Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
photonPhotonPHSA-2024-5.0-0247
HistoryApr 16, 2024 - 12:00 a.m.

Important Photon OS Security Update - PHSA-2024-5.0-0247

2024-04-1600:00:00
github.com
3
photon os
security update
phsa-2024-5.0-0247
ruby
unix

9.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

8.5 High

AI Score

Confidence

Low

0.002 Low

EPSS

Percentile

60.9%

JSON

Updates of [‘ruby’] packages of Photon OS have been released.

OSVersionArchitecturePackageVersionFilename
Photon5.0x86_64ruby< 3.1.4-1.ph5ruby-3.1.4-1.ph5.x86_64.rpm

Related

redhatcve 3
nvd 4
ubuntucve 3
openvas 25
cloudfoundry 4
debiancve 3
nessus 58
osv 26
hackerone 3
cvelist 3
cve 3
ubuntu 4
veracode 3
prion 2
github 3
fedora 6
rubygems 1
oraclelinux 8
almalinux 8
rocky 5
redhat 4
alpinelinux 2
cgr 3
cbl_mariner 1
vulnrichment 1
wolfi 3
freebsd 1
redos 1
slackware 2
debian 2
photon 2
zdt 1
mageia 1
redhatcve
redhatcve
CVE-2023-36617
2023-07-13 11:36:22
CVE-2024-27280
2024-03-21 18:15:36
CVE-2023-28755
2023-04-03 14:43:40
nvd
nvd
CVE-2023-36617
2023-06-29 13:15:09
CVE-2024-27280
2024-05-14 15:11:56
CVE-2023-28755
2023-03-31 04:15:09
ubuntucve
ubuntucve
CVE-2023-36617
2023-06-29 00:00:00
CVE-2024-27280
2024-05-14 00:00:00
CVE-2023-28755
2023-03-31 00:00:00
openvas
openvas
Huawei EulerOS: Security Advisory for ruby (EulerOS-SA-2023-2800)
2023-09-11 00:00:00
Ubuntu: Security Advisory (USN-6219-1)
2023-07-13 00:00:00
Huawei EulerOS: Security Advisory for ruby (EulerOS-SA-2023-2851)
2023-09-20 00:00:00
cloudfoundry
cloudfoundry
USN-6219-1: Ruby vulnerabilities | Cloud Foundry
2023-09-28 00:00:00
USN-6055-2: Ruby regression | Cloud Foundry
2023-06-30 00:00:00
USN-6055-1: Ruby vulnerabilities | Cloud Foundry
2023-06-30 00:00:00
debiancve
debiancve
CVE-2023-36617
2023-06-29 13:15:09
CVE-2024-27280
2024-05-14 15:11:56
CVE-2023-28755
2023-03-31 04:15:09
nessus
nessus
Ubuntu 16.04 ESM / 18.04 ESM / 20.04 LTS / 22.04 LTS / 23.04 : Ruby vulnerabilities (USN-6219-1)
2023-07-12 00:00:00
EulerOS 2.0 SP10 : ruby (EulerOS-SA-2023-2824)
2024-01-16 00:00:00
EulerOS 2.0 SP11 : ruby (EulerOS-SA-2023-2868)
2024-01-16 00:00:00
osv
osv
URI gem has ReDoS vulnerability
2023-06-29 15:30:34
ruby2.3, ruby2.5, ruby2.7, ruby3.0, ruby3.1 vulnerabilities
2023-07-12 14:47:58
CVE-2023-36617
2023-06-29 13:15:09
hackerone
hackerone
Internet Bug Bounty: CVE-2023-36617: ReDoS vulnerability in URI (Ruby)
2023-07-17 05:09:41
Ruby: URI parser's RFC3986 regular expression has poor performance when there are two # characters, leading to ReDoS
2022-01-09 14:12:19
Internet Bug Bounty: CVE-2023-28755: ReDoS vulnerability in URI
2023-04-13 02:03:53
cvelist
cvelist
CVE-2023-36617
2023-06-29 00:00:00
CVE-2024-27280
1976-01-01 00:00:00
CVE-2023-28755
2023-03-31 00:00:00
cve
cve
CVE-2023-36617
2023-06-29 13:15:09
CVE-2024-27280
2024-05-14 15:11:56
CVE-2023-28755
2023-03-31 04:15:09
ubuntu
ubuntu
Ruby vulnerabilities
2023-07-12 00:00:00
Ruby regression
2023-05-05 00:00:00
Ruby vulnerabilities
2023-05-04 00:00:00
veracode
veracode
Regular Expression Denial Of Service (ReDoS)
2023-06-30 03:59:11
Buffer Over-read
2024-03-29 07:40:04
Regular Expression Denial Of Service (ReDoS)
2023-04-04 14:02:44
prion
prion
Design/Logic Flaw
2023-06-29 13:15:00
Authentication flaw
2023-03-31 04:15:00
github
github
URI gem has ReDoS vulnerability
2023-06-29 15:30:34
StringIO buffer overread vulnerability
2024-03-25 19:36:52
Ruby URI component ReDoS issue
2023-03-31 06:30:15
fedora
fedora
[SECURITY] Fedora 39 Update: ruby-3.2.4-182.fc39
2024-05-04 01:33:23
[SECURITY] Fedora 38 Update: ruby-3.2.4-182.fc38
2024-05-04 02:20:05
[SECURITY] Fedora 38 Update: ruby-3.2.2-180.fc38
2023-04-15 02:16:08
rubygems
rubygems
ReDoS vulnerability in URI
2023-06-28 21:00:00
oraclelinux
oraclelinux
ruby:3.1 security, bug fix, and enhancement update
2024-03-20 00:00:00
ruby:3.1 security, bug fix, and enhancement update
2024-04-02 00:00:00
ruby:3.0 security update
2024-05-31 00:00:00
almalinux
almalinux
Moderate: ruby:3.1 security, bug fix, and enhancement update
2024-03-19 00:00:00
Moderate: ruby:3.1 security, bug fix, and enhancement update
2024-04-01 00:00:00
Moderate: ruby:3.0 security update
2024-05-30 00:00:00
rocky
rocky
ruby:3.1 security, bug fix, and enhancement update
2024-03-27 04:34:32
ruby:3.1 security, bug fix, and enhancement update
2024-04-05 14:57:12
ruby:3.1 security, bug fix, and enhancement update
2024-06-14 13:59:30
redhat
redhat
(RHSA-2024:1576) Moderate: ruby:3.1 security, bug fix, and enhancement update
2024-04-01 00:57:59
(RHSA-2024:1431) Moderate: ruby:3.1 security, bug fix, and enhancement update
2024-03-19 18:23:24
(RHSA-2024:3500) Moderate: ruby:3.0 security update
2024-05-30 12:07:40
alpinelinux
alpinelinux
CVE-2024-27280
2024-05-14 15:11:56
CVE-2023-28755
2023-03-31 04:15:09
cgr
cgr
CVE-2024-27280 vulnerabilities
2024-05-19 03:07:16
CVE-2023-36617 vulnerabilities
2024-05-19 03:07:16
CVE-2023-28755 vulnerabilities
2024-05-19 03:07:16
cbl_mariner
cbl_mariner
CVE-2023-36617 affecting package ruby for versions less than 3.1.4-2
2023-08-30 14:44:06
vulnrichment
vulnrichment
CVE-2024-27280
1976-01-01 00:00:00
wolfi
wolfi
CVE-2024-27280 vulnerabilities
2024-06-26 09:08:30
CVE-2023-36617 vulnerabilities
2024-06-26 09:08:30
CVE-2023-28755 vulnerabilities
2024-06-26 09:08:30
freebsd
freebsd
rubygem-uri -- ReDoS vulnerability
2023-03-28 00:00:00
redos
redos
ROS-20230929-01
2023-09-29 00:00:00
slackware
slackware
[slackware-security] ruby
2023-03-31 18:29:16
[slackware-security] ruby
2024-04-23 22:33:22
debian
debian
[SECURITY] [DSA 5677-1] ruby3.1 security update
2024-05-03 19:47:30
[SECURITY] [DLA 3447-1] ruby2.5 security update
2023-06-07 20:38:22
photon
photon
Critical Photon OS Security Update - PHSA-2024-4.0-0592
2024-04-17 00:00:00
Critical Photon OS Security Update - PHSA-2023-3.0-0687
2023-11-15 00:00:00
zdt
zdt
VMware Cloud Director 10.5 - Bypass identity verification Exploit
2024-03-12 00:00:00
mageia
mageia
Updated ruby packages fix security vulnerabilities
2024-05-09 05:40:29

9.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

8.5 High

AI Score

Confidence

Low

0.002 Low

EPSS

Percentile

60.9%

JSON
Related for PHSA-2024-5.0-0247
redhatcve3nvd4ubuntucve3openvas25cloudfoundry4debiancve3nessus58osv26hackerone3cvelist3cve3ubuntu4veracode3prion2github3fedora6rubygems1oraclelinux8almalinux8rocky5redhat4alpinelinux2cgr3cbl_mariner1vulnrichment1wolfi3freebsd1redos1slackware2debian2photon2zdt1mageia1