VDB
BDU%3A2024-02281
BDU%3A2024-02281
PUBLISHED
CVSS 7.599999904632568 HIGH
Уязвимость библиотеки Ruby/Git интерпретатора Ruby, позволяющая нарушителю выполнить произвольный код
Risk Scores
CVSS 2.0
7.599999904632568
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Сообщество свободного программного обеспечения, Fedora Project, Red Hat Inc., Elastic NV, Ruby Team | Debian GNU/Linux, Fedora, Red Hat Satellite, Logstash, Ruby/Git |
Timeline
- Mar 25, 2024 CVE Published
References
- https://github.com/ruby-git/ruby-git/releases/tag/v1.11.0 url
- https://lists.debian.org/debian-lts-announce/2023/01/msg00043.html url
- https://snyk.io/vuln/SNYK-RUBY-GIT-2421270 url
- https://security-tracker.debian.org/tracker/CVE-2022-25648 url
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/XWNJA7WPE67LJ3DJMWZ2TADHCZKWMY55/ advisory
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PTJUF6SFPL4ZVSJQHGQ36KFPFO5DQVYZ/ advisory
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/Q2V3HOFU4ZVTQZHAVAVL3EX2KU53SP7R/ advisory
- https://access.redhat.com/security/cve/cve-2022-25648 advisory
- https://www.elastic.co/downloads/past-releases/logstash-7-17-18 advisory
- https://github.com/ruby-git/ruby-git/pull/569 advisory
- https://github.com/ruby-git/ruby-git/commit/291ca0946bec7164b90ad5c572ac147f512c7159 advisory