vulnerability

FreeBSD: VID-27B12D04-4722-11E9-8B7C-B5E01141761F (CVE-2019-8322): RubyGems -- multiple vulnerabilities

Try Surface Command
Back to search
Severity
5
CVSS
(AV:N/AC:L/Au:N/C:N/I:P/A:N)
Published
03/05/2019
Added
03/16/2019
Modified
06/20/2019

Description

Details for this vulnerability have not been published by NIST at this point. Descriptions from software vendor advisories for this issue are provided below.


From VID-27B12D04-4722-11E9-8B7C-B5E01141761F:




RubyGems Security Advisories:



CVE-2019-8320: Delete directory using symlink when decompressing tar


CVE-2019-8321: Escape sequence injection vulnerability in 'verbose'


CVE-2019-8322: Escape sequence injection vulnerability in 'gem owner'


CVE-2019-8323: Escape sequence injection vulnerability in API response handling


CVE-2019-8324: Installing a malicious gem may lead to arbitrary code execution


CVE-2019-8325: Escape sequence injection vulnerability in errors




Solution(s)

freebsd-upgrade-package-ruby23-gemsfreebsd-upgrade-package-ruby24-gemsfreebsd-upgrade-package-ruby25-gems

References

Title
NEW

Explore Exposure Command

Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.

Try it today