Skip to content
OpenAdvisories

Package · Debian

ruby-attr-encrypted

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 7.5
    CVE-2016-7798

    OpenSSL gem for Ruby using inadequate encryption strength

    The openssl gem for Ruby uses the same initialization vector (IV) in GCM Mode (aes-*-gcm) when the IV is set before the key, which makes it easier for context-dependent attackers to bypass the encryption protection mechanism.

    ruby2.3 ruby2.0 ruby1.9.1 openssl Debian Ubuntu RubyGems