Search CVE reports
51 – 51 of 51 results
CVE-2017-17790
Medium prioritySome fixes available 4 of 5
The lazy_initialize function in lib/resolv.rb in Ruby through 2.4.3 uses Kernel#open, which might allow Command Injection attacks, as demonstrated by a Resolv::Hosts::new argument beginning with a '|' character, a different...
3 affected packages
ruby1.9.1, ruby2.3, ruby2.5
| Package | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS | 16.04 LTS |
|---|---|---|---|---|---|
| ruby1.9.1 | — | — | — | Not in release | Not in release |
| ruby2.3 | — | — | — | Not in release | Fixed |
| ruby2.5 | — | — | — | Fixed | Not in release |