GCVE-110-MAGEIA-2015-345

Advisory Published

Vulnetix · Advisory published September 8, 2015

Updated ruby-RubyGems package fixes security vulnerability: RubyGems does not validate the hostname when fetching gems or making API request, which allows remote attackers to redirect requests to arbitrary domains via a crafted DNS SRV record, aka a "DNS hijack attack" (CVE-2015-3900).

Download JSON Open in Console

Affected Products

Vendor	Product	Versions	Platforms
Mageia	ruby-RubyGems	2.1.11-3.1.mga4 (unaffected), 0 (affected)	—
Mageia	ruby-RubyGems	0 (affected), 2.1.11-5.1.mga5 (unaffected)	—

References

Updated ruby-RubyGems packages fix security vulnerabilities

advisory

Updated ruby-RubyGems packages fix security vulnerabilities

issue

Updated ruby-RubyGems packages fix security vulnerabilities

issue

Browse GCVE Records

73,118 records in the GCVE database · Updated July 16, 2026

No matching records found.

Explore Further

Investigate this vulnerability in the interactive console or download the raw GCVE record.

Open in Console Download JSON