Lucene search
+L

21 matches found

OSV
OSV
added 2015/09/08 5:55 p.m.10 views

MGASA-2015-0345 Updated ruby-RubyGems packages fix security vulnerabilities

Updated ruby-RubyGems package fixes security vulnerability: RubyGems does not validate the hostname when fetching gems or making API request, which allows remote attackers to redirect requests to arbitrary domains via a crafted DNS SRV record, aka a "DNS hijack attack" CVE-2015-3900...

5CVSS5.7AI score0.08934EPSS
SaveExploits0References3
Rows per page
Query Builder