015-12-1700:00:00
Arch Linux
lists.archlinux.org
24

7.3 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

LOW

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.008 Low

EPSS

Percentile

79.1%

JSON

There is an unsafe tainted string vulnerability in Fiddle and DL. This
issue was originally reported and fixed with CVE-2009-5147 in DL, but
reappeared after DL was reimplemented using Fiddle and libffi.

OSVersionArchitecturePackageVersionFilename
anyanyanyruby< 2.2.4-1UNKNOWN

Related

mageia 2
ubuntucve 3
nessus 33
prion 3
openvas 28
fedora 4
cve 3
freebsd 1
veracode 2
osv 4
debian 5
redhat 2
suse 10
cbl_mariner 1
ubuntu 2
gentoo 1
oraclelinux 1
centos 1
amazon 1
f5 2
thn 1
slackware 1
debiancve 1
rubygems 1
archlinux 1
ibm 1
photon 3
apple 2
oracle 1
mageia
mageia
Updated ruby packages fix security vulnerability
2016-01-12 12:13:53
Updated grub2 packages fix security vulnerability
2015-12-20 12:15:38
ubuntucve
ubuntucve
CVE-2015-7551
2016-03-23 00:00:00
CVE-2009-5147
2017-03-29 00:00:00
CVE-2015-8370
2015-12-11 00:00:00
nessus
nessus
Fedora 22 : ruby-2.2.4-47.fc22 (2015-c4409eb73a)
2016-03-04 00:00:00
FreeBSD : Ruby -- unsafe tainted string vulnerability (3b50881d-1860-4721-aab1-503290e23f6c)
2015-12-29 00:00:00
Fedora 23 : ruby-2.2.4-47.fc23 (2015-eef21b972e)
2016-03-04 00:00:00
prion
prion
Design/Logic Flaw
2016-03-24 01:59:00
Integer overflow
2015-12-16 21:59:00
Design/Logic Flaw
2017-03-29 14:59:00
openvas
openvas
Mageia: Security Advisory (MGASA-2016-0007)
2016-01-14 00:00:00
Amazon Linux: Security Advisory (ALAS-2016-632)
2016-01-20 00:00:00
Debian: Security Advisory (DLA-299-1)
2023-03-08 00:00:00
fedora
fedora
[SECURITY] Fedora 22 Update: ruby-2.2.4-47.fc22
2016-01-08 03:36:39
[SECURITY] Fedora 23 Update: ruby-2.2.4-47.fc23
2015-12-29 22:26:04
[SECURITY] Fedora 22 Update: grub2-2.02-0.18.fc22
2015-12-17 08:53:17
cve
cve
CVE-2015-7551
2016-03-24 01:59:00
CVE-2009-5147
2017-03-29 14:59:00
CVE-2015-8370
2015-12-16 21:59:00
freebsd
freebsd
Ruby -- unsafe tainted string vulnerability
2015-12-16 00:00:00
veracode
veracode
Arbitrary Code Execution
2019-05-16 02:49:48
Arbitrary Code Execution
2019-01-15 09:22:36
osv
osv
ruby1.9.1 - security update
2015-08-26 00:00:00
grub2 - security update
2015-12-16 00:00:00
ruby1.8 - security update
2015-08-26 00:00:00
debian
debian
[SECURITY] [DLA 300-1] ruby1.9.1 security update
2015-08-26 12:22:21
[SECURITY] [DSA 3421-1] grub2 security update
2015-12-16 20:05:50
[SECURITY] [DLA 368-1] grub2 security update
2015-12-12 17:35:46
redhat
redhat
(RHSA-2015:2623) Moderate: grub2 security and bug fix update
2015-12-15 09:27:04
(RHSA-2018:0583) Important: rh-ruby22-ruby security, bug fix, and enhancement update
2018-03-26 09:12:14
suse
suse
Security update for grub2 (important)
2015-12-30 12:10:45
Security update for grub2 (important)
2015-12-29 17:11:18
Security update for grub2 (important)
2015-12-29 12:13:10
cbl_mariner
cbl_mariner
CVE-2015-8370 affecting package grub2 2.02-26
2020-09-09 06:09:22
ubuntu
ubuntu
GRUB vulnerability
2015-12-15 00:00:00
Ruby vulnerabilities
2017-07-25 00:00:00
gentoo
gentoo
GRUB: Authentication bypass
2015-12-19 00:00:00
oraclelinux
oraclelinux
grub2 security and bug fix update
2015-12-15 00:00:00
centos
centos
grub2 security update
2015-12-16 02:26:44
amazon
amazon
Low: ruby19, ruby20, ruby21, ruby22
2016-01-18 11:00:00
f5
f5
K25901386 : GRUB2 vulnerability CVE-2015-8370
2016-01-12 00:00:00
SOL25901386 - GRUB2 vulnerability CVE-2015-8370
2016-01-12 00:00:00
thn
thn
You can Hack into a Linux Computer just by pressing 'Backspace' 28 times
2015-12-16 22:33:00
slackware
slackware
[slackware-security] grub
2015-12-18 06:17:13
debiancve
debiancve
CVE-2015-8370
2015-12-16 21:59:00
rubygems
rubygems
Unsafe tainted string usage in Fiddle and DL
2015-12-15 21:00:00
archlinux
archlinux
bind: denial of service
2015-12-16 00:00:00
ibm
ibm
Security Bulletin: Vulnerabilities in grub2 affect PowerKVM (CVE-2015-5281, CVE-2015-8370)
2018-06-18 01:30:37
photon
photon
Home Download Photon OS User Documentation FAQ Security Advisories Related Information Lightwave - PHSA-2016-0012
2016-12-06 00:00:00
Critical Photon OS Security Update - PHSA-2019-0026
2019-08-21 00:00:00
Critical Photon OS Security Update - PHSA-2019-3.0-0026
2019-08-21 00:00:00
apple
apple
About the security content of OS X El Capitan v10.11.4 and Security Update 2016-002 - Apple Support
2017-01-23 03:54:34
About the security content of OS X El Capitan v10.11.4 and Security Update 2016-002
2016-03-21 00:00:00
oracle
oracle
Oracle Critical Patch Update - January 2016
2016-01-19 00:00:00

7.3 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

LOW

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.008 Low

EPSS

Percentile

79.1%

JSON
Related for ASA-201512-11
mageia2ubuntucve3nessus33prion3openvas28fedora4cve3freebsd1veracode2osv4debian5redhat2suse10cbl_mariner1ubuntu2gentoo1oraclelinux1centos1amazon1f52thn1slackware1debiancve1rubygems1archlinux1ibm1photon3apple2oracle1