Skip to content
OpenAdvisories
Unscored DLA-172-1 1 CVE

libextlib-ruby - security update

Published Mar 14, 2015 · Updated Mar 9, 2026

Fixed packages 1

ReleasePackageFixed in
Debian · 6.0 libextlib-ruby 0.9.13-2+deb6u1

Vulnerabilities 1

  • High —

    extlib does not properly restrict casts of string values

    The extlib gem 0.9.15 and earlier for Ruby does not properly restrict casts of string values, which might allow remote attackers to conduct object-injection attacks and execute arbitrary code, or cause a denial of service (memory and CPU consumption) by lever…