Lucene search
MitreCVELIST:CVE-2009-5147HistoryMar 29, 2017 - 2:00 p.m.
CVE-2009-5147
2017-03-2914:00:00
mitre
www.cve.org
9
DL::dlopen in Ruby 1.8, 1.9.0, 1.9.2, 1.9.3, 2.0.0 before patchlevel 648, and 2.1 before 2.1.8 opens libraries with tainted names.
References
seclists.org/oss-sec/2015/q3/222
www.securityfocus.com/bid/76060
access.redhat.com/errata/RHSA-2018:0583
bugzilla.redhat.com/show_bug.cgi?id=1248935
github.com/ruby/ruby/commit/4600cf725a86ce31266153647ae5aa1197b1215b
www.ruby-lang.org/en/news/2015/12/16/unsafe-tainted-string-usage-in-fiddle-and-dl-cve-2015-7551/
Related
osv
osv
ruby1.9.1 - security update
2015-08-26 00:00:00
ruby1.8 - security update
2015-08-26 00:00:00
debian
debian
[SECURITY] [DLA 300-1] ruby1.9.1 security update
2015-08-26 12:22:21
[SECURITY] [DLA 299-1] ruby1.8 security update
2015-08-26 12:22:01
openvas
openvas
Debian: Security Advisory (DLA-299-1)
2023-03-08 00:00:00
Debian: Security Advisory (DLA-300-1)
2023-03-08 00:00:00
Mageia: Security Advisory (MGASA-2016-0007)
2016-01-14 00:00:00
cve
cve
CVE-2009-5147
2017-03-29 14:59:00
CVE-2015-7551
2016-03-24 01:59:03
veracode
veracode
Arbitrary Code Execution
2019-01-15 09:22:36
prion
prion
Design/Logic Flaw
2017-03-29 14:59:00
Design/Logic Flaw
2016-03-24 01:59:00
nessus
nessus
Debian DLA-299-1 : ruby1.8 security update
2015-08-27 00:00:00
Debian DLA-300-1 : ruby1.9.1 security update
2015-08-27 00:00:00
Fedora 22 : ruby-2.2.4-47.fc22 (2015-c4409eb73a)
2016-03-04 00:00:00
nvd
nvd
CVE-2009-5147
2017-03-29 14:59:00
CVE-2015-7551
2016-03-24 01:59:03
rubygems
rubygems
Unsafe tainted string usage in Fiddle and DL
2015-12-15 21:00:00
mageia
mageia
Updated ruby packages fix security vulnerability
2016-01-12 12:13:53
ubuntucve
ubuntucve
CVE-2015-7551
2016-03-23 00:00:00
CVE-2009-5147
2017-03-29 00:00:00
fedora
fedora
[SECURITY] Fedora 23 Update: ruby-2.2.4-47.fc23
2015-12-29 22:26:04
[SECURITY] Fedora 22 Update: ruby-2.2.4-47.fc22
2016-01-08 03:36:39
cvelist
cvelist
CVE-2015-7551
2016-03-24 01:00:00
freebsd
freebsd
Ruby -- unsafe tainted string vulnerability
2015-12-16 00:00:00
archlinux
archlinux
ruby: unsafe tainted string usage
2015-12-17 00:00:00
ubuntu
ubuntu
Ruby vulnerabilities
2017-07-25 00:00:00
redhat
redhat