Lucene search
MitreCVELIST:CVE-2016-7954HistoryDec 22, 2016 - 10:00 p.m.
CVE-2016-7954
2016-12-2222:00:00
mitre
www.cve.org
8
Bundler 1.x might allow remote attackers to inject arbitrary Ruby code into an application by leveraging a gem name collision on a secondary source. NOTE: this might overlap CVE-2013-0334.
References
collectiveidea.com/blog/archives/2016/10/06/bundlers-multiple-source-security-vulnerability/
www.openwall.com/lists/oss-security/2016/10/04/5
www.openwall.com/lists/oss-security/2016/10/04/7
www.openwall.com/lists/oss-security/2016/10/05/3
www.securityfocus.com/bid/93423
bugzilla.redhat.com/show_bug.cgi?id=1381951
github.com/bundler/bundler/issues/5051
github.com/bundler/bundler/issues/5062
Related
debiancve
debiancve
CVE-2016-7954
2016-12-22 22:59:00
CVE-2013-0334
2014-10-31 14:55:02
cve
cve
CVE-2016-7954
2016-12-22 22:59:00
CVE-2013-0334
2014-10-31 14:55:02
github
github
Bundler allows attacker to inject arbitrary code via secondary Gem source
2022-05-14 00:57:16
Bundler may install gems from a different source than expected
2022-05-05 02:48:48
ubuntucve
ubuntucve
CVE-2016-7954
2016-12-22 00:00:00
CVE-2013-0334
2014-10-31 00:00:00
prion
prion
Design/Logic Flaw
2016-12-22 22:59:00
Code injection
2014-10-31 14:55:00
osv
osv
Bundler allows attacker to inject arbitrary code via secondary Gem source
2022-05-14 00:57:16
Bundler may install gems from a different source than expected
2022-05-05 02:48:48
redhatcve
redhatcve
CVE-2016-7954
2016-10-05 12:47:20
nvd
nvd
CVE-2016-7954
2016-12-22 22:59:00
CVE-2013-0334
2014-10-31 14:55:02
nessus
nessus
RHEL 6 : rubygem-bundler (Unpatched Vulnerability)
2024-05-11 00:00:00
RHEL 6 : rubygem-bundler (Unpatched Vulnerability)
2024-06-03 00:00:00
RHEL 7 : rubygem-bundler (Unpatched Vulnerability)
2024-06-03 00:00:00
rubygems
rubygems
cvelist
cvelist
CVE-2013-0334
2014-10-31 14:00:00
oraclelinux
oraclelinux
rubygem-bundler and rubygem-thor security, bug fix, and enhancement update
2015-11-23 00:00:00
fedora
fedora
[SECURITY] Fedora 21 Update: rubygem-bundler-1.7.3-1.fc21
2014-10-12 05:07:35
[SECURITY] Fedora 19 Update: rubygem-bundler-1.7.3-1.fc19
2014-10-12 05:02:47
[SECURITY] Fedora 20 Update: rubygem-bundler-1.7.3-1.fc20
2014-10-12 05:07:22
gentoo
gentoo
Bundler: Insecure installation
2016-09-26 00:00:00
redhat
redhat
openvas
openvas
RedHat Update for rubygem-bundler and rubygem-thor RHSA-2015:2180-07
2015-11-20 00:00:00
Fedora Update for rubygem-bundler FEDORA-2014-11630
2014-10-13 00:00:00
Oracle: Security Advisory (ELSA-2015-2180)
2015-11-24 00:00:00
centos
centos
rubygem security update
2015-11-30 19:51:23