Ruby through 2.4.7, 2.5.x through 2.5.6, and 2.6.x through 2.6.4 mishandles path checking within File.fnmatch functions.
CVSS Details
- CVSS 3.1 Base Score: 6.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade rubygem-mysql2-docUpgrade rubygem-mysql2Upgrade rubygem-mongo-docUpgrade rubygem-pg-docUpgrade rubygem-abrtUpgrade rubygem-abrt-docUpgrade rubygem-bsonUpgrade rubygem-bson-docUpgrade rubygem-mongoUpgrade rubygem-pg | May 4, 2022 | Nov 26, 2019 |
| Alpine Linux | — | Upgrade ruby | Aug 22, 2024 | Nov 26, 2019 |
| Amazon Linux Ami 2 | — | Upgrade rubygem-bundlerUpgrade ruby-develUpgrade ruby-libsUpgrade rubygem-rakeUpgrade rubygems-develUpgrade rubygem-bigdecimalUpgrade rubygem-io-consoleUpgrade ruby-tcltkUpgrade rubygem-did_you_meanUpgrade ruby-docUpgrade ruby-debuginfoUpgrade ruby-irbUpgrade rubygem-minitestUpgrade rubygem-xmlrpcUpgrade rubygem-opensslUpgrade rubygem-rdocUpgrade rubygem-test-unitUpgrade rubygem-net-telnetUpgrade rubygem-power_assertUpgrade rubygem-irbUpgrade rubygem-jsonUpgrade rubygem-psychUpgrade rubygemsUpgrade ruby | Sep 28, 2023 | Nov 26, 2019 |
| Amazon_linux | — | Upgrade ruby24 | Sep 1, 2020 | Oct 1, 2019 |
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | Nov 26, 2019 |
| Centos_linux | — | Upgrade ruby-libsUpgrade rubygem-did_you_meanUpgrade rubygem-io-consoleUpgrade rubygem-rakeUpgrade rubygem-opensslUpgrade rubygem-bundler-docUpgrade rubygem-mongo-docUpgrade rubygem-mysql2Upgrade ruby-develUpgrade rubygem-psych-debuginfoUpgrade rubygem-bundlerUpgrade rubygem-bigdecimalUpgrade rubygem-psychUpgrade rubygem-xmlrpcUpgrade rubygem-bsonUpgrade rubygem-abrtUpgrade ruby-debuginfoUpgrade rubyUpgrade rubygem-irbUpgrade rubygem-jsonUpgrade rubygem-openssl-debuginfoUpgrade rubygem-test-unitUpgrade ruby-debugsourceUpgrade ruby-docUpgrade rubygem-pg-debugsourceUpgrade rubygem-io-console-debuginfoUpgrade rubygem-json-debuginfoUpgrade rubygemsUpgrade rubygem-mysql2-debuginfoUpgrade rubygem-mysql2-debugsourceUpgrade rubygem-bigdecimal-debuginfoUpgrade rubygem-minitestUpgrade rubygem-net-telnetUpgrade rubygem-rdocUpgrade rubygem-bson-docUpgrade rubygem-bson-debuginfoUpgrade rubygem-abrt-docUpgrade rubygem-mysql2-docUpgrade rubygem-mongoUpgrade rubygem-power_assertUpgrade rubygem-pg-docUpgrade ruby-libs-debuginfoUpgrade rubygem-pgUpgrade rubygem-pg-debuginfoUpgrade rubygem-bson-debugsourceUpgrade ruby-irbUpgrade rubygems-devel | Jun 30, 2021 | Nov 26, 2019 |
| Debian | — | Upgrade ruby2.5 | Nov 27, 2019 | Nov 27, 2019 |
| Freebsd | — | Upgrade ruby | Oct 3, 2019 | Oct 2, 2019 |
| Gentoo Linux | — | Upgrade dev-lang/ruby. | Mar 16, 2020 | Nov 26, 2019 |
| Huawei Euleros 2_0_sp3 | — | Upgrade ruby-libsUpgrade rubyUpgrade ruby-irb | Sep 28, 2020 | Nov 26, 2019 |
| Huawei Euleros 2_0_sp5 | — | Upgrade rubyUpgrade ruby-libsUpgrade ruby-irb | Mar 24, 2020 | Nov 26, 2019 |
| Huawei Euleros 2_0_sp8 | — | Upgrade ruby-irbUpgrade ruby-libsUpgrade ruby | Jan 3, 2020 | Nov 26, 2019 |
| Oracle Solaris | — | Upgrade runtime/ruby-26 to version 2.6.5-11.4.19.0.1.2.0 on Solaris 11.4Upgrade runtime/ruby-25 to version 2.5.7-11.4.19.0.1.2.0 on Solaris 11.4 | Jan 19, 2021 | Nov 26, 2019 |
