vulnerability

Red Hat: CVE-2018-8780: Moderate: ruby security update (Multiple Advisories)

Name: Red Hat: CVE-2018-8780: Moderate: ruby security update (Multiple Advisories)
Creator: Red Hat
Published: 2018-04-03T00:00:00.000Z

Try Surface Command

Back to search

Severity

CVSS

(AV:N/AC:L/Au:N/C:P/I:P/A:P)

Published

Apr 3, 2018

Added

Aug 7, 2019

Modified

Feb 19, 2026

Description

In Ruby before 2.2.10, 2.3.x before 2.3.7, 2.4.x before 2.4.4, 2.5.x before 2.5.1, and 2.6.0-preview1, the Dir.open, Dir.new, Dir.entries and Dir.empty? methods do not check NULL characters. When using the corresponding method, unintentional directory traversal may be performed.

Solutions

redhat-upgrade-rubyredhat-upgrade-ruby-debuginforedhat-upgrade-ruby-develredhat-upgrade-ruby-docredhat-upgrade-ruby-irbredhat-upgrade-ruby-libsredhat-upgrade-ruby-tcltkredhat-upgrade-rubygem-bigdecimalredhat-upgrade-rubygem-io-consoleredhat-upgrade-rubygem-jsonredhat-upgrade-rubygem-minitestredhat-upgrade-rubygem-psychredhat-upgrade-rubygem-rakeredhat-upgrade-rubygem-rdocredhat-upgrade-rubygemsredhat-upgrade-rubygems-devel

References

Rapid7 Labs

2026 Global Threat Landscape Report

The predictive window has collapsed. Exploitation follows disclosure in days. See how attackers are accelerating and how to stay ahead.

Get report