Skip to content
OpenAdvisories

Package · Ubuntu

ruby2.0

38 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

4 results · Clear filters · Feed

  • Unscored —
    CVE-2015-1855 Public exploit

    verify_certificate_identity in the OpenSSL extension in Ruby before 2.0.0 patchlevel 645, 2.1.x before 2.1.6, and 2.2.x…

    ruby Ruby ruby2.0 ruby1.9.1 Ubuntu
  • Unscored —
    CVE-2017-17405 Public exploit EPSS 74%

    Ruby before 2.4.3 allows Net::FTP command injection. Net::FTP#get, getbinaryfile, gettextfile, put, putbinaryfile, and …

    ruby2.3 ruby ruby2.0 ruby1.9.1 Ubuntu Alpine
  • High 7.5
    CVE-2017-0901 Public exploit EPSS 29%

    RubyGems may allow a maliciously crafted gem to overwrite files

    RubyGems version 2.6.12 and earlier fails to validate specification names, allowing a maliciously crafted gem to potentially overwrite any file on the filesystem.

    HackerOne RubyGems ruby2.3 ruby Debian Ubuntu Alpine RubyGems
  • Unscored —
    CVE-2013-4164 Public exploit EPSS 35%

    Heap-based buffer overflow in Ruby 1.8, 1.9 before 1.9.3-p484, 2.0 before 2.0.0-p353, 2.1 before 2.1.0 preview2, and tr…

    ruby2.0 ruby1.9.1 Ubuntu