| Oracle_linux | — | Upgrade rubygem-psychUpgrade rubygemsUpgrade ruby-libsUpgrade rubygem-jsonUpgrade rubygem-minitestUpgrade rubygems-develUpgrade rubygem-bson-docUpgrade rubygem-pgUpgrade rubygem-mongoUpgrade rubygem-bundler-docUpgrade rubygem-net-telnetUpgrade rubygem-mysql2Upgrade rubygem-bsonUpgrade rubygem-abrt-docUpgrade rubygem-bigdecimalUpgrade rubygem-power_assertUpgrade rubygem-bundlerUpgrade rubygem-xmlrpcUpgrade rubygem-test-unitUpgrade rubygem-pg-docUpgrade ruby-irbUpgrade ruby-docUpgrade rubygem-opensslUpgrade rubygem-io-consoleUpgrade rubygem-abrtUpgrade rubyUpgrade rubygem-rakeUpgrade rubygem-irbUpgrade rubygem-mysql2-docUpgrade rubygem-mongo-docUpgrade ruby-develUpgrade rubygem-did_you_meanUpgrade rubygem-rdoc | Jul 2, 2021 | Oct 1, 2019 |
| Redhat_linux | — | Upgrade ruby-libsUpgrade ruby-debuginfoUpgrade rubygem-openssl-debuginfoUpgrade rubygem-bson-docUpgrade rubygem-psychUpgrade rubygem-mongoUpgrade rubygemsUpgrade ruby-libs-debuginfoUpgrade rubygem-minitestUpgrade rubygem-psych-debuginfoNo solution existsUpgrade rubygem-xmlrpcUpgrade rubygem-mysql2Upgrade rubygem-test-unitUpgrade rubygem-json-debuginfoUpgrade rubygem-net-telnetUpgrade rubygem-bundler-docUpgrade rubygem-opensslUpgrade rubygem-abrt-docUpgrade rubygem-bsonUpgrade ruby-debugsourceUpgrade rubygem-pgUpgrade rubygem-jsonUpgrade rubygem-pg-debuginfoUpgrade ruby-irbUpgrade rubygem-power_assertUpgrade rubygem-pg-docUpgrade rubygem-bson-debugsourceUpgrade rubygem-rakeUpgrade rubygem-rdocUpgrade ruby-develUpgrade rubygem-bundlerUpgrade rubygem-irbUpgrade rubygem-bigdecimalUpgrade rubygem-did_you_meanUpgrade rubygem-abrtUpgrade rubygem-bigdecimal-debuginfoUpgrade rubygem-mysql2-debuginfoUpgrade rubygem-bson-debuginfoUpgrade ruby-docUpgrade rubygem-io-console-debuginfoUpgrade rubygem-io-consoleUpgrade rubyUpgrade rubygems-develUpgrade rubygem-pg-debugsourceUpgrade rubygem-mysql2-debugsourceUpgrade rubygem-mongo-docUpgrade rubygem-mysql2-doc | Jun 30, 2021 | Nov 26, 2019 |
| Rocky_linux | — | Upgrade rubygem-bson-debuginfoUpgrade rubygem-bigdecimalUpgrade rubygem-bson-debugsourceUpgrade rubygem-opensslUpgrade rubygem-io-console-debuginfoUpgrade rubygem-io-consoleUpgrade rubygem-bigdecimal-debuginfoUpgrade rubygem-mysql2-debuginfoUpgrade ruby-develUpgrade rubygem-pg-debuginfoUpgrade rubygem-json-debuginfoUpgrade ruby-debugsourceUpgrade rubyUpgrade rubygem-bsonUpgrade rubygem-psychUpgrade rubygem-mysql2-debugsourceUpgrade ruby-libsUpgrade rubygem-pgUpgrade rubygem-openssl-debuginfoUpgrade rubygem-pg-debugsourceUpgrade rubygem-jsonUpgrade rubygem-mysql2Upgrade ruby-debuginfoUpgrade ruby-libs-debuginfoUpgrade rubygem-psych-debuginfo | May 5, 2022 | Nov 26, 2019 |
| Suse | — | Upgrade ruby2.5-docUpgrade ruby2.5-develUpgrade libruby2_5-2_5Upgrade ruby2.5-stdlibUpgrade ruby2.5-devel-extraUpgrade yast2-ruby-bindingsUpgrade ruby2.1-stdlibUpgrade ruby2.5-doc-riUpgrade ruby2.1Upgrade ruby2.5Upgrade libruby2_1-2_1Upgrade ruby2.1-devel | Mar 21, 2020 | Oct 1, 2019 |
| Ubuntu | — | Upgrade libruby2.5Upgrade ruby2.5Upgrade libruby2.3Upgrade ruby2.3 | Nov 27, 2019 | Oct 1, 2019 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Nov 26, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub