Lucene search
RedhatCVELIST:CVE-2013-2065HistoryNov 02, 2013 - 7:00 p.m.
CVE-2013-2065
2013-11-0219:00:00
redhat
www.cve.org
(1) DL and (2) Fiddle in Ruby 1.9 before 1.9.3 patchlevel 426, and 2.0 before 2.0.0 patchlevel 195, do not perform taint checking for native functions, which allows context-dependent attackers to bypass intended $SAFE level restrictions.
References
lists.fedoraproject.org/pipermail/package-announce/2013-May/107064.html
lists.fedoraproject.org/pipermail/package-announce/2013-May/107098.html
lists.fedoraproject.org/pipermail/package-announce/2013-May/107120.html
lists.opensuse.org/opensuse-updates/2013-10/msg00057.html
www.ubuntu.com/usn/USN-2035-1
puppet.com/security/cve/cve-2013-2065
www.ruby-lang.org/en/news/2013/05/14/taint-bypass-dl-fiddle-cve-2013-2065/
Related
fedora
fedora
[SECURITY] Fedora 18 Update: ruby-1.9.3.429-30.fc18
2013-05-30 03:09:30
[SECURITY] Fedora 19 Update: ruby-2.0.0.195-8.fc19
2013-05-30 03:37:44
[SECURITY] Fedora 18 Update: ruby-1.9.3.448-31.fc18
2013-07-11 02:28:11
freebsd
freebsd
ruby -- Object taint bypassing in DL and Fiddle in Ruby
2013-05-14 00:00:00
openvas
openvas
Amazon Linux: Security Advisory (ALAS-2013-229)
2015-09-08 00:00:00
Fedora Update for ruby FEDORA-2013-8375
2013-05-31 00:00:00
Slackware: Security Advisory (SSA:2013-136-02)
2022-04-21 00:00:00
prion
prion
Code injection
2013-11-02 19:55:00
slackware
slackware
ruby
2013-05-16 15:44:50
nessus
nessus
Fedora 19 : ruby-2.0.0.195-8.fc19 (2013-8738)
2013-05-30 00:00:00
Fedora 18 : ruby-1.9.3.429-30.fc18 (2013-8375)
2013-05-30 00:00:00
Fedora 17 : ruby-1.9.3.429-30.fc17 (2013-8411)
2013-05-30 00:00:00
nvd
nvd
CVE-2013-2065
2013-11-02 19:55:04
cve
cve
CVE-2013-2065
2013-11-02 19:55:04
amazon
amazon
Low: ruby19
2013-09-26 22:21:00
ubuntucve
ubuntucve
CVE-2013-2065
2013-11-02 00:00:00
rubygems
rubygems
CVE-2013-2065 Ruby: Object taint bypassing in DL and Fiddle
2013-05-13 20:00:00
securityvulns
securityvulns
[USN-2035-1] Ruby vulnerabilities
2013-12-01 00:00:00
Ruby security vulnerabilities
2014-05-29 00:00:00
ubuntu
ubuntu
Ruby vulnerabilities
2013-11-27 00:00:00
osv
osv
ruby1.9.1 - security update
2015-05-30 00:00:00
debian
debian
[SECURITY] [DLA 235-1] ruby1.9.1 security update
2015-05-30 21:00:23