vulnerability

FreeBSD: VID-27B12D04-4722-11E9-8B7C-B5E01141761F (CVE-2019-8323): RubyGems -- multiple vulnerabilities

Try Surface Command
Back to search
Severity
5
CVSS
(AV:N/AC:L/Au:N/C:N/I:P/A:N)
Published
Mar 5, 2019
Added
Mar 16, 2019
Modified
Jun 20, 2019

Description

Details for this vulnerability have not been published by NIST at this point. Descriptions from software vendor advisories for this issue are provided below.


From VID-27B12D04-4722-11E9-8B7C-B5E01141761F:




RubyGems Security Advisories:



CVE-2019-8320: Delete directory using symlink when decompressing tar


CVE-2019-8321: Escape sequence injection vulnerability in 'verbose'


CVE-2019-8322: Escape sequence injection vulnerability in 'gem owner'


CVE-2019-8323: Escape sequence injection vulnerability in API response handling


CVE-2019-8324: Installing a malicious gem may lead to arbitrary code execution


CVE-2019-8325: Escape sequence injection vulnerability in errors




Solution(s)

freebsd-upgrade-package-ruby23-gemsfreebsd-upgrade-package-ruby24-gemsfreebsd-upgrade-package-ruby25-gems

References

Title
NEW

Explore Exposure Command

Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.

Try it today