Ruby through 2.4.7, 2.5.x through 2.5.6, and 2.6.x through 2.6.4 mishandles path checking within File.fnmatch functions.
CVSS Details
- CVSS 3.1 Base Score: 6.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade rubygem-mongo-docUpgrade rubygem-mysql2-docUpgrade rubygem-mysql2Upgrade rubygem-pg-docUpgrade rubygem-abrtUpgrade rubygem-bson-docUpgrade rubygem-pgUpgrade rubygem-abrt-docUpgrade rubygem-bsonUpgrade rubygem-mongo | May 4, 2022 | Nov 26, 2019 |
| Alpine Linux | — | Upgrade ruby | Aug 22, 2024 | Nov 26, 2019 |
| Amazon Linux Ami 2 | — | Upgrade rubygem-jsonUpgrade rubygem-test-unitUpgrade rubygem-psychUpgrade rubygem-rdocUpgrade rubygem-net-telnetUpgrade rubygem-power_assertUpgrade rubygem-irbUpgrade rubygem-minitestUpgrade rubygemsUpgrade rubygem-opensslUpgrade rubygem-xmlrpcUpgrade rubyUpgrade ruby-docUpgrade ruby-debuginfoUpgrade rubygems-develUpgrade ruby-develUpgrade ruby-irbUpgrade ruby-tcltkUpgrade rubygem-did_you_meanUpgrade rubygem-bigdecimalUpgrade rubygem-rakeUpgrade ruby-libsUpgrade rubygem-io-consoleUpgrade rubygem-bundler | Sep 28, 2023 | Nov 26, 2019 |
| Amazon_linux | — | Upgrade ruby24 | Sep 1, 2020 | Oct 1, 2019 |
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | Nov 26, 2019 |
| Centos_linux | — | Upgrade rubygem-jsonUpgrade rubygem-bundlerUpgrade ruby-develUpgrade rubygem-did_you_meanUpgrade rubygem-io-consoleUpgrade ruby-debugsourceUpgrade rubygem-xmlrpcUpgrade rubyUpgrade rubygem-mongo-docUpgrade ruby-debuginfoUpgrade rubygem-bigdecimalUpgrade ruby-libsUpgrade rubygem-psychUpgrade rubygem-mysql2Upgrade rubygem-rakeUpgrade rubygem-openssl-debuginfoUpgrade ruby-docUpgrade rubygem-opensslUpgrade rubygem-pg-debugsourceUpgrade rubygem-bsonUpgrade rubygem-psych-debuginfoUpgrade rubygem-bundler-docUpgrade rubygem-test-unitUpgrade rubygem-irbUpgrade rubygem-abrtUpgrade rubygem-power_assertUpgrade rubygem-mongoUpgrade rubygem-minitestUpgrade rubygem-mysql2-debugsourceUpgrade ruby-libs-debuginfoUpgrade rubygem-net-telnetUpgrade rubygemsUpgrade rubygem-json-debuginfoUpgrade rubygem-mysql2-debuginfoUpgrade rubygems-develUpgrade rubygem-bigdecimal-debuginfoUpgrade rubygem-io-console-debuginfoUpgrade rubygem-bson-debugsourceUpgrade ruby-irbUpgrade rubygem-pg-docUpgrade rubygem-pgUpgrade rubygem-pg-debuginfoUpgrade rubygem-rdocUpgrade rubygem-bson-docUpgrade rubygem-mysql2-docUpgrade rubygem-bson-debuginfoUpgrade rubygem-abrt-doc | Jun 30, 2021 | Nov 26, 2019 |
| Debian | — | Upgrade ruby2.5 | Nov 27, 2019 | Nov 27, 2019 |
| Freebsd | — | Upgrade ruby | Oct 3, 2019 | Oct 2, 2019 |
| Gentoo Linux | — | Upgrade dev-lang/ruby. | Mar 16, 2020 | Nov 26, 2019 |
| Huawei Euleros 2_0_sp3 | — | Upgrade ruby-irbUpgrade ruby-libsUpgrade ruby | Sep 28, 2020 | Nov 26, 2019 |
| Huawei Euleros 2_0_sp5 | — | Upgrade ruby-irbUpgrade rubyUpgrade ruby-libs | Mar 24, 2020 | Nov 26, 2019 |
| Huawei Euleros 2_0_sp8 | — | Upgrade ruby-libsUpgrade rubyUpgrade ruby-irb | Jan 3, 2020 | Nov 26, 2019 |
