Ruby through 2.4.7, 2.5.x through 2.5.6, and 2.6.x through 2.6.4 mishandles path checking within File.fnmatch functions.
CVSS Details
- CVSS 3.1 Base Score: 6.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade rubygem-abrt-docUpgrade rubygem-bsonUpgrade rubygem-bson-docUpgrade rubygem-mongoUpgrade rubygem-pgUpgrade rubygem-pg-docUpgrade rubygem-mysql2Upgrade rubygem-abrtUpgrade rubygem-mongo-docUpgrade rubygem-mysql2-doc | May 4, 2022 | Nov 26, 2019 |
| Alpine Linux | — | Upgrade ruby | Aug 22, 2024 | Nov 26, 2019 |
| Amazon Linux Ami 2 | — | Upgrade ruby-debuginfoUpgrade ruby-docUpgrade ruby-tcltkUpgrade ruby-irbUpgrade rubygems-develUpgrade ruby-libsUpgrade rubygem-bundlerUpgrade rubygem-rakeUpgrade rubygem-bigdecimalUpgrade rubygem-io-consoleUpgrade ruby-develUpgrade rubygem-did_you_meanUpgrade rubygemsUpgrade rubygem-opensslUpgrade rubygem-xmlrpcUpgrade rubygem-irbUpgrade rubygem-test-unitUpgrade rubygem-minitestUpgrade rubygem-jsonUpgrade rubygem-psychUpgrade rubygem-net-telnetUpgrade rubyUpgrade rubygem-power_assertUpgrade rubygem-rdoc | Sep 28, 2023 | Nov 26, 2019 |
| Amazon_linux | — | Upgrade ruby24 | Sep 1, 2020 | Oct 1, 2019 |
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | Nov 26, 2019 |
| Centos_linux | — | Upgrade rubygem-pg-debugsourceUpgrade rubygem-opensslUpgrade rubygem-xmlrpcUpgrade rubygem-mysql2Upgrade rubygem-bsonUpgrade ruby-develUpgrade rubygem-bundlerUpgrade rubygem-jsonUpgrade rubygem-rakeUpgrade rubygem-bigdecimalUpgrade rubygem-io-consoleUpgrade ruby-libsUpgrade ruby-docUpgrade rubygem-openssl-debuginfoUpgrade rubyUpgrade ruby-debugsourceUpgrade rubygem-irbUpgrade rubygem-did_you_meanUpgrade rubygem-test-unitUpgrade rubygem-bundler-docUpgrade ruby-debuginfoUpgrade rubygem-abrtUpgrade rubygem-psych-debuginfoUpgrade rubygem-mongo-docUpgrade rubygem-psychUpgrade rubygem-io-console-debuginfoUpgrade ruby-irbUpgrade rubygem-bson-debugsourceUpgrade rubygem-mysql2-debugsourceUpgrade rubygem-mysql2-docUpgrade rubygem-pg-docUpgrade rubygem-pg-debuginfoUpgrade rubygem-mysql2-debuginfoUpgrade rubygemsUpgrade rubygem-bigdecimal-debuginfoUpgrade rubygem-rdocUpgrade rubygem-net-telnetUpgrade rubygem-abrt-docUpgrade rubygem-bson-debuginfoUpgrade ruby-libs-debuginfoUpgrade rubygem-mongoUpgrade rubygem-pgUpgrade rubygem-power_assertUpgrade rubygem-bson-docUpgrade rubygem-json-debuginfoUpgrade rubygem-minitestUpgrade rubygems-devel | Jun 30, 2021 | Nov 26, 2019 |
| Debian | — | Upgrade ruby2.5 | Nov 27, 2019 | Nov 27, 2019 |
| Freebsd | — | Upgrade ruby | Oct 3, 2019 | Oct 2, 2019 |
| Gentoo Linux | — | Upgrade dev-lang/ruby. | Mar 16, 2020 | Nov 26, 2019 |
| Huawei Euleros 2_0_sp3 | — | Upgrade ruby-libsUpgrade rubyUpgrade ruby-irb | Sep 28, 2020 | Nov 26, 2019 |
| Huawei Euleros 2_0_sp5 | — | Upgrade rubyUpgrade ruby-libsUpgrade ruby-irb | Mar 24, 2020 | Nov 26, 2019 |
| Huawei Euleros 2_0_sp8 | — | Upgrade ruby-irbUpgrade ruby-libsUpgrade ruby | Jan 3, 2020 | Nov 26, 2019 |
| Oracle Solaris | — | Upgrade runtime/ruby-25 to version 2.5.7-11.4.19.0.1.2.0 on Solaris 11.4Upgrade runtime/ruby-26 to version 2.6.5-11.4.19.0.1.2.0 on Solaris 11.4 | Jan 19, 2021 | Nov 26, 2019 |
| Oracle_linux | — | Upgrade rubygem-bsonUpgrade rubygemsUpgrade rubygem-minitestUpgrade rubygem-pgUpgrade rubygem-bson-docUpgrade rubygems-develUpgrade rubygem-mysql2Upgrade rubygem-power_assertUpgrade rubygem-mongoUpgrade rubygem-net-telnetUpgrade rubygem-jsonUpgrade rubygem-psychUpgrade rubygem-bundler-docUpgrade ruby-libsUpgrade rubygem-abrt-docUpgrade rubygem-bigdecimalUpgrade ruby-irbUpgrade rubygem-abrtUpgrade rubygem-opensslUpgrade rubyUpgrade rubygem-did_you_meanUpgrade ruby-develUpgrade rubygem-test-unitUpgrade rubygem-rdocUpgrade ruby-docUpgrade rubygem-bundlerUpgrade rubygem-xmlrpcUpgrade rubygem-rakeUpgrade rubygem-mysql2-docUpgrade rubygem-mongo-docUpgrade rubygem-pg-docUpgrade rubygem-io-consoleUpgrade rubygem-irb | Jul 2, 2021 | Oct 1, 2019 |
| Redhat_linux | — | Upgrade rubygem-pgUpgrade ruby-libsUpgrade ruby-debugsourceUpgrade rubygem-bundler-docUpgrade rubygem-json-debuginfoUpgrade rubygemsUpgrade rubygem-bsonUpgrade rubygem-test-unitUpgrade rubygem-bson-docUpgrade rubygem-xmlrpcUpgrade ruby-debuginfoUpgrade rubygem-net-telnetUpgrade ruby-libs-debuginfoUpgrade rubygem-mongoUpgrade rubygem-mysql2No solution existsUpgrade rubygem-jsonUpgrade rubygem-minitestUpgrade rubygem-psych-debuginfoUpgrade rubygem-abrt-docUpgrade rubygem-psychUpgrade rubygem-opensslUpgrade rubygem-openssl-debuginfoUpgrade rubygem-mongo-docUpgrade rubygem-mysql2-debugsourceUpgrade rubygem-irbUpgrade rubygem-abrtUpgrade rubygem-mysql2-docUpgrade rubygem-mysql2-debuginfoUpgrade rubygem-pg-debugsourceUpgrade ruby-docUpgrade ruby-develUpgrade rubygem-rakeUpgrade rubygem-bundlerUpgrade rubygem-pg-debuginfoUpgrade rubygem-power_assertUpgrade rubygem-io-consoleUpgrade rubyUpgrade rubygem-rdocUpgrade rubygem-pg-docUpgrade rubygems-develUpgrade rubygem-bson-debugsourceUpgrade rubygem-did_you_meanUpgrade ruby-irbUpgrade rubygem-bigdecimalUpgrade rubygem-bson-debuginfoUpgrade rubygem-bigdecimal-debuginfoUpgrade rubygem-io-console-debuginfo | Jun 30, 2021 | Nov 26, 2019 |
| Rocky_linux | — | Upgrade rubygem-mysql2-debuginfoUpgrade rubygem-pg-debuginfoUpgrade rubygem-json-debuginfoUpgrade rubygem-bson-debuginfoUpgrade rubygem-bson-debugsourceUpgrade rubygem-opensslUpgrade rubygem-bigdecimal-debuginfoUpgrade rubygem-io-console-debuginfoUpgrade rubygem-bigdecimalUpgrade ruby-develUpgrade rubygem-io-consoleUpgrade ruby-debugsourceUpgrade rubygem-psychUpgrade rubygem-openssl-debuginfoUpgrade ruby-libsUpgrade rubygem-psych-debuginfoUpgrade rubygem-mysql2Upgrade ruby-debuginfoUpgrade rubyUpgrade rubygem-pg-debugsourceUpgrade rubygem-bsonUpgrade rubygem-mysql2-debugsourceUpgrade ruby-libs-debuginfoUpgrade rubygem-pgUpgrade rubygem-json | May 5, 2022 | Nov 26, 2019 |
| Suse | — | Upgrade ruby2.5-docUpgrade ruby2.5-devel-extraUpgrade ruby2.5-stdlibUpgrade libruby2_5-2_5Upgrade ruby2.5-develUpgrade ruby2.1-stdlibUpgrade libruby2_1-2_1Upgrade yast2-ruby-bindingsUpgrade ruby2.1Upgrade ruby2.1-develUpgrade ruby2.5Upgrade ruby2.5-doc-ri | Mar 21, 2020 | Oct 1, 2019 |
| Ubuntu | — | Upgrade libruby2.3Upgrade ruby2.3Upgrade ruby2.5Upgrade libruby2.5 | Nov 27, 2019 | Oct 1, 2019 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Nov 26, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub