CVE-2024-49761: netapp ontap_tools

CVSS: 7.5v3.1HighModified

AliasesALPINE-CVE-2024-49761RHSA-2024:10777RHSA-2024:10834+76 more

Published 28-10-2024Last modified 03-11-2025

Vulnerability summary

CVE-2024-49761 is a high (CVSS 7.5) vulnerability in netapp ontap_tools. EPSS estimates a 1.42% chance of exploitation in the next 30 days, higher than 72.4% of scored vulnerabilities.

Overall risk

30/100

0100

Medium · default modelHow is this calculated?

CVSS score

7.5/10

010

High · v3.1 (NVD)

EPSS score

1.42%

0%100%

Low · 0.00 pp in 30 days

KEVNot listedIn no KEV catalog

RansomwareNone recordedNo known use recorded

Public exploits0No public exploits recorded

Timeline

28-10-2024
PublishedVulnerability first disclosed.
03-11-2025
Last modifiedVulnerability information updated.

Description

REXML is an XML toolkit for Ruby. The REXML gem before 3.3.9 has a ReDoS vulnerability when it parses an XML that has many digits between &# and x...; in a hex numeric character reference (&#x...;). This does not happen with Ruby 3.2 or later. Ruby 3.1 is the only affected maintained Ruby. The REXML gem 3.3.9 or later include the patch to fix the vulnerability.

CVSS metrics

11 scores · 9 sources · 2 versions

v4.06.6v3.17.5

EPSS trend

Probability

1.42%

Chance of exploitation in the next 30 days

Percentile

72%

Versus all other CVEs

30-day change

0.00 pp

From 1.42% on 19-09-2026

19-09-202619-10-2026

EPSS score

1.42%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

0 found

No public exploits indexed.

Weaknesses

CWE · root cause

CWE-1333Inefficient Regular Expression ComplexityThe product uses a regular expression with a worst-case computational complexity that is inefficient and possibly exponential.

Affected systems

Redhat65 products

pcs< 0:0.11.1-10.el9_0.6 | < 0:0.10.18-2.el8_10.6 | < 0:0.10.15-4.el8_8.8 | < 0:0.10.12-6.el8_6.9
pcs-snmp< 0:0.11.1-10.el9_0.6 | < 0:0.10.18-2.el8_10.6 | < 0:0.10.15-4.el8_8.8 | < 0:0.10.12-6.el8_6.9
puppet-agent< 0:8.8.1-2.el9sat | < 0:8.8.1-2.el8sat | < 0:7.34.0-3.el8sat | < 0:7.34.0-3.el9sat
puppetserver< 0:8.6.2-3.el9sat | < 0:8.6.2-3.el8sat
ruby< 0:3.1.5-144.module+el8.10.0+22580+b97d9670 | < 0:2.5.9-113.module+el8.10.0+22581+23fc9c9e | < 0:3.0.7-163.el9_5 | < 0:3.1.5-145.module+el9.5.0+22579+d0aa0a16 | < 0:3.0.7-162.el9_4.1 | < 0:3.0.4-161.el9_2.2 | < 0:3.1.2-142.module+el8.8.0+22637+76cde83a | < 0:3.0.4-160.1.el9_0 | < 0:3.1.2-141.1.module+el9.2.0+22640+f1bd3602 | < 0:3.1.5-145.module+el9.4.0+22626+a031549d | < 0:2.5.9-111.module+el8.8.0+22642+d0d7978a | < 0:2.5.5-106.module+el8.2.0+22646+0b11b626 | < 0:2.5.9-108.module+el8.4.0+22645+8a608fad | < 0:2.5.9-111.module+el8.6.0+22644+99a75427

