Lucene search
+L

CVE-2011-2705

🗓️ 05 Aug 2011 21:00:00Reported by redhatType 
cve
 cve
🔗 web.nvd.nist.gov👁 113 Views

The SecureRandom.random_bytes function in Ruby before 1.8.7-p352 and 1.9.x before 1.9.2-p290 relies on PID values for initialization, making it easier for attackers to predict the result string

Related
Detection
Refs
ReporterTitlePublishedViews
Family
cvelist
CVE-2011-2705
5 Aug 201121:00
cvelist
debian
[SECURITY] [DLA 235-1] ruby1.9.1 security update
30 May 201520:45
debian
debian
[SECURITY] [DLA 88-1] ruby1.8 security update
21 Nov 201415:18
debian
nessus
Debian DLA-235-1 : ruby1.9.1 security update
1 Jun 201500:00
nessus
nessus
Debian DLA-88-1 : ruby1.8 security update
26 Mar 201500:00
nessus
nessus
Fedora 15 : ruby-1.8.7.352-1.fc15 (2011-9359)
26 Jul 201100:00
nessus
nessus
Fedora 14 : ruby-1.8.7.352-1.fc14 (2011-9374)
26 Jul 201100:00
nessus
nessus
MiracleLinux 4 : ruby-1.8.7.352-3.0.1.AXS4 (AXSA:2012-54:01)
19 Jan 202600:00
nessus
nessus
Oracle Linux 6 : ruby (ELSA-2011-1581)
7 Sep 202300:00
nessus
nessus
RHEL 6 : ruby (RHSA-2011:1581)
6 Dec 201100:00
nessus
Rows per page
NVD
Node
OR
ruby-langrubyRange1.8.7-334
ruby-langrubyMatch1.8.7p22
ruby-langrubyMatch1.8.7p71
ruby-langrubyMatch1.8.7p72
ruby-langrubyMatch1.8.7-160
ruby-langrubyMatch1.8.7-173
ruby-langrubyMatch1.8.7-248
ruby-langrubyMatch1.8.7-249
ruby-langrubyMatch1.8.7-299
ruby-langrubyMatch1.8.7-302
ruby-langrubyMatch1.8.7-330
ruby-langrubyMatch1.8.7-p21
Node
OR
ruby-langrubyMatch1.9r18423
ruby-langrubyMatch1.9.0
ruby-langrubyMatch1.9.0r18423
ruby-langrubyMatch1.9.0-0
ruby-langrubyMatch1.9.0-1
ruby-langrubyMatch1.9.0-2
ruby-langrubyMatch1.9.0-20060415
ruby-langrubyMatch1.9.0-20070709
ruby-langrubyMatch1.9.1
ruby-langrubyMatch1.9.1-p0
ruby-langrubyMatch1.9.1-p129
ruby-langrubyMatch1.9.1-p243
ruby-langrubyMatch1.9.1-p376
ruby-langrubyMatch1.9.1-p429
ruby-langrubyMatch1.9.1-preview_1
ruby-langrubyMatch1.9.1-preview_2
ruby-langrubyMatch1.9.1-rc1
ruby-langrubyMatch1.9.1-rc2
ruby-langrubyMatch1.9.2
ruby-langrubyMatch1.9.2dev
ruby-langrubyMatch1.9.2-p136
ruby-langrubyMatch1.9.2-p180

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

16 Jun 2026 23:31Current
5.4Medium risk
Vulners AI Score5.4
CVSS 25
EPSS0.0195
113