Ruby before 1.8.6-p114 does not reset the random seed upon forking, which makes it easier for context-dependent attackers to predict the values of random numbers by leveraging knowledge of the number sequence obtained in a different child process, a related issue to CVE-2003-0900.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade ruby-irbUpgrade ruby-riUpgrade ruby-docsUpgrade ruby-rdocUpgrade irbUpgrade ruby-modeUpgrade rubyUpgrade ruby-develUpgrade ruby-tcltkUpgrade ruby-libs | Dec 1, 2016 | Aug 5, 2011 |
| Oracle_linux | — | Upgrade ruby-riUpgrade ruby-docsUpgrade ruby-libsUpgrade ruby-staticUpgrade ruby-irbUpgrade ruby-develUpgrade ruby-modeUpgrade rubyUpgrade ruby-rdocUpgrade ruby-tcltk | Oct 16, 2024 | Aug 5, 2011 |
| Suse | — | Upgrade ruby-tkUpgrade ruby-doc-htmlUpgrade ruby-test-suiteUpgrade ruby-examplesUpgrade rubyUpgrade ruby-develUpgrade ruby-doc-ri | Dec 12, 2013 | Jul 9, 2013 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub