{"schemaVersion":3,"id":"CVE-2024-47220","aliases":["MGASA-2024-0348","SUSE-SU-2024:3939-1","UBUNTU-CVE-2024-47220","USN-7057-1","USN-7057-2","DEBIAN-CVE-2024-47220","CGA-4cvc-f6cq-ch54","CGA-7c49-836h-4gx2","CGA-7rjj-8f77-cq95","CGA-c8v8-c7gx-65p7","CGA-cqxv-jwjq-h4hc","CGA-mqm4-f2c9-wg6c","CGA-rrcf-ch5m-g35f","CGA-v52x-xghh-j9j3","CGA-v8c9-2xgr-74hv","CGA-xf27-9q4w-w8jv","CGA-46xg-p5c8-m49x","CGA-4pf5-3r68-hxrq","CGA-54mw-cjh4-2hwv","CGA-6xrg-5f5x-p3p3","CGA-8mv5-v5wv-q7wv","CGA-8x65-w5h4-gw74","CGA-96r6-g55f-73xm","CGA-g4wr-83mw-628f","CGA-j4qq-prh7-xf95","CGA-jv4p-qwrw-qpvr","GHSA-6f62-3596-g6w7","CGA-rrvm-j6xw-xqr4","CGA-vcp6-c7wh-625w"],"status":"rejected","duplicateOf":null,"title":null,"description":"Rejected reason: DO NOT USE THIS CVE RECORD. ConsultIDs: none. Reason: This record was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none.","dates":{"published":"2024-09-22T00:00:00.000Z","modified":"2026-07-21T13:15:12.252Z","reserved":null,"kevAdded":[],"kevDue":[]},"cvss":{"headline":{"score":7.5,"severity":"high","version":"3.1","versionLabel":"v3.1","source":"OSV · Wolfi","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N","computed":true,"selection":"version-preference"},"metrics":[{"version":"3.1","versionLabel":"v3.1","source":"OSV · Wolfi","score":7.5,"severity":"high","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N","exploitability":10,"impact":6,"computed":true},{"version":"3.1","versionLabel":"v3.1","source":"OSV · Chainguard","score":7.5,"severity":"high","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N","exploitability":10,"impact":6,"computed":true},{"version":"3.1","versionLabel":"v3.1","source":"OSV · Rubygems","score":7.5,"severity":"high","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N","exploitability":10,"impact":6,"computed":true}]},"epss":{"probability":null,"percentile":null,"severity":"unknown","asOf":null,"change":{"pp":null,"baselineDate":null,"baselineScore":null},"history":[],"last30":[]},"kev":{"state":"not-listed","entries":[],"listedCount":0,"totalCatalogs":3,"catalogs":[{"source":"cisa","label":"CISA","listed":false,"entry":null},{"source":"enisa","label":"ENISA","listed":false,"entry":null},{"source":"circl","label":"CIRCL","listed":false,"entry":null}]},"ransomware":{"state":"none-recorded","sources":[]},"exploits":[],"exploitCount":0,"weaknesses":[],"affected":[{"vendor":"chainguard","product":"kube-fluentd-operator","name":"kube-fluentd-operator","label":"kube-fluentd-operator","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/kube-fluentd-operator","purlType":"apk","versions":[{"text":"< 1.18.2-r33","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.18.2-r33","eol":null,"hubHref":null},{"vendor":"chainguard","product":"kube-fluentd-operator-compat","name":"kube-fluentd-operator-compat","label":"kube-fluentd-operator-compat","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/kube-fluentd-operator-compat","purlType":"apk","versions":[{"text":"< 1.18.2-r33","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.18.2-r33","eol":null,"hubHref":null},{"vendor":"chainguard","product":"kube-fluentd-operator-default-config","name":"kube-fluentd-operator-default-config","label":"kube-fluentd-operator-default-config","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/kube-fluentd-operator-default-config","purlType":"apk","versions":[{"text":"< 1.18.2-r33","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.18.2-r33","eol":null,"hubHref":null},{"vendor":"chainguard","product":"kube-fluentd-operator-oci-entrypoint","name":"kube-fluentd-operator-oci-entrypoint","label":"kube-fluentd-operator-oci-entrypoint","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/kube-fluentd-operator-oci-entrypoint","purlType":"apk","versions":[{"text":"< 1.18.2-r33","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.18.2-r33","eol":null,"hubHref":null},{"vendor":"chainguard","product":"ruby3.2-fluentd-kubernetes-daemonset-1.16","name":"ruby3.2-fluentd-kubernetes-daemonset-1.16","label":"ruby3.2-fluentd-kubernetes-daemonset-1.16","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/ruby3.2-fluentd-kubernetes-daemonset-1.16","purlType":"apk","versions":[{"text":"< 1.16.6.1.2-r1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.16.6.1.2-r1","eol":null,"hubHref":null},{"vendor":"chainguard","product":"ruby3.2-fluentd-kubernetes-daemonset-1.16-kinesis","name":"ruby3.2-fluentd-kubernetes-daemonset-1.16-kinesis","label":"ruby3.2-fluentd-kubernetes-daemonset-1.16-kinesis","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/ruby3.2-fluentd-kubernetes-daemonset-1.16-kinesis","purlType":"apk","versions":[{"text":"< 1.16.6.1.2-r1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.16.6.1.2-r1","eol":null,"hubHref":null},{"vendor":"chainguard","product":"ruby3.2-webrick","name":"ruby3.2-webrick","label":"ruby3.2-webrick","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/ruby3.2-webrick","purlType":"apk","versions":[{"text":"< 1.8.2-r0","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.8.2-r0","eol":null,"hubHref":null},{"vendor":"chainguard","product":"ruby3.3-fluentd-kubernetes-daemonset-1.16","name":"ruby3.3-fluentd-kubernetes-daemonset-1.16","label":"ruby3.3-fluentd-kubernetes-daemonset-1.16","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/ruby3.3-fluentd-kubernetes-daemonset-1.16","purlType":"apk","versions":[{"text":"< 1.16.6.1.2-r1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.16.6.1.2-r1","eol":null,"hubHref":null},{"vendor":"chainguard","product":"ruby3.3-fluentd-kubernetes-daemonset-1.16-kinesis","name":"ruby3.3-fluentd-kubernetes-daemonset-1.16-kinesis","label":"ruby3.3-fluentd-kubernetes-daemonset-1.16-kinesis","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/ruby3.3-fluentd-kubernetes-daemonset-1.16-kinesis","purlType":"apk","versions":[{"text":"< 1.16.6.1.2-r1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.16.6.1.2-r1","eol":null,"hubHref":null},{"vendor":"chainguard","product":"ruby3.4-fluentd-kubernetes-daemonset-1.16","name":"ruby3.4-fluentd-kubernetes-daemonset-1.16","label":"ruby3.4-fluentd-kubernetes-daemonset-1.16","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/ruby3.4-fluentd-kubernetes-daemonset-1.16","purlType":"apk","versions":[{"text":"< 1.16.6.1.2-r2","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.16.6.1.2-r2","eol":null,"hubHref":null},{"vendor":"chainguard","product":"ruby3.4-fluentd-kubernetes-daemonset-1.16-kinesis","name":"ruby3.4-fluentd-kubernetes-daemonset-1.16-kinesis","label":"ruby3.4-fluentd-kubernetes-daemonset-1.16-kinesis","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/ruby3.4-fluentd-kubernetes-daemonset-1.16-kinesis","purlType":"apk","versions":[{"text":"< 1.16.6.1.2-r2","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.16.6.1.2-r2","eol":null,"hubHref":null},{"vendor":"wolfi","product":"kube-fluentd-operator","name":"kube-fluentd-operator","label":"kube-fluentd-operator","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/kube-fluentd-operator","purlType":"apk","versions":[{"text":"< 1.18.2-r33","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.18.2-r33","eol":null,"hubHref":null},{"vendor":"wolfi","product":"kube-fluentd-operator-compat","name":"kube-fluentd-operator-compat","label":"kube-fluentd-operator-compat","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/kube-fluentd-operator-compat","purlType":"apk","versions":[{"text":"< 1.18.2-r33","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.18.2-r33","eol":null,"hubHref":null},{"vendor":"wolfi","product":"kube-fluentd-operator-default-config","name":"kube-fluentd-operator-default-config","label":"kube-fluentd-operator-default-config","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/kube-fluentd-operator-default-config","purlType":"apk","versions":[{"text":"< 