RubyGems versions between 2.0.0 and 2.6.13 are vulnerable to a possible remote code execution vulnerability. YAML deserialization of gem specifications can bypass class white lists. Specially crafted serialized objects can possibly be used to escalate to remote code execution.
The product deserializes untrusted data without sufficiently ensuring that the resulting data will be valid.
Name | Vendor | Start Version | End Version |
---|---|---|---|
Rubygems | Rubygems | 2.0.0 (including) | 2.0.0 (including) |
Rubygems | Rubygems | 2.0.0-preview2 (including) | 2.0.0-preview2 (including) |
Rubygems | Rubygems | 2.0.0-preview2.1 (including) | 2.0.0-preview2.1 (including) |
Rubygems | Rubygems | 2.0.0-preview2.2 (including) | 2.0.0-preview2.2 (including) |
Rubygems | Rubygems | 2.0.0-rc1 (including) | 2.0.0-rc1 (including) |
Rubygems | Rubygems | 2.0.0-rc2 (including) | 2.0.0-rc2 (including) |
Rubygems | Rubygems | 2.0.1 (including) | 2.0.1 (including) |
Rubygems | Rubygems | 2.0.2 (including) | 2.0.2 (including) |
Rubygems | Rubygems | 2.0.3 (including) | 2.0.3 (including) |
Rubygems | Rubygems | 2.0.4 (including) | 2.0.4 (including) |
Rubygems | Rubygems | 2.0.5 (including) | 2.0.5 (including) |
Rubygems | Rubygems | 2.0.6 (including) | 2.0.6 (including) |
Rubygems | Rubygems | 2.0.7 (including) | 2.0.7 (including) |
Rubygems | Rubygems | 2.0.8 (including) | 2.0.8 (including) |
Rubygems | Rubygems | 2.0.9 (including) | 2.0.9 (including) |
Rubygems | Rubygems | 2.0.10 (including) | 2.0.10 (including) |
Rubygems | Rubygems | 2.0.11 (including) | 2.0.11 (including) |
Rubygems | Rubygems | 2.0.12 (including) | 2.0.12 (including) |
Rubygems | Rubygems | 2.0.13 (including) | 2.0.13 (including) |
Rubygems | Rubygems | 2.0.14 (including) | 2.0.14 (including) |
Rubygems | Rubygems | 2.0.15 (including) | 2.0.15 (including) |
Rubygems | Rubygems | 2.0.16 (including) | 2.0.16 (including) |
Rubygems | Rubygems | 2.0.17 (including) | 2.0.17 (including) |
Rubygems | Rubygems | 2.1.0 (including) | 2.1.0 (including) |
Rubygems | Rubygems | 2.1.0.rc.1 (including) | 2.1.0.rc.1 (including) |
Rubygems | Rubygems | 2.1.0.rc.2 (including) | 2.1.0.rc.2 (including) |
Rubygems | Rubygems | 2.1.1 (including) | 2.1.1 (including) |
Rubygems | Rubygems | 2.1.2 (including) | 2.1.2 (including) |
Rubygems | Rubygems | 2.1.3 (including) | 2.1.3 (including) |
Rubygems | Rubygems | 2.1.4 (including) | 2.1.4 (including) |
Rubygems | Rubygems | 2.1.5 (including) | 2.1.5 (including) |
Rubygems | Rubygems | 2.1.6 (including) | 2.1.6 (including) |
Rubygems | Rubygems | 2.1.7 (including) | 2.1.7 (including) |
Rubygems | Rubygems | 2.1.8 (including) | 2.1.8 (including) |
Rubygems | Rubygems | 2.1.9 (including) | 2.1.9 (including) |
Rubygems | Rubygems | 2.1.10 (including) | 2.1.10 (including) |
Rubygems | Rubygems | 2.1.11 (including) | 2.1.11 (including) |
Rubygems | Rubygems | 2.2.0 (including) | 2.2.0 (including) |
Rubygems | Rubygems | 2.2.0.preiew.1 (including) | 2.2.0.preiew.1 (including) |
Rubygems | Rubygems | 2.2.0.rc.1 (including) | 2.2.0.rc.1 (including) |
Rubygems | Rubygems | 2.2.1 (including) | 2.2.1 (including) |
Rubygems | Rubygems | 2.2.2 (including) | 2.2.2 (including) |
Rubygems | Rubygems | 2.2.3 (including) | 2.2.3 (including) |
Rubygems | Rubygems | 2.2.4 (including) | 2.2.4 (including) |
Rubygems | Rubygems | 2.2.5 (including) | 2.2.5 (including) |
Rubygems | Rubygems | 2.3.0 (including) | 2.3.0 (including) |
Rubygems | Rubygems | 2.4.0 (including) | 2.4.0 (including) |
Rubygems | Rubygems | 2.4.1 (including) | 2.4.1 (including) |
Rubygems | Rubygems | 2.4.2 (including) | 2.4.2 (including) |
