Ruby through 2.4.7, 2.5.x through 2.5.6, and 2.6.x through 2.6.4 mishandles path checking within File.fnmatch functions.
CVSS Details
- CVSS 3.1 Base Score: 6.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade rubygem-mongo-docUpgrade rubygem-abrtUpgrade rubygem-pg-docUpgrade rubygem-mysql2Upgrade rubygem-mysql2-docUpgrade rubygem-bson-docUpgrade rubygem-abrt-docUpgrade rubygem-bsonUpgrade rubygem-pgUpgrade rubygem-mongo | May 4, 2022 | Nov 26, 2019 |
| Alpine Linux | — | Upgrade ruby | Aug 22, 2024 | Nov 26, 2019 |
| Amazon Linux Ami 2 | — | Upgrade rubygem-bigdecimalUpgrade rubygems-develUpgrade ruby-irbUpgrade ruby-libsUpgrade ruby-debuginfoUpgrade rubygem-bundlerUpgrade rubygem-io-consoleUpgrade rubygem-did_you_meanUpgrade ruby-develUpgrade ruby-tcltkUpgrade rubygem-rakeUpgrade ruby-docUpgrade rubygemsUpgrade rubyUpgrade rubygem-net-telnetUpgrade rubygem-xmlrpcUpgrade rubygem-opensslUpgrade rubygem-test-unitUpgrade rubygem-psychUpgrade rubygem-jsonUpgrade rubygem-irbUpgrade rubygem-rdocUpgrade rubygem-power_assertUpgrade rubygem-minitest | Sep 28, 2023 | Nov 26, 2019 |
| Amazon_linux | — | Upgrade ruby24 | Sep 1, 2020 | Oct 1, 2019 |
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | Nov 26, 2019 |
| Centos_linux | — | Upgrade rubygem-mongo-docUpgrade ruby-debuginfoUpgrade rubygem-pg-debugsourceUpgrade rubygem-test-unitUpgrade rubygem-bundler-docUpgrade ruby-develUpgrade rubygem-did_you_meanUpgrade rubygem-irbUpgrade rubygem-psych-debuginfoUpgrade rubygem-openssl-debuginfoUpgrade ruby-debugsourceUpgrade ruby-docUpgrade rubygem-bundlerUpgrade rubygem-mysql2Upgrade rubygem-jsonUpgrade rubygem-abrtUpgrade rubygem-bsonUpgrade rubygem-rakeUpgrade rubygem-psychUpgrade rubyUpgrade rubygem-bigdecimalUpgrade ruby-libsUpgrade rubygem-io-consoleUpgrade rubygem-xmlrpcUpgrade rubygem-opensslUpgrade rubygem-pgUpgrade rubygem-power_assertUpgrade rubygemsUpgrade rubygem-mysql2-docUpgrade rubygem-mysql2-debugsourceUpgrade rubygem-mysql2-debuginfoUpgrade rubygem-abrt-docUpgrade rubygem-mongoUpgrade rubygem-bigdecimal-debuginfoUpgrade rubygem-bson-debuginfoUpgrade rubygem-net-telnetUpgrade rubygem-pg-debuginfoUpgrade ruby-irbUpgrade rubygem-pg-docUpgrade ruby-libs-debuginfoUpgrade rubygems-develUpgrade rubygem-bson-debugsourceUpgrade rubygem-minitestUpgrade rubygem-rdocUpgrade rubygem-json-debuginfoUpgrade rubygem-bson-docUpgrade rubygem-io-console-debuginfo | Jun 30, 2021 | Nov 26, 2019 |
| Debian | — | Upgrade ruby2.5 | Nov 27, 2019 | Nov 27, 2019 |
| Freebsd | — | Upgrade ruby | Oct 3, 2019 | Oct 2, 2019 |
| Gentoo Linux | — | Upgrade dev-lang/ruby. | Mar 16, 2020 | Nov 26, 2019 |
| Huawei Euleros 2_0_sp3 | — | Upgrade rubyUpgrade ruby-libsUpgrade ruby-irb | Sep 28, 2020 | Nov 26, 2019 |
| Huawei Euleros 2_0_sp5 | — | Upgrade ruby-irbUpgrade ruby-libsUpgrade ruby | Mar 24, 2020 | Nov 26, 2019 |
| Huawei Euleros 2_0_sp8 | — | Upgrade ruby-libsUpgrade ruby-irbUpgrade ruby | Jan 3, 2020 | Nov 26, 2019 |
| Oracle Solaris | — | Upgrade runtime/ruby-26 to version 2.6.5-11.4.19.0.1.2.0 on Solaris 11.4Upgrade runtime/ruby-25 to version 2.5.7-11.4.19.0.1.2.0 on Solaris 11.4 | Jan 19, 2021 | Nov 26, 2019 |
| Oracle_linux | — | Upgrade rubygem-pgUpgrade rubygem-mysql2Upgrade rubygem-bsonUpgrade rubygem-jsonUpgrade rubygem-minitestUpgrade rubygem-bson-docUpgrade rubygem-mongoUpgrade rubygem-net-telnetUpgrade rubygem-power_assertUpgrade rubygems-develUpgrade rubygem-bigdecimalUpgrade rubygem-abrt-docUpgrade rubygem-psychUpgrade ruby-libsUpgrade rubygem-bundler-docUpgrade rubygemsUpgrade rubygem-did_you_meanUpgrade rubygem-xmlrpcUpgrade rubygem-io-consoleUpgrade rubygem-test-unitUpgrade rubygem-mongo-docUpgrade ruby-docUpgrade rubygem-bundlerUpgrade ruby-irbUpgrade rubygem-rakeUpgrade rubygem-irbUpgrade rubygem-mysql2-docUpgrade rubygem-opensslUpgrade rubygem-abrtUpgrade rubyUpgrade rubygem-pg-docUpgrade rubygem-rdocUpgrade ruby-devel | Jul 2, 2021 | Oct 1, 2019 |
| Redhat_linux | — | Upgrade rubygem-jsonUpgrade rubygem-pgUpgrade rubygem-json-debuginfoUpgrade rubygem-mysql2Upgrade ruby-debugsourceUpgrade ruby-libs-debuginfoUpgrade rubygem-xmlrpcUpgrade ruby-debuginfoUpgrade rubygem-abrt-docUpgrade ruby-libsNo solution existsUpgrade rubygem-bsonUpgrade rubygem-opensslUpgrade rubygem-mongoUpgrade rubygem-psychUpgrade rubygem-minitestUpgrade rubygem-test-unitUpgrade rubygemsUpgrade rubygem-bson-docUpgrade rubygem-openssl-debuginfoUpgrade rubygem-psych-debuginfoUpgrade rubygem-net-telnetUpgrade rubygem-bundler-docUpgrade ruby-develUpgrade rubygem-pg-debuginfoUpgrade rubygem-rakeUpgrade rubygem-power_assertUpgrade rubygem-pg-docUpgrade rubygem-rdocUpgrade rubygems-develUpgrade rubygem-mysql2-debugsourceUpgrade rubygem-pg-debugsourceUpgrade rubygem-io-consoleUpgrade rubygem-abrtUpgrade rubygem-mysql2-debuginfoUpgrade ruby-docUpgrade rubygem-mongo-docUpgrade rubygem-mysql2-docUpgrade rubygem-bigdecimalUpgrade rubygem-io-console-debuginfoUpgrade ruby-irbUpgrade rubygem-bson-debuginfoUpgrade rubygem-bundlerUpgrade rubygem-did_you_meanUpgrade rubygem-bigdecimal-debuginfoUpgrade rubyUpgrade rubygem-irbUpgrade rubygem-bson-debugsource | Jun 30, 2021 | Nov 26, 2019 |
| Rocky_linux | — | Upgrade rubygem-pg-debugsourceUpgrade rubygem-mysql2Upgrade rubyUpgrade ruby-libs-debuginfoUpgrade rubygem-openssl-debuginfoUpgrade ruby-debugsourceUpgrade rubygem-bsonUpgrade rubygem-jsonUpgrade rubygem-psych-debuginfoUpgrade ruby-libsUpgrade rubygem-psychUpgrade ruby-debuginfoUpgrade rubygem-pgUpgrade rubygem-mysql2-debugsourceUpgrade rubygem-io-console-debuginfoUpgrade rubygem-bson-debuginfoUpgrade rubygem-bigdecimalUpgrade rubygem-json-debuginfoUpgrade rubygem-io-consoleUpgrade rubygem-pg-debuginfoUpgrade rubygem-mysql2-debuginfoUpgrade ruby-develUpgrade rubygem-opensslUpgrade rubygem-bson-debugsourceUpgrade rubygem-bigdecimal-debuginfo | May 5, 2022 | Nov 26, 2019 |
| Suse | — | Upgrade libruby2_5-2_5Upgrade ruby2.5-docUpgrade ruby2.5-devel-extraUpgrade ruby2.5-develUpgrade ruby2.5-stdlibUpgrade ruby2.5-doc-riUpgrade ruby2.1-develUpgrade ruby2.1Upgrade yast2-ruby-bindingsUpgrade ruby2.5Upgrade libruby2_1-2_1Upgrade ruby2.1-stdlib | Mar 21, 2020 | Oct 1, 2019 |
| Ubuntu | — | Upgrade libruby2.5Upgrade ruby2.5Upgrade ruby2.3Upgrade libruby2.3 | Nov 27, 2019 | Oct 1, 2019 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Nov 26, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub