Поиск уязвимостей
Количество 10
Количество 10
BDU:2015-09978
Уязвимость интерпретатора Ruby, позволяющая нарушителю подменить SSL-сервер
CVE-2015-1855
verify_certificate_identity in the OpenSSL extension in Ruby before 2.0.0 patchlevel 645, 2.1.x before 2.1.6, and 2.2.x before 2.2.2 does not properly validate hostnames, which allows remote attackers to spoof servers via vectors related to (1) multiple wildcards, (1) wildcards in IDNA names, (3) case sensitivity, and (4) non-ASCII characters.
CVE-2015-1855
verify_certificate_identity in the OpenSSL extension in Ruby before 2.0.0 patchlevel 645, 2.1.x before 2.1.6, and 2.2.x before 2.2.2 does not properly validate hostnames, which allows remote attackers to spoof servers via vectors related to (1) multiple wildcards, (1) wildcards in IDNA names, (3) case sensitivity, and (4) non-ASCII characters.
CVE-2015-1855
verify_certificate_identity in the OpenSSL extension in Ruby before 2.0.0 patchlevel 645, 2.1.x before 2.1.6, and 2.2.x before 2.2.2 does not properly validate hostnames, which allows remote attackers to spoof servers via vectors related to (1) multiple wildcards, (1) wildcards in IDNA names, (3) case sensitivity, and (4) non-ASCII characters.
CVE-2015-1855
verify_certificate_identity in the OpenSSL extension in Ruby before 2. ...
ALT-PU-2016-2061
ALT-PU-2016-2061: package `ruby` update to version 2.3.1-alt1
GHSA-4x8v-74xf-h4g3
verify_certificate_identity in the OpenSSL extension in Ruby before 2.0.0 patchlevel 645, 2.1.x before 2.1.6, and 2.2.x before 2.2.2 does not properly validate hostnames, which allows remote attackers to spoof servers via vectors related to (1) multiple wildcards, (1) wildcards in IDNA names, (3) case sensitivity, and (4) non-ASCII characters.
SUSE-SU-2017:0948-1
Security update for ruby
openSUSE-SU-2017:1128-1
Security update for ruby2.1
SUSE-SU-2017:1067-1
Security update for ruby2.1
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | BDU:2015-09978 Уязвимость интерпретатора Ruby, позволяющая нарушителю подменить SSL-сервер | CVSS2: 4.3 | 3% Низкий | больше 11 лет назад |
 | CVE-2015-1855 verify_certificate_identity in the OpenSSL extension in Ruby before 2.0.0 patchlevel 645, 2.1.x before 2.1.6, and 2.2.x before 2.2.2 does not properly validate hostnames, which allows remote attackers to spoof servers via vectors related to (1) multiple wildcards, (1) wildcards in IDNA names, (3) case sensitivity, and (4) non-ASCII characters. | CVSS3: 5.9 | 3% Низкий | почти 7 лет назад |
 | CVE-2015-1855 verify_certificate_identity in the OpenSSL extension in Ruby before 2.0.0 patchlevel 645, 2.1.x before 2.1.6, and 2.2.x before 2.2.2 does not properly validate hostnames, which allows remote attackers to spoof servers via vectors related to (1) multiple wildcards, (1) wildcards in IDNA names, (3) case sensitivity, and (4) non-ASCII characters. | CVSS2: 4 | 3% Низкий | больше 11 лет назад |
 | CVE-2015-1855 verify_certificate_identity in the OpenSSL extension in Ruby before 2.0.0 patchlevel 645, 2.1.x before 2.1.6, and 2.2.x before 2.2.2 does not properly validate hostnames, which allows remote attackers to spoof servers via vectors related to (1) multiple wildcards, (1) wildcards in IDNA names, (3) case sensitivity, and (4) non-ASCII characters. | CVSS3: 5.9 | 3% Низкий | почти 7 лет назад |
| CVE-2015-1855 verify_certificate_identity in the OpenSSL extension in Ruby before 2. ... | CVSS3: 5.9 | 3% Низкий | почти 7 лет назад |
| ALT-PU-2016-2061 ALT-PU-2016-2061: package `ruby` update to version 2.3.1-alt1 | CVSS3: 8.4 | около 10 лет назад | |
| GHSA-4x8v-74xf-h4g3 verify_certificate_identity in the OpenSSL extension in Ruby before 2.0.0 patchlevel 645, 2.1.x before 2.1.6, and 2.2.x before 2.2.2 does not properly validate hostnames, which allows remote attackers to spoof servers via vectors related to (1) multiple wildcards, (1) wildcards in IDNA names, (3) case sensitivity, and (4) non-ASCII characters. | 3% Низкий | больше 4 лет назад | |
 | SUSE-SU-2017:0948-1 Security update for ruby | больше 9 лет назад | ||
| openSUSE-SU-2017:1128-1 Security update for ruby2.1 | больше 9 лет назад | ||
| SUSE-SU-2017:1067-1 Security update for ruby2.1 | больше 9 лет назад |
Уязвимостей на страницу