Information Disclosure

🗓️ 11 Jul 2021 16:10:12Reported by Veracode Vulnerability DatabaseType

veracode🔗 sca.analysiscenter.veracode.com👁 26 Views

Vulnerability in ruby2.7:sid for denial of service

Reporter	Title	Published	Views	Family All 216
FreeBSD	Ruby -- multiple vulnerabilities	7 Jul 202100:00	–	freebsd
Tenable Nessus	Amazon Linux 2 : ruby (ALAS-2024-2534)	30 Apr 202400:00	–	nessus
Tenable Nessus	Amazon Linux 2 : ruby (ALASRUBY2.6-2023-004)	27 Sep 202300:00	–	nessus
Tenable Nessus	Amazon Linux 2 : ruby (ALASRUBY3.0-2023-005)	27 Sep 202300:00	–	nessus
Tenable Nessus	Alibaba Cloud Linux 3 : 0054: ruby:2.7 (ALINUX3-SA-2021:0054)	14 May 202500:00	–	nessus
Tenable Nessus	AlmaLinux 8 : ruby:2.6 (ALSA-2022:0543)	11 Mar 202200:00	–	nessus
Tenable Nessus	AlmaLinux 8 : ruby:2.5 (ALSA-2022:0672)	11 Mar 202200:00	–	nessus
Tenable Nessus	CentOS 8 : ruby:2.7 (CESA-2021:3020)	9 Aug 202100:00	–	nessus
Tenable Nessus	CentOS 8 : ruby:2.6 (CESA-2022:0543)	16 Feb 202200:00	–	nessus
Tenable Nessus	CentOS 8 : ruby:2.5 (CESA-2022:0672)	25 Feb 202200:00	–	nessus

Vulners

Node

ruby2.7 ruby2.7Match2.7.2-3debian

AND

debian debian_linuxMatch999

ruby2.7 ruby2.7Match2.7.2-3debian

AND

debian debian_linuxMatch11

ruby rubyMatch2.7.1-r3os

AND

ruby rubyMatch2.7.2-r3os

AND

ruby rubyMatch2.7.3-r0os

AND

ruby rubyMatch2.6.5-r2os

AND

ruby rubyMatch2.7.3-r1os

AND

ruby rubyMatch2.6.6-r4os

AND

ruby rubyMatch2.7.2-r4os

AND

ruby rubyMatch2.6.6-r2os

AND

alpinelinux alpine_linuxMatchedge

ruby rubyMatch2.7.3-r1os

AND

alpinelinux alpine_linuxMatch3.14

ruby rubyMatch2.7.3-r0os

AND

ruby rubyMatch2.7.2-r0os

AND

ruby rubyMatch2.7.1-r3os

AND

ruby rubyMatch2.7.2-r1os

AND

alpinelinux alpine_linuxMatch3.12

ruby rubyMatch2.7.3-r0os

AND

ruby rubyMatch2.7.2-r4os

AND

ruby rubyMatch2.7.2-r3os

AND

alpinelinux alpine_linuxMatch3.13

ruby rubyMatch2.6.6-r2os

AND

ruby rubyMatch2.6.7-r0os

AND

ruby rubyMatch2.6.6-r3os

AND

alpinelinux alpine_linuxMatch3.11

devel develMatch2.7.1-3debian

AND

devel develMatch2.7.2-3debian

AND

devel develMatch2.7.1-3build1debian

AND

devel develMatch2.7.2-4debian

AND

debian debian_linux

focal focalMatch2.7.0-5ubuntu1.1debian

AND

focal focalMatch2.7.0-5ubuntu1debian

AND

focal focalMatch2.7.0-5ubuntu1.2debian

AND

debian debian_linux

hirsute hirsuteMatch2.7.2-3debian

AND

debian debian_linux

google bionicMatch2.5.1-1ubuntu1debian

AND

google bionicMatch2.5.1-1ubuntu1.7debian

AND

google bionicMatch2.5.1-1ubuntu1.6debian

AND

debian debian_linux

apache groovyMatch2.7.1-3ubuntu1debian

AND

apache groovyMatch2.7.1-3ubuntu1.1debian

AND

apache groovyMatch2.7.1-3build1debian

AND

debian debian_linux

ruby2.3 ruby2.3Match2.3.3-1+deb9u8debian

AND

debian debian_linuxMatch9

ruby2.5 ruby2.5Match2.5.5-3+deb10u2debian

AND

ruby2.5 ruby2.5Match2.5.5-3+deb10u3debian

AND

debian debian_linuxMatch10

jruby jrubyMatch9.1.17.0-3debian

AND

debian debian_linuxMatch999

rh-ruby26-ruby rh-ruby26-rubyMatch2.6.2_118.el7

ruby rubyMatch1.8.7.374_4.el6_6

ruby rubyMatch2.0.0.648_34.el7_6

ruby rubyMatch1.8.7.299_4.el6

ruby rubyMatch1.8.7.352_10.el6_4

ruby rubyMatch1.8.7.299_7.el6

ruby rubyMatch2.4.9_93.el7cf

ruby rubyMatch1.8.7.374_3.el6_6

ruby rubyMatch1.8.7.352_12.el6_4

ruby rubyMatch2.4.6_91.el7cf

ruby rubyMatch1.8.7.374_5.el6

ruby rubyMatch1.8.7.299_5.el6_0.1

ruby rubyMatch2.0.0.598_25.ael7b_1

ruby rubyMatch2.4.5_90.el7cf

ruby rubyMatch1.8.7.352_7.el6_2

ruby rubyMatch1.8.7.299_7.el6_1.1

ruby rubyMatch1.8.7.374_2.el6

ruby rubyMatch1.8.7.352_6.el6

ruby rubyMatch1.8.7.352_3.el6

ruby rubyMatch2.0.0.648_36.el7

ruby rubyMatch2.0.0.648_35.el7_6

ruby rubyMatch1.8.7.352_4.el6_2

ruby rubyMatch1.8.7.352_13.el6

ruby rubyMatch2.0.0.648_39.el7_9

Source	Link
lists	www.lists.debian.org/debian-lts-announce/2021/10/msg00009.html
lists	www.lists.debian.org/debian-lts-announce/2023/04/msg00033.html
security-tracker	www.security-tracker.debian.org/tracker/CVE-2021-31810
lists	www.lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/MWXHK5UUHVSHF7HTHMX6JY3WXDVNIHSL/
lists	www.lists.fedoraproject.org/archives/list/[email protected]/message/MWXHK5UUHVSHF7HTHMX6JY3WXDVNIHSL/
security	www.security.gentoo.org/glsa/202401-27
hackerone	www.hackerone.com/reports/1145454
security	www.security.netapp.com/advisory/ntap-20210917-0001/
oracle	www.oracle.com/security-alerts/cpuapr2022.html
ruby-lang	www.ruby-lang.org/en/news/2021/07/07/trusting-pasv-responses-in-net-ftp/

24 Jan 2024 06:21Current

6.5Medium risk

Vulners AI Score6.5

CVSS 25

CVSS 3.15.8

EPSS0.00668