| Oracle Solaris | — | Upgrade runtime/ruby-26 to version 2.6.5-11.4.19.0.1.2.0 on Solaris 11.4Upgrade runtime/ruby-25 to version 2.5.7-11.4.19.0.1.2.0 on Solaris 11.4 | Jan 19, 2021 | Nov 26, 2019 |
| Oracle_linux | — | Upgrade rubygem-rdocUpgrade rubygem-bundlerUpgrade ruby-develUpgrade rubygem-rakeUpgrade rubygem-did_you_meanUpgrade rubygem-xmlrpcUpgrade rubygem-abrtUpgrade rubygem-mongo-docUpgrade ruby-docUpgrade rubygem-mysql2-docUpgrade ruby-irbUpgrade rubygem-pg-docUpgrade rubygem-io-consoleUpgrade rubygem-opensslUpgrade rubygem-net-telnetUpgrade rubygem-bundler-docUpgrade rubyUpgrade rubygem-irbUpgrade rubygem-test-unit | Jul 2, 2021 | Oct 1, 2019 |
| Redhat_linux | — | Upgrade ruby-debuginfoUpgrade rubygem-minitestUpgrade rubygem-mysql2Upgrade rubygem-jsonUpgrade ruby-libs-debuginfoUpgrade rubygem-json-debuginfoUpgrade ruby-debugsourceUpgrade rubygem-pgUpgrade rubygem-bundler-docUpgrade ruby-libsUpgrade rubygem-opensslUpgrade rubygem-xmlrpcUpgrade rubygem-test-unitUpgrade rubygem-psychUpgrade rubygem-openssl-debuginfoUpgrade rubygem-bsonUpgrade rubygem-bson-docUpgrade rubygem-net-telnetUpgrade rubygemsUpgrade rubygem-psych-debuginfoNo solution existsUpgrade rubygem-mongoUpgrade rubygem-abrt-docUpgrade rubygem-pg-debuginfoUpgrade rubygem-mysql2-debuginfoUpgrade rubygem-irbUpgrade ruby-irbUpgrade rubygem-mysql2-debugsourceUpgrade rubygem-io-consoleUpgrade rubygem-bson-debugsourceUpgrade rubygem-bundlerUpgrade ruby-docUpgrade rubygem-rakeUpgrade rubygem-bigdecimal-debuginfoUpgrade rubygem-did_you_meanUpgrade rubygem-abrtUpgrade rubygem-mongo-docUpgrade rubygem-pg-debugsourceUpgrade rubygem-bigdecimalUpgrade rubygem-io-console-debuginfoUpgrade rubygems-develUpgrade rubygem-rdocUpgrade rubygem-power_assertUpgrade rubygem-pg-docUpgrade rubygem-mysql2-docUpgrade rubyUpgrade ruby-develUpgrade rubygem-bson-debuginfo | Jun 30, 2021 | Nov 26, 2019 |
| Rocky_linux | — | Upgrade rubygem-mysql2-debuginfoUpgrade rubygem-opensslUpgrade rubygem-bson-debuginfoUpgrade rubygem-bson-debugsourceUpgrade rubygem-pg-debuginfoUpgrade rubygem-io-console-debuginfoUpgrade ruby-develUpgrade rubygem-bigdecimalUpgrade rubygem-io-consoleUpgrade rubygem-json-debuginfoUpgrade rubygem-bigdecimal-debuginfoUpgrade rubygem-psych-debuginfoUpgrade rubygem-jsonUpgrade ruby-debuginfoUpgrade ruby-libs-debuginfoUpgrade rubygem-psychUpgrade rubygem-openssl-debuginfoUpgrade ruby-libsUpgrade rubyUpgrade rubygem-mysql2-debugsourceUpgrade rubygem-pgUpgrade rubygem-mysql2Upgrade rubygem-pg-debugsourceUpgrade ruby-debugsourceUpgrade rubygem-bson | May 5, 2022 | Nov 26, 2019 |
| Suse | — | Upgrade libruby2_1-2_1Upgrade yast2-ruby-bindingsUpgrade ruby2.5Upgrade ruby2.1-develUpgrade ruby2.1Upgrade ruby2.5-doc-riUpgrade ruby2.1-stdlibUpgrade ruby2.5-develUpgrade libruby2_5-2_5Upgrade ruby2.5-devel-extraUpgrade ruby2.5-stdlibUpgrade ruby2.5-doc | Mar 21, 2020 | Oct 1, 2019 |
| Ubuntu | — | Upgrade ruby2.3Upgrade libruby2.3Upgrade libruby2.5Upgrade ruby2.5 | Nov 27, 2019 | Oct 1, 2019 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Nov 26, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub