Skip to content
OpenAdvisories

Package · RubyGems

openssl

3 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

3 results · Feed

  • Critical 9.8
    CVE-2018-16395 EPSS 11%

    Ruby Openssl Allows Incorrect Value Comparison

    An issue was discovered in the OpenSSL library in Ruby before 2.3.8, 2.4.x before 2.4.5, 2.5.x before 2.5.2, and 2.6.x before 2.6.0-preview3. When two OpenSSL::X509::Name objects are compared using ==, depending on the ordering, non-equal objects may return t…

    ruby2.3 ruby ruby2.5 ruby2.0 Ubuntu Alpine RubyGems
  • High 7.5
    CVE-2017-14033

    Ruby OpenSSL DoS Vulnerability

    The decode method in the OpenSSL::ASN1 module in Ruby before 2.2.8, 2.3.x before 2.3.5, and 2.4.x through 2.4.1 allows attackers to cause a denial of service (interpreter crash) via a crafted string.

    ruby2.3 ruby ruby1.9.1 ruby2.2 Ubuntu Alpine RubyGems
  • High 7.5
    CVE-2016-7798

    OpenSSL gem for Ruby using inadequate encryption strength

    The openssl gem for Ruby uses the same initialization vector (IV) in GCM Mode (aes-*-gcm) when the IV is set before the key, which makes it easier for context-dependent attackers to bypass the encryption protection mechanism.

    ruby2.3 ruby2.0 ruby1.9.1 openssl Debian Ubuntu RubyGems