Skip to content
OpenAdvisories
Unscored DSA-1652-1 5 CVEs

ruby1.9 - several vulnerabilities

Published Oct 12, 2008 · Updated Mar 9, 2026

Ecosystem: Debian

Fixed packages 1

ReleasePackageFixed in
Debian · 4.0 ruby1.9 1.9.0+20060609-1etch3

Vulnerabilities 5

  • Unscored —
    CVE-2008-3655 Public exploit EPSS 14%

    Ruby 1.8.5 and earlier, 1.8.6 through 1.8.6-p286, 1.8.7 through 1.8.7-p71, and 1.9 through r18423 does not properly res…

  • Unscored —
    CVE-2008-3656 Public exploit EPSS 70%

    Algorithmic complexity vulnerability in the WEBrick::HTTPUtils.split_header_value function in WEBrick::HTTP::DefaultFil…

  • Unscored —
    CVE-2008-3657 Public exploit EPSS 14%

    The dl module in Ruby 1.8.5 and earlier, 1.8.6 through 1.8.6-p286, 1.8.7 through 1.8.7-p71, and 1.9 through r18423 does…

  • Unscored —
    CVE-2008-3790 Public exploit EPSS 15%

    The REXML module in Ruby 1.8.6 through 1.8.6-p287, 1.8.7 through 1.8.7-p72, and 1.9 allows context-dependent attackers …

  • Unscored —
    CVE-2008-3905

    resolv.rb in Ruby 1.8.5 and earlier, 1.8.6 before 1.8.6-p287, 1.8.7 before 1.8.7-p72, and 1.9 r18423 and earlier uses s…