Skip to content
OpenAdvisories
Unscored DSA-2809-1 3 CVEs

ruby1.8 - several

Published Dec 4, 2013 · Updated Mar 9, 2026

Ecosystem: Debian

Fixed packages 2

ReleasePackageFixed in
Debian · 6.0 ruby1.8 1.8.7.302-2squeeze2
Debian · 7 ruby1.8 1.8.7.358-7.1+deb7u1

Vulnerabilities 3

  • Medium —
    CVE-2013-1821

    Ruby vulnerable to denial of service

    lib/rexml/text.rb in the REXML parser in Ruby before 1.9.3-p392 allows remote attackers to cause a denial of service (memory consumption and crash) via crafted text nodes in an XML document, aka an XML Entity Expansion (XEE) attack.

    org.jruby:jruby Maven
  • Unscored —
    CVE-2013-4073

    The OpenSSL::SSL.verify_certificate_identity function in lib/openssl/ssl.rb in Ruby 1.8 before 1.8.7-p374, 1.9 before 1…

  • Unscored —
    CVE-2013-4164 Public exploit EPSS 35%

    Heap-based buffer overflow in Ruby 1.8, 1.9 before 1.9.3-p484, 2.0 before 2.0.0-p353, 2.1 before 2.1.0 preview2, and tr…

    ruby2.0 ruby1.9.1 Ubuntu