Lucene search
K

17 matches found

Tenable Nessus
Tenable Nessus
added 2025/03/03 12:0 a.m.6 views

Linux Distros Unpatched Vulnerability : CVE-2011-2686

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Ruby before 1.8.7-p352 does not reset the random seed upon forking, which makes it easier for context- dependent attackers to predict the values of random numbe...

5CVSS7.2AI score0.02582EPSS
Exploits1References2
OpenVAS
OpenVAS
added 2023/03/08 12:0 a.m.24 views

Debian: Security Advisory (DLA-88-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.8CVSS7.5AI score0.05555EPSS
Exploits5References2
OpenVAS
OpenVAS
added 2021/06/09 12:0 a.m.26 views

SUSE: Security Advisory (SUSE-SU-2012:0147-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.8CVSS6.7AI score0.04246EPSS
Exploits3References3
Tenable Nessus
Tenable Nessus
added 2015/03/26 12:0 a.m.39 views

Debian DLA-88-1 : ruby1.8 security update

This update fixes multiple local and remote denial of service and remote code execute problems : CVE-2011-0188 Properly allocate memory, to prevent arbitrary code execution or application crash. Reported by Drew Yao. CVE-2011-2686 Reinitialize the random seed when forking to prevent CVE-2003-0900...

7.8CVSS7.5AI score0.05555EPSS
Exploits5References8
OSV
OSV
added 2014/11/21 12:0 a.m.45 views

DLA-88-1 ruby1.8 - security update

Bulletin has no description...

7.8CVSS6.1AI score0.05555EPSS
Exploits5
Tenable Nessus
Tenable Nessus
added 2013/04/04 12:0 a.m.28 views

SuSE 10 Security Update : ruby (ZYPP Patch Number 8524)

The ruby interpreter received a fix for two security issues : - Ruby's $SAFE mechanism enables untrusted user codes to run in $SAFE = 4 mode. This is a kind of sandboxing so some operations are restricted in that mode to protect other data outside the sandbox. CVE-2012-4466 The problem found was...

5CVSS8.1AI score0.06617EPSS
Exploits3References10
OpenVAS
OpenVAS
added 2012/07/30 12:0 a.m.25 views

CentOS Update for ruby CESA-2012:0070 centos5

The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

7.8CVSS8.3AI score0.04246EPSS
Exploits3References2
OpenVAS
OpenVAS
added 2012/03/07 12:0 a.m.24 views

Ubuntu: Security Advisory (USN-1377-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.8CVSS6.9AI score0.04246EPSS
Exploits5References2
OpenVAS
OpenVAS
added 2012/02/01 12:0 a.m.26 views

RedHat Update for ruby RHSA-2012:0070-01

Check for the Version of ruby OpenVAS Vulnerability Test RedHat Update for ruby RHSA-2012:0070-01 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms o...

7.8CVSS6.4AI score0.04246EPSS
Exploits3References2
NVD
NVD
added 2011/08/05 9:55 p.m.18 views

CVE-2011-2686

Ruby before 1.8.7-p352 does not reset the random seed upon forking, which makes it easier for context-dependent attackers to predict the values of random numbers by leveraging knowledge of the number sequence obtained in a different child process, a related issue to CVE-2003-0900. NOTE: this issu...

5CVSS6.2AI score0.02582EPSS
Exploits1References13
CVE
CVE
added 2011/08/05 9:0 p.m.73 views

CVE-2011-2686

CVE-2011-2686 affects Ruby (MRI) older than 1.8.7-p352; it arises from a regression in 1.8.6 where the random seed is not reset on fork, allowing context-dependent attackers to predict random numbers from a child process. The issue is fixed in Ruby 1.8.7-p352 and later. No exploitation details ar...

5CVSS6.2AI score0.02582EPSS
Exploits1References13Affected Software1
Cvelist
Cvelist
added 2011/08/05 9:0 p.m.34 views

CVE-2011-2686

Ruby before 1.8.7-p352 does not reset the random seed upon forking, which makes it easier for context-dependent attackers to predict the values of random numbers by leveraging knowledge of the number sequence obtained in a different child process, a related issue to CVE-2003-0900. NOTE: this issu...

6.1AI score0.02582EPSS
Exploits1References13
UbuntuCve
UbuntuCve
added 2011/08/05 12:0 a.m.25 views

CVE-2011-2686

Ruby before 1.8.7-p352 does not reset the random seed upon forking, which makes it easier for context-dependent attackers to predict the values of random numbers by leveraging knowledge of the number sequence obtained in a different child process, a related issue to CVE-2003-0900. NOTE: this issu...

5CVSS7.1AI score0.02582EPSS
Exploits1References2
OpenVAS
OpenVAS
added 2011/07/27 12:0 a.m.37 views

Fedora Update for ruby FEDORA-2011-9374

The remote host is missing an update for the SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

5CVSS5.8AI score0.02582EPSS
Exploits1References2
OpenVAS
OpenVAS
added 2011/07/27 12:0 a.m.27 views

Fedora Update for ruby FEDORA-2011-9359

Check for the Version of ruby OpenVAS Vulnerability Test Fedora Update for ruby FEDORA-2011-9359 Authors: System Generated Check Copyright: Copyright c 2011 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms of...

5CVSS5.7AI score0.02582EPSS
Exploits1References2
Tenable Nessus
Tenable Nessus
added 2011/07/26 12:0 a.m.41 views

Fedora 15 : ruby-1.8.7.352-1.fc15 (2011-9359)

New version 1.8.7p352 is released, fixing randomization process in forked process CVE-2011-2686. Also ruby path is fixed to have no duplicate directories on all archs. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory...

5CVSS7.3AI score0.02582EPSS
Exploits1References4
Tenable Nessus
Tenable Nessus
added 2011/07/26 12:0 a.m.34 views

Fedora 14 : ruby-1.8.7.352-1.fc14 (2011-9374)

New version 1.8.7p352 is released, fixing randomization process in forked process CVE-2011-2686. Also ruby path is fixed to have no duplicate directories on all archs. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory...

5CVSS7.3AI score0.02582EPSS
Exploits1References4
Rows per page
Query Builder