2 matches found
Debian DSA-3247-1 : ruby2.1 - security update
It was discovered that the Ruby OpenSSL extension, part of the interpreter for the Ruby language, did not properly implement hostname matching, in violation of RFC 6125. This could allow remote attackers to perform a man-in-the-middle attack via crafted SSL certificates. %NASLMINLEVEL 70300 C...
5.9CVSS7AI score0.02815EPSS
SaveExploits0References3
Debian: Security Advisory (DSA-3247-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
5.9CVSS6.2AI score0.02815EPSS
SaveExploits0References3
20