Rubygems | Rubygems | 2.4.3 (including) | 2.4.3 (including) |
Rubygems | Rubygems | 2.4.4 (including) | 2.4.4 (including) |
Rubygems | Rubygems | 2.4.5 (including) | 2.4.5 (including) |
Rubygems | Rubygems | 2.4.6 (including) | 2.4.6 (including) |
Rubygems | Rubygems | 2.4.7 (including) | 2.4.7 (including) |
Rubygems | Rubygems | 2.4.8 (including) | 2.4.8 (including) |
Rubygems | Rubygems | 2.5.0 (including) | 2.5.0 (including) |
Rubygems | Rubygems | 2.5.1 (including) | 2.5.1 (including) |
Rubygems | Rubygems | 2.5.2 (including) | 2.5.2 (including) |
Rubygems | Rubygems | 2.6.0 (including) | 2.6.0 (including) |
Rubygems | Rubygems | 2.6.1 (including) | 2.6.1 (including) |
Rubygems | Rubygems | 2.6.2 (including) | 2.6.2 (including) |
Rubygems | Rubygems | 2.6.3 (including) | 2.6.3 (including) |
Rubygems | Rubygems | 2.6.4 (including) | 2.6.4 (including) |
Rubygems | Rubygems | 2.6.5 (including) | 2.6.5 (including) |
Rubygems | Rubygems | 2.6.6 (including) | 2.6.6 (including) |
Rubygems | Rubygems | 2.6.7 (including) | 2.6.7 (including) |
Rubygems | Rubygems | 2.6.8 (including) | 2.6.8 (including) |
Rubygems | Rubygems | 2.6.9 (including) | 2.6.9 (including) |
Rubygems | Rubygems | 2.6.10 (including) | 2.6.10 (including) |
Rubygems | Rubygems | 2.6.11 (including) | 2.6.11 (including) |
Rubygems | Rubygems | 2.6.12 (including) | 2.6.12 (including) |
Rubygems | Rubygems | 2.6.13 (including) | 2.6.13 (including) |
Red Hat Enterprise Linux 7 | RedHat | ruby-0:2.0.0.648-33.el7_4 | * |
Red Hat Software Collections for Red Hat Enterprise Linux 6 | RedHat | rh-ruby24-ruby-0:2.4.2-86.el6 | * |
Red Hat Software Collections for Red Hat Enterprise Linux 6 | RedHat | rh-ruby22-ruby-0:2.2.9-19.el6 | * |
Red Hat Software Collections for Red Hat Enterprise Linux 6 | RedHat | rh-ruby23-ruby-0:2.3.6-67.el6 | * |
Red Hat Software Collections for Red Hat Enterprise Linux 6.7 EUS | RedHat | rh-ruby24-ruby-0:2.4.2-86.el6 | * |
Red Hat Software Collections for Red Hat Enterprise Linux 6.7 EUS | RedHat | rh-ruby22-ruby-0:2.2.9-19.el6 | * |
Red Hat Software Collections for Red Hat Enterprise Linux 6.7 EUS | RedHat | rh-ruby23-ruby-0:2.3.6-67.el6 | * |
Red Hat Software Collections for Red Hat Enterprise Linux 7 | RedHat | rh-ruby24-ruby-0:2.4.2-86.el7 | * |
Red Hat Software Collections for Red Hat Enterprise Linux 7 | RedHat | rh-ruby22-ruby-0:2.2.9-19.el7 | * |
Red Hat Software Collections for Red Hat Enterprise Linux 7 | RedHat | rh-ruby23-ruby-0:2.3.6-67.el7 | * |
Red Hat Software Collections for Red Hat Enterprise Linux 7.3 EUS | RedHat | rh-ruby24-ruby-0:2.4.2-86.el7 | * |
Red Hat Software Collections for Red Hat Enterprise Linux 7.3 EUS | RedHat | rh-ruby22-ruby-0:2.2.9-19.el7 | * |
Red Hat Software Collections for Red Hat Enterprise Linux 7.3 EUS | RedHat | rh-ruby23-ruby-0:2.3.6-67.el7 | * |
Red Hat Software Collections for Red Hat Enterprise Linux 7.4 EUS | RedHat | rh-ruby24-ruby-0:2.4.2-86.el7 | * |
Red Hat Software Collections for Red Hat Enterprise Linux 7.4 EUS | RedHat | rh-ruby22-ruby-0:2.2.9-19.el7 | * |
Red Hat Software Collections for Red Hat Enterprise Linux 7.4 EUS | RedHat | rh-ruby23-ruby-0:2.3.6-67.el7 | * |
Jruby | Ubuntu | artful | * |
Jruby | Ubuntu | cosmic | * |
Jruby | Ubuntu | esm-apps/xenial | * |
Jruby | Ubuntu | lunar | * |
Jruby | Ubuntu | trusty | * |
Jruby | Ubuntu | trusty/esm | * |
Jruby | Ubuntu | upstream | * |
Jruby | Ubuntu | xenial | * |
Jruby | Ubuntu | zesty | * |
Ruby2.0 | Ubuntu | trusty | * |
Ruby2.3 | Ubuntu | artful | * |
Ruby2.3 | Ubuntu | esm-infra/xenial | * |
Ruby2.3 | Ubuntu | xenial | * |
Ruby2.3 | Ubuntu | zesty | * |