Lucene search

CVE-2017-0901

🗓️ 31 Aug 2017 00:00:00Reported by ubuntu.comType

RubyGems v2.6.12 fails to validate spec names, enabling potential file overwrite

Reporter	Title	Published	Views	Family All 96
Cvelist	CVE-2017-0901	31 Aug 201720:00	–	cvelist
AlpineLinux	CVE-2017-0901	31 Aug 201720:29	–	alpinelinux
Veracode	Input Validation	16 May 201902:16	–	veracode
OSV	RubyGems may allow a maliciously crafted gem to overwrite files	13 May 202201:38	–	osv
OSV	CVE-2017-0901	31 Aug 201720:29	–	osv
OSV	rubygems - security update	26 Sep 201700:00	–	osv
OSV	ruby2.3 - security update	5 Sep 201700:00	–	osv
OSV	ruby1.9.1 - security update	26 Sep 201700:00	–	osv
OSV	Red Hat Security Advisory: rh-ruby24-ruby security, bug fix, and enhancement update	13 Sep 202414:43	–	osv
OSV	ruby2.0 regression	25 Mar 202115:43	–	osv

Source	Link
cve	www.cve.mitre.org/cgi-bin/cvename.cgi
nvd	www.nvd.nist.gov/vuln/detail/CVE-2017-0901
launchpad	www.launchpad.net/bugs/cve/CVE-2017-0901
security-tracker	www.security-tracker.debian.org/tracker/CVE-2017-0901

OS	OS Version	Architecture	Package	Package Version	Filename
ubuntu	24.10	noarch	jruby	any	UNKNOWN
ubuntu	24.04	noarch	jruby	any	UNKNOWN
ubuntu	20.04	noarch	jruby	any	UNKNOWN
ubuntu	18.04	noarch	jruby	any	UNKNOWN
ubuntu	16.04	noarch	jruby	any	UNKNOWN
ubuntu	14.04	noarch	jruby	any	UNKNOWN

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

31 Aug 2017 00:00Current

8.8High risk

Vulners AI Score8.8

EPSS0.024