1.18.2-r33","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.18.2-r33","eol":null,"hubHref":null},{"vendor":"wolfi","product":"kube-fluentd-operator-oci-entrypoint","name":"kube-fluentd-operator-oci-entrypoint","label":"kube-fluentd-operator-oci-entrypoint","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/kube-fluentd-operator-oci-entrypoint","purlType":"apk","versions":[{"text":"< 1.18.2-r33","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.18.2-r33","eol":null,"hubHref":null},{"vendor":"wolfi","product":"ruby3.2-webrick","name":"ruby3.2-webrick","label":"ruby3.2-webrick","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/ruby3.2-webrick","purlType":"apk","versions":[{"text":"< 1.8.2-r0","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.8.2-r0","eol":null,"hubHref":null},{"vendor":"debian","product":"ruby-webrick","name":"ruby-webrick","label":"ruby-webrick","ecosystem":"Debian","cpePart":null,"purl":"pkg:deb/debian/ruby-webrick","purlType":"deb","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null},{"text":"< 1.9.1-1","noFixRecorded":false,"fixedIn":null}],"versionsText":"All versions (No fix recorded) | < 1.9.1-1","eol":null,"hubHref":null},{"vendor":"ubuntu","product":"ruby-webrick","name":"ruby-webrick","label":"ruby-webrick","ecosystem":"Ubuntu","cpePart":null,"purl":"pkg:deb/ubuntu/ruby-webrick","purlType":"deb","versions":[{"text":"< 1.8.1-1ubuntu1","noFixRecorded":false,"fixedIn":null},{"text":"< 1.8.1-1ubuntu0.1","noFixRecorded":false,"fixedIn":null},{"text":"< 1.7.0-3ubuntu0.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.8.1-1ubuntu1 | < 1.8.1-1ubuntu0.1 | < 1.7.0-3ubuntu0.1","eol":null,"hubHref":null},{"vendor":"ubuntu","product":"ruby2.3","name":"ruby2.3","label":"ruby2.3","ecosystem":"Ubuntu","cpePart":null,"purl":"pkg:deb/ubuntu/ruby2.3","purlType":"deb","versions":[{"text":"< 2.3.1-2~ubuntu16.04.16+esm11","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.3.1-2~ubuntu16.04.16+esm11","eol":null,"hubHref":null},{"vendor":"ubuntu","product":"ruby2.5","name":"ruby2.5","label":"ruby2.5","ecosystem":"Ubuntu","cpePart":null,"purl":"pkg:deb/ubuntu/ruby2.5","purlType":"deb","versions":[{"text":"< 2.5.1-1ubuntu1.16+esm6","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.5.1-1ubuntu1.16+esm6","eol":null,"hubHref":null},{"vendor":"ubuntu","product":"ruby2.7","name":"ruby2.7","label":"ruby2.7","ecosystem":"Ubuntu","cpePart":null,"purl":"pkg:deb/ubuntu/ruby2.7","purlType":"deb","versions":[{"text":"< 2.7.0-5ubuntu1.18+esm3","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.7.0-5ubuntu1.18+esm3","eol":null,"hubHref":null},{"vendor":"RubyGems","product":"webrick","name":"webrick","label":"webrick","ecosystem":"RubyGems","cpePart":null,"purl":"pkg:gem/webrick","purlType":"gem","versions":[{"text":"< 1.8.2","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.8.2","eol":null,"hubHref":null},{"vendor":"mageia","product":"ruby-webrick","name":"ruby-webrick","label":"ruby-webrick","ecosystem":"Mageia","cpePart":null,"purl":"pkg:rpm/mageia/ruby-webrick","purlType":"rpm","versions":[{"text":"< 1.7.0-3.mga9","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.7.0-3.mga9","eol":null,"hubHref":null},{"vendor":"suse","product":"ruby2.1&distro=SUSE Linux Enterprise Server 12 SP5-LTSS","name":"ruby2.1","label":"ruby2.1&distro=SUSE Linux Enterprise Server 12 SP5-LTSS","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/ruby2.1&distro=SUSE Linux Enterprise Server 12 SP5-LTSS","purlType":"rpm","versions":[{"text":"< 2.1.9-19.9.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.1.9-19.9.1","eol":null,"hubHref":null},{"vendor":"suse","product":"ruby2.1&distro=SUSE Linux Enterprise Server LTSS Extended Security 12 SP5","name":"ruby2.1","label":"ruby2.1&distro=SUSE Linux Enterprise Server LTSS Extended Security 12 SP5","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/ruby2.1&distro=SUSE Linux Enterprise Server LTSS Extended Security 12 SP5","purlType":"rpm","versions":[{"text":"< 2.1.9-19.9.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.1.9-19.9.1","eol":null,"hubHref":null}],"affectedCount":25,"eol":{"hasEol":false,"count":0},"references":[{"url":"https://advisories.mageia.org/MGASA-2024-0348.html","label":"advisories.mageia.org/MGASA-2024-0348.html","hostname":"advisories.mageia.org","tags":["Advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=33617","label":"bugs.mageia.org/show_bug.cgi?id=33617","hostname":"bugs.mageia.org","tags":["REPORT"]},{"url":"https://ubuntu.com/security/notices/USN-7057-1","label":"ubuntu.com/security/notices/USN-7057-1","hostname":"ubuntu.com","tags":["Advisory"]},{"url":"https://www.suse.com/support/update/announcement/2024/suse-su-20243939-1/","label":"www.suse.com/support/update/announcement/2024/suse-su-20243939-1/","hostname":"www.suse.com","tags":["Advisory"]},{"url":"https://bugzilla.suse.com/1230930","label":"bugzilla.suse.com/1230930","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://www.suse.com/security/cve/CVE-2024-47220","label":"www.suse.com/security/cve/CVE-2024-47220","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://ubuntu.com/security/CVE-2024-47220","label":"ubuntu.com/security/CVE-2024-47220","hostname":"ubuntu.com","tags":["REPORT"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2024-47220","label":"www.cve.org/CVERecord?id=CVE-2024-47220","hostname":"www.cve.org","tags":["REPORT"]},{"url":"https://ubuntu.com/security/notices/USN-7057-2","label":"ubuntu.com/security/notices/USN-7057-2","hostname":"ubuntu.com","tags":["Advisory"]},{"url":"https://ubuntu.com/security/notices/USN-7840-1","label":"ubuntu.com/security/notices/USN-7840-1","hostname":"ubuntu.com","tags":["Advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2024-47220","label":"security-tracker.debian.org/tracker/CVE-2024-47220","hostname":"security-tracker.debian.org","tags":["Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-47220","label":"nvd.nist.gov/vuln/detail/CVE-2024-47220","hostname":"nvd.nist.gov","tags":["Advisory"]},{"url":"https://github.com/ruby/webrick/issues/145","label":"github.com/ruby/webrick/issues/145","hostname":"github.com","tags":["WEB"]},{"url":"https://github.com/ruby/webrick/issues/145#issuecomment-2369994610","label":"github.com/ruby/webrick/issues/145","hostname":"github.com","tags":["WEB"]},{"url":"https://github.com/ruby/webrick/issues/145#issuecomment-2372838285","label":"github.com/ruby/webrick/issues/145","hostname":"github.com","tags":["WEB"]},{"url":"https://github.com/ruby/webrick/pull/146/commits/d88321da45dcd230ac2b4585cad4833d6d5e8841","label":"github.com/ruby/webrick/pull/146/commits/d88321da45dcd230ac2b4585cad4833d6d5e8841","hostname":"github.com","tags":["WEB"]},{"url":"https://github.com/ruby/webrick/commit/f5faca9222541591e1a7c3c97552ebb0c92733c7","label":"github.com/ruby/webrick/commit/f5faca9222541591e1a7c3c97552ebb0c92733c7","hostname":"github.com","tags":["WEB"]},{"url":"https://github.com/ruby/webrick","label":"github.com/ruby/webrick","hostname":"github.com","tags":["PACKAGE"]},{"url":"https://github.com/rubysec/ruby-advisory-db/blob/master/gems/webrick/CVE-2024-47220.yml","label":"github.com/rubysec/ruby-advisory-db/blob/master/gems/webrick/CVE-2024-47220.yml","hostname":"github.com","tags":["WEB"]}],"lineage":{"upstream":[],"downstream":["SUSE-SU-2025:0736-1","SUSE-SU-2025:1369-1","SUSE-SU-2025:4264-1","USN-7840-1"],"duplicates":[],"related":["CGA-26G8-C8GP-GJFH","CGA-5697-Q3J9-M883","CGA-56FF-JWRG-CQPG","CGA-F527-RQFP-CFC5","CGA-JM6V-8WJ8-X64H","CGA-VPXM-6RW3-PVP7","CGA-WC3M-XRCM-M6H5","SUSE-SU-2025:0736-1","SUSE-SU-2025:1369-1","SUSE-SU-2025:4264-1","USN-7840-1"]},"timeline":[{"kind":"published","date":"2024-09-22T00:00:00.000Z","label":"Published","detail":"Vulnerability first disclosed.","source":null},{"kind":"modified","date":"2026-07-21T13:15:12.252Z","label":"Last modified","detail":"Vulnerability information updated.","source":null}],"risk":{"score":30,"level":"medium","profile":"Default","thresholds":{"critical":75,"high":50,"medium":25,"low":10}},"meta":{"dataAsOf":"2026-10-20T07:14:16.877Z","stale":false,"partial":false}}