VDB
BDU%3A2024-02286
BDU%3A2024-02286
PUBLISHED
CVSS 9 CRITICAL
Уязвимость библиотеки Ruby/Git интерпретатора Ruby, позволяющая нарушителю выполнить произвольный код
Risk Scores
CVSS 2.0
9
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Сообщество свободного программного обеспечения, Fedora Project, Red Hat Inc., Elastic NV, Ruby Team | Debian GNU/Linux, Fedora, Red Hat Satellite, Logstash, Ruby/Git |
Timeline
- Mar 25, 2024 CVE Published
References
- https://github.com/ruby-git/ruby-git url
- https://github.com/ruby-git/ruby-git/pull/602 url
- https://jvn.jp/en/jp/JVN16765254/index.html url
- https://lists.debian.org/debian-lts-announce/2023/01/msg00043.html url
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/4KPFLSZPUM7APWVBRM5DCAY5OUVQBF4K/ url
- https://access.redhat.com/security/cve/cve-2022-47318 url
- https://security-tracker.debian.org/tracker/CVE-2022-47318 url
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/4KPFLSZPUM7APWVBRM5DCAY5OUVQBF4K/ url