19577 matches found
CVE-2023-5349
CVE-2023-5349 concerns a memory-leak flaw in ruby-magick (ruby-rmagick), the Ruby binding for ImageMagick. The issue can cause denial of service via memory exhaustion. Affected packages include ruby-rmagick in Debian (fixed in 2.16.0-7+deb11u1 per DLA-4433-1), Fedora rubygem-rmagick (fixes in FED...
CVE-2023-5349 Draw while calling getdrawinfo()
A memory leak flaw was found in ruby-magick, an interface between Ruby and ImageMagick. This issue can lead to a denial of service DOS by memory exhaustion...
CVE-2023-5349
A memory leak flaw was found in ruby-magick, an interface between Ruby and ImageMagick. This issue can lead to a denial of service DOS by memory exhaustion...
CVE-2023-5349: Missing Release of Memory after Effective Lifetime
A memory leak flaw was found in ruby-magick, an interface between Ruby and ImageMagick. This issue can lead to a denial of service DOS by memory exhaustion...
Rack: Multiple Vulnerabilities
Background Rack is a modular Ruby web server interface. Description Multiple vulnerabilities have been discovered in Rack. Please review the CVE identifiers referenced below for details. Impact A possible denial of service vulnerability was found in the multipart parsing component of Rack. A...
memory leak flaw was found in ruby-magick
A memory leak flaw was found in ruby-magick, an interface between Ruby and ImageMagick. This issue can lead to a denial of service DOS by memory exhaustion...
Ruby on Rails URL Redirection
The vulnerability of the Ruby on Rails software platform is related to the redirection of URLs to unreliable websites. Exploiting this vulnerability allows a malicious actor to redirect users to arbitrary URL addresses when using unvalidated external data in the redirectto handler...
Ruby on Rails SQL Injection
The vulnerability of the Active Record component of the Ruby on Rails software framework lies in the ability to inject SQL code through comments. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...
SUSE SLED15: libruby2_5-2_5 / ruby2.5 / ruby2.5-devel / ruby2.5-devel-extra / etc (SUSE-SU-2023:4176-1)
The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2023:4176-1 advisory. - CVE-2023-28755: Fixed a ReDoS vulnerability in URI. bsc1209891 - CVE-2023-28756: Fixed an...
Debian: Security Advisory (DSA-5530-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Debian: Security Advisory (DLA-3625-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Denial Of Service (DoS)
ruby-rmagick is vulnerable to Denial of Service DoS. A memory leak allows a remote attackers to create an interface between Ruby and ImageMagick, that could lead to a Deny of Service DOS by memory exhaustion...
[SECURITY] [DSA 5530-1] ruby-rack security update
------------------------------------------------------------------------- Debian Security Advisory DSA-5530-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso October 22, 2023 https://www.debian.org/security/faq -...
[SECURITY] [DLA 3625-1] ruby-rmagick security update
------------------------------------------------------------------------- Debian LTS Advisory DLA-3625-1 [email protected] https://www.debian.org/lts/security/ Bastien Roucariès October 22, 2023 https://wiki.debian.org/LTS -...
DLA-3625-1 ruby-rmagick - security update
Bulletin has no description...
Debian dla-3625 : ruby-rmagick - security update
The remote Debian 10 host has packages installed that are affected by a vulnerability as referenced in the dla-3625 advisory. - ------------------------------------------------------------------------- Debian LTS Advisory DLA-3625-1 [email protected] https://www.debian.org/lts/security/...
Debian DSA-5530-1 : ruby-rack - security update
The remote Debian 11 host has a package installed that is affected by multiple vulnerabilities as referenced in the dsa-5530 advisory. Several vulnerabilities were discovered in ruby-rack, a modular Ruby webserver interface, which may result in denial of service and shell escape sequence injectio...
PT-2023-8777
Name of the Vulnerable Software and Affected Versions ruby-magick affected versions not specified Description The issue is related to memory leak errors in the ruby-magick interface between Ruby and the ImageMagick library. This can lead to a denial of service DOS by memory exhaustion, potentiall...
DSA-5530-1 ruby-rack - security update
Bulletin has no description...
ruby-git: code injection vulnerability
A code injection flaw was found in the ruby-git package. This issue may allow a remote authenticated attacker to execute arbitrary code on the system by using a specially-crafted filename in the repository...