1. Home
  2. Security Advisories
  3. Fedora
  4. FEDORA-2024-31cac8b8ec

[FEDORA-2024-31cac8b8ec] Fedora 39: ruby

Severity Critical
Affected Packages 1
CVEs 5
Info Packages References Vulnerabilities
Source # ID Name URL
Bugzilla 2270749 Bug #2270749 - CVE-2024-27281 ruby: RCE vulnerability with .rdoc_options in RDoc https://bugzilla.redhat.com/show_bug.cgi?id=2270749
Bugzilla 2270750 Bug #2270750 - CVE-2024-27280 ruby: Buffer overread vulnerability in StringIO https://bugzilla.redhat.com/show_bug.cgi?id=2270750
Bugzilla 2276810 Bug #2276810 - CVE-2024-27282 ruby: Arbitrary memory address read vulnerability with Regex search https://bugzilla.redhat.com/show_bug.cgi?id=2276810
Bugzilla 2218614 Bug #2218614 - CVE-2023-36617 rubygem-uri: ReDoS vulnerability - upstream's incomplete fix for CVE-2023-28755 https://bugzilla.redhat.com/show_bug.cgi?id=2218614
Type Package URL Namespace Name / Product Version Distribution / Platform Arch Patch / Fix
Affected pkg:rpm/fedora/ruby?distro=fedora-39 fedora ruby < 3.2.4.182.fc39 fedora-39
# CVE Description CVSS EPSS EPSS Trend (30 days) Affected Products Weaknesses Security Advisories Exploits PoC Pubblication Date Modification Date
# CVE Description CVSS EPSS EPSS Trend (30 days) Affected Products Weaknesses Security Advisories PoC Pubblication Date Modification Date