Lucene search

CVE-2019-8322

🗓️ 27 Mar 2019 00:00:00Reported by ubuntu.comType

An escape sequence injection vulnerability in RubyGems 2.6 through 3.0.2 allows crafted API responses to be directly output to stdout via the gem owner command

Reporter	Title	Published	Views	Family All 92
Prion	Design/Logic Flaw	17 Jun 201920:15	–	prion
NVD	CVE-2019-8322	17 Jun 201920:15	–	nvd
OSV	RubyGems Escape sequence injection vulnerability in gem owner	20 Jun 201916:06	–	osv
OSV	CVE-2019-8322	17 Jun 201920:15	–	osv
OSV	Red Hat Security Advisory: ruby security update	13 Sep 202421:59	–	osv
OSV	ruby:2.5 bug fix and enhancement update	5 Nov 201917:38	–	osv
OSV	ruby2.1 - security update	29 Mar 201900:00	–	osv
OSV	Red Hat Bug Fix Advisory: ruby:2.5 bug fix and enhancement update	13 Sep 202421:59	–	osv
OSV	Red Hat Security Advisory: rh-ruby24-ruby security, bug fix, and enhancement update	13 Sep 202421:59	–	osv
OSV	Red Hat Security Advisory: CloudForms 4.7.5 security, bug fix and enhancement update	13 Sep 202421:59	–	osv

Source	Link
bugs	www.bugs.ruby-lang.org/attachments/7669%20(for%202.4.5)
bugs	www.bugs.ruby-lang.org/attachments/7670%20(for%202.5.3)
ruby-lang	www.ruby-lang.org/en/news/2019/03/05/multiple-vulnerabilities-in-rubygems/
blog	www.blog.rubygems.org/2019/03/05/security-advisories-2019-03.html
ubuntu	www.ubuntu.com/security/notices/USN-3945-1
cve	www.cve.org/CVERecord
nvd	www.nvd.nist.gov/vuln/detail/CVE-2019-8322
launchpad	www.launchpad.net/bugs/cve/CVE-2019-8322
security-tracker	www.security-tracker.debian.org/tracker/CVE-2019-8322

OS	OS Version	Architecture	Package	Package Version	Filename
ubuntu	18.04	noarch	jruby	any	UNKNOWN
ubuntu	14.04	noarch	jruby	1.5.6-9+deb8u2build0.14.04.1~esm2	UNKNOWN
ubuntu	14.04	noarch	ruby1.9.1	1.9.3.484-2ubuntu1.14	UNKNOWN
ubuntu	14.04	noarch	ruby2.0	2.0.0.484-1ubuntu2.13	UNKNOWN
ubuntu	16.04	noarch	ruby2.3	2.3.1-2~16.04.12	UNKNOWN
ubuntu	18.04	noarch	ruby2.5	2.5.1-1ubuntu1.2	UNKNOWN
ubuntu	18.10	noarch	ruby2.5	2.5.1-5ubuntu4.3	UNKNOWN
ubuntu	19.04	noarch	ruby2.5	2.5.5-1	UNKNOWN
ubuntu	19.10	noarch	ruby2.5	2.5.5-1	UNKNOWN

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

27 Mar 2019 00:00Current

1.3Low risk

Vulners AI Score1.3

CVSS25.0

CVSS37.5

EPSS0.002