Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2025-27788

Опубликовано: 12 мар. 2025
Источник: nvd
CVSS3: 7.5
EPSS Низкий

Описание

JSON is a JSON implementation for Ruby. Starting in version 2.10.0 and prior to version 2.10.2, a specially crafted document could cause an out of bound read, most likely resulting in a crash. Versions prior to 2.10.0 are not vulnerable. Version 2.10.2 fixes the problem. No known workarounds are available.

Уязвимые конфигурации

Конфигурация 1
cpe:2.3:a:ruby-lang:javascript_object_notation:*:*:*:*:*:ruby:*:*
Версия от 2.10.0 (включая) до 2.10.2 (исключая)

EPSS

Процентиль: 38%
0.00166
Низкий

7.5 High

CVSS3

Дефекты

CWE-125

Связанные уязвимости

CVSS3: 7.5
ubuntu
6 месяцев назад

JSON is a JSON implementation for Ruby. Starting in version 2.10.0 and prior to version 2.10.2, a specially crafted document could cause an out of bound read, most likely resulting in a crash. Versions prior to 2.10.0 are not vulnerable. Version 2.10.2 fixes the problem. No known workarounds are available.

CVSS3: 7.5
redhat
6 месяцев назад

JSON is a JSON implementation for Ruby. Starting in version 2.10.0 and prior to version 2.10.2, a specially crafted document could cause an out of bound read, most likely resulting in a crash. Versions prior to 2.10.0 are not vulnerable. Version 2.10.2 fixes the problem. No known workarounds are available.

CVSS3: 7.5
debian
6 месяцев назад

JSON is a JSON implementation for Ruby. Starting in version 2.10.0 and ...

CVSS3: 7.5
github
6 месяцев назад

Out-of-bounds Read in Ruby JSON Parser

CVSS3: 7.5
fstec
6 месяцев назад

Уязвимость расширения JSON Gem интерпретатора языка программирования Ruby, позволяющая нарушителю вызвать отказ в обслуживании

EPSS

Процентиль: 38%
0.00166
Низкий

7.5 High

CVSS3

Дефекты

CWE-125