CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

4 matches found

NVD•added 2018/06/22 6:29 p.m.•18 views

CVE-2018-1000201

ruby-ffi version 1.9.23 and earlier has a DLL loading issue which can be hijacked on Windows OS, when a Symbol is used as DLL name instead of a String This vulnerability appears to have been fixed in v1.9.24 and later...

7.8CVSS7.6AI score0.01351EPSS

Exploits0References2

Debian CVE•added 2018/06/22 6:0 p.m.•24 views

CVE-2018-1000201

7.8CVSS7.7AI score0.01351EPSS

Exploits0

CVE•added 2018/06/22 6:0 p.m.•74 views

CVE-2018-1000201

CVE-2018-1000201 affects ruby-ffi ≤ 1.9.23, where a DLL loading issue can be hijacked on Windows when a Symbol is used as a DLL name instead of a String. This vulnerability appears to have been fixed in v1.9.24 and later. IBM X-Force/OSV entries corroborate the issue and note the patch release. E...

7.8CVSS7.6AI score0.01351EPSS

Exploits0References2Affected Software1