vulnerability
FreeBSD: VID-2c8bd00d-ada2-11e7-82af-8dbff7d75206 (CVE-2017-0903): rubygems -- deserialization vulnerability
| Severity | CVSS | Published | Added | Modified |
|---|---|---|---|---|
| 7 | (AV:N/AC:L/Au:N/C:P/I:P/A:P) | Oct 10, 2017 | Oct 10, 2017 | Dec 10, 2025 |
Severity
7
CVSS
(AV:N/AC:L/Au:N/C:P/I:P/A:P)
Published
Oct 10, 2017
Added
Oct 10, 2017
Modified
Dec 10, 2025
Description
oss-security mailing list: There is a possible unsafe object desrialization vulnerability in RubyGems. It is possible for YAML deserialization of gem specifications to bypass class white lists. Specially crafted serialized objects can possibly be used to escalate to remote code execution.
Solutions
freebsd-upgrade-package-ruby22-gemsfreebsd-upgrade-package-ruby23-gemsfreebsd-upgrade-package-ruby24-gems
NEW
Explore Exposure Command
Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.