ruby-bundled-gems< 0:3.1.5-144.module+el8.10.0+22580+b97d9670 | < 0:3.1.5-145.module+el9.5.0+22579+d0aa0a16 | < 0:3.1.2-142.module+el8.8.0+22637+76cde83a | < 0:3.1.2-141.1.module+el9.2.0+22640+f1bd3602 | < 0:3.1.5-145.module+el9.4.0+22626+a031549d
ruby-bundled-gems-debuginfo< 0:3.1.5-144.module+el8.10.0+22580+b97d9670 | < 0:3.1.5-145.module+el9.5.0+22579+d0aa0a16 | < 0:3.1.2-142.module+el8.8.0+22637+76cde83a | < 0:3.1.2-141.1.module+el9.2.0+22640+f1bd3602 | < 0:3.1.5-145.module+el9.4.0+22626+a031549d
ruby-debuginfo< 0:3.1.5-144.module+el8.10.0+22580+b97d9670 | < 0:2.5.9-113.module+el8.10.0+22581+23fc9c9e | < 0:3.0.7-163.el9_5 | < 0:3.1.5-145.module+el9.5.0+22579+d0aa0a16 | < 0:3.0.7-162.el9_4.1 | < 0:3.0.4-161.el9_2.2 | < 0:3.1.2-142.module+el8.8.0+22637+76cde83a | < 0:3.0.4-160.1.el9_0 | < 0:3.1.2-141.1.module+el9.2.0+22640+f1bd3602 | < 0:3.1.5-145.module+el9.4.0+22626+a031549d | < 0:2.5.9-111.module+el8.8.0+22642+d0d7978a | < 0:2.5.5-106.module+el8.2.0+22646+0b11b626 | < 0:2.5.9-108.module+el8.4.0+22645+8a608fad | < 0:2.5.9-111.module+el8.6.0+22644+99a75427
ruby-debugsource< 0:3.1.5-144.module+el8.10.0+22580+b97d9670 | < 0:2.5.9-113.module+el8.10.0+22581+23fc9c9e | < 0:3.0.7-163.el9_5 | < 0:3.1.5-145.module+el9.5.0+22579+d0aa0a16 | < 0:3.0.7-162.el9_4.1 | < 0:3.0.4-161.el9_2.2 | < 0:3.1.2-142.module+el8.8.0+22637+76cde83a | < 0:3.0.4-160.1.el9_0 | < 0:3.1.2-141.1.module+el9.2.0+22640+f1bd3602 | < 0:3.1.5-145.module+el9.4.0+22626+a031549d | < 0:2.5.9-111.module+el8.8.0+22642+d0d7978a | < 0:2.5.5-106.module+el8.2.0+22646+0b11b626 | < 0:2.5.9-108.module+el8.4.0+22645+8a608fad | < 0:2.5.9-111.module+el8.6.0+22644+99a75427
ruby-default-gems< 0:3.1.5-144.module+el8.10.0+22580+b97d9670 | < 0:3.0.7-163.el9_5 | < 0:3.1.5-145.module+el9.5.0+22579+d0aa0a16 | < 0:3.0.7-162.el9_4.1 | < 0:3.0.4-161.el9_2.2 | < 0:3.1.2-142.module+el8.8.0+22637+76cde83a | < 0:3.0.4-160.1.el9_0 | < 0:3.1.2-141.1.module+el9.2.0+22640+f1bd3602 | < 0:3.1.5-145.module+el9.4.0+22626+a031549d
ruby-devel< 0:3.1.5-144.module+el8.10.0+22580+b97d9670 | < 0:2.5.9-113.module+el8.10.0+22581+23fc9c9e | < 0:3.0.7-163.el9_5 | < 0:3.1.5-145.module+el9.5.0+22579+d0aa0a16 | < 0:3.0.7-162.el9_4.1 | < 0:3.0.4-161.el9_2.2 | < 0:3.1.2-142.module+el8.8.0+22637+76cde83a | < 0:3.0.4-160.1.el9_0 | < 0:3.1.2-141.1.module+el9.2.0+22640+f1bd3602 | < 0:3.1.5-145.module+el9.4.0+22626+a031549d | < 0:2.5.9-111.module+el8.8.0+22642+d0d7978a | < 0:2.5.5-106.module+el8.2.0+22646+0b11b626 | < 0:2.5.9-108.module+el8.4.0+22645+8a608fad | < 0:2.5.9-111.module+el8.6.0+22644+99a75427
ruby-doc< 0:3.1.5-144.module+el8.10.0+22580+b97d9670 | < 0:2.5.9-113.module+el8.10.0+22581+23fc9c9e | < 0:3.0.7-163.el9_5 | < 0:3.1.5-145.module+el9.5.0+22579+d0aa0a16 | < 0:3.0.7-162.el9_4.1 | < 0:3.0.4-161.el9_2.2 | < 0:3.1.2-142.module+el8.8.0+22637+76cde83a | < 0:3.1.2-141.1.module+el9.2.0+22640+f1bd3602 | < 0:3.1.5-145.module+el9.4.0+22626+a031549d | < 0:2.5.9-111.module+el8.8.0+22642+d0d7978a | < 0:2.5.5-106.module+el8.2.0+22646+0b11b626 | < 0:2.5.9-108.module+el8.4.0+22645+8a608fad | < 0:2.5.9-111.module+el8.6.0+22644+99a75427
ruby-irb< 0:2.5.9-113.module+el8.10.0+22581+23fc9c9e | < 0:2.5.9-111.module+el8.8.0+22642+d0d7978a | < 0:2.5.5-106.module+el8.2.0+22646+0b11b626 | < 0:2.5.9-108.module+el8.4.0+22645+8a608fad | < 0:2.5.9-111.module+el8.6.0+22644+99a75427
ruby-libs< 0:3.1.5-144.module+el8.10.0+22580+b97d9670 | < 0:2.5.9-113.module+el8.10.0+22581+23fc9c9e | < 0:3.0.7-163.el9_5 | < 0:3.1.5-145.module+el9.5.0+22579+d0aa0a16 | < 0:3.0.7-162.el9_4.1 | < 0:3.0.4-161.el9_2.2 | < 0:3.1.2-142.module+el8.8.0+22637+76cde83a | < 0:3.0.4-160.1.el9_0 | < 0:3.1.2-141.1.module+el9.2.0+22640+f1bd3602 | < 0:3.1.5-145.module+el9.4.0+22626+a031549d | < 0:2.5.9-111.module+el8.8.0+22642+d0d7978a | < 0:2.5.5-106.module+el8.2.0+22646+0b11b626 | < 0:2.5.9-108.module+el8.4.0+22645+8a608fad | < 0:2.5.9-111.module+el8.6.0+22644+99a75427
ruby-libs-debuginfo< 0:3.1.5-144.module+el8.10.0+22580+b97d9670 | < 0:2.5.9-113.module+el8.10.0+22581+23fc9c9e | < 0:3.0.7-163.el9_5 | < 0:3.1.5-145.module+el9.5.0+22579+d0aa0a16 | < 0:3.0.7-162.el9_4.1 | < 0:3.0.4-161.el9_2.2 | < 0:3.1.2-142.module+el8.8.0+22637+76cde83a | < 0:3.0.4-160.1.el9_0 | < 0:3.1.2-141.1.module+el9.2.0+22640+f1bd3602 | < 0:3.1.5-145.module+el9.4.0+22626+a031549d | < 0:2.5.9-111.module+el8.8.0+22642+d0d7978a | < 0:2.5.5-106.module+el8.2.0+22646+0b11b626 | < 0:2.5.9-108.module+el8.4.0+22645+8a608fad | < 0:2.5.9-111.module+el8.6.0+22644+99a75427
rubygem-abrt< 0:0.4.0-1.module+el8.10.0+21470+43ec8058 | < 0:0.3.0-4.module+el8.10.0+22021+135c76a8 | < 0:0.4.0-1.module+el8.7.0+15051+29b42f0c | < 0:0.3.0-4.module+el8.1.0+3656+f80bfa1d
rubygem-abrt-doc< 0:0.4.0-1.module+el8.10.0+21470+43ec8058 | < 0:0.3.0-4.module+el8.10.0+22021+135c76a8 | < 0:0.4.0-1.module+el8.7.0+15051+29b42f0c | < 0:0.3.0-4.module+el8.1.0+3656+f80bfa1d
rubygem-bigdecimal< 0:3.1.1-144.module+el8.10.0+22580+b97d9670 | < 0:1.3.4-113.module+el8.10.0+22581+23fc9c9e | < 0:3.0.0-163.el9_5 | < 0:3.1.1-145.module+el9.5.0+22579+d0aa0a16 | < 0:3.0.0-162.el9_4.1 | < 0:3.0.0-161.el9_2.2 | < 0:3.1.1-142.module+el8.8.0+22637+76cde83a | < 0:3.0.0-160.1.el9_0 | < 0:3.1.1-141.1.module+el9.2.0+22640+f1bd3602 | < 0:3.1.1-145.module+el9.4.0+22626+a031549d | < 0:1.3.4-111.module+el8.8.0+22642+d0d7978a | < 0:1.3.4-106.module+el8.2.0+22646+0b11b626 | < 0:1.3.4-108.module+el8.4.0+22645+8a608fad | < 0:1.3.4-111.module+el8.6.0+22644+99a75427
rubygem-bigdecimal-debuginfo< 0:3.1.1-144.module+el8.10.0+22580+b97d9670 | < 0:1.3.4-113.module+el8.10.0+22581+23fc9c9e | < 0:3.0.0-163.el9_5 | < 0:3.1.1-145.module+el9.5.0+22579+d0aa0a16 | < 0:3.0.0-162.el9_4.1 | < 0:3.0.0-161.el9_2.2 | < 0:3.1.1-142.module+el8.8.0+22637+76cde83a | < 0:3.0.0-160.1.el9_0 | < 0:3.1.1-141.1.module+el9.2.0+22640+f1bd3602 | < 0:3.1.1-145.module+el9.4.0+22626+a031549d | < 0:1.3.4-111.module+el8.8.0+22642+d0d7978a | < 0:1.3.4-106.module+el8.2.0+22646+0b11b626 | < 0:1.3.4-108.module+el8.4.0+22645+8a608fad | < 0:1.3.4-111.module+el8.6.0+22644+99a75427
rubygem-bson< 0:4.3.0-2.module+el8.9.0+19193+435404ae | < 0:4.3.0-2.module+el8.1.0+3656+f80bfa1d
rubygem-bson-debuginfo< 0:4.3.0-2.module+el8.9.0+19193+435404ae | < 0:4.3.0-2.module+el8.1.0+3656+f80bfa1d
rubygem-bson-debugsource< 0:4.3.0-2.module+el8.9.0+19193+435404ae | < 0:4.3.0-2.module+el8.1.0+3656+f80bfa1d
rubygem-bson-doc< 0:4.3.0-2.module+el8.9.0+19193+435404ae | < 0:4.3.0-2.module+el8.1.0+3656+f80bfa1d
rubygem-bundler< 0:2.3.27-144.module+el8.10.0+22580+b97d9670 | < 0:1.16.1-4.module+el8.10.0+22021+135c76a8 | < 0:2.2.33-163.el9_5 | < 0:2.3.27-145.module+el9.5.0+22579+d0aa0a16 | < 0:2.2.33-162.el9_4.1 | < 0:2.2.33-161.el9_2.2 | < 0:2.3.7-142.module+el8.8.0+22637+76cde83a | < 0:2.2.33-160.1.el9_0 | < 0:2.3.7-141.1.module+el9.2.0+22640+f1bd3602 | < 0:2.3.27-145.module+el9.4.0+22626+a031549d | < 0:1.16.1-4.module+el8.6.0+14229+2452087f | < 0:1.16.1-4.module+el8.2.0+14084+4fedcad5 | < 0:1.16.1-4.module+el8.4.0+14083+f9ece6dd
rubygem-bundler-doc< 0:1.16.1-4.module+el8.10.0+22021+135c76a8 | < 0:1.16.1-4.module+el8.6.0+14229+2452087f | < 0:1.16.1-4.module+el8.2.0+14084+4fedcad5 | < 0:1.16.1-4.module+el8.4.0+14083+f9ece6dd
rubygem-did_you_mean< 0:1.2.0-113.module+el8.10.0+22581+23fc9c9e | < 0:1.2.0-111.module+el8.8.0+22642+d0d7978a | < 0:1.2.0-106.module+el8.2.0+22646+0b11b626 | < 0:1.2.0-108.module+el8.4.0+22645+8a608fad | < 0:1.2.0-111.module+el8.6.0+22644+99a75427
rubygem-foreman_rh_cloud< 0:10.0.7-1.el8sat | < 0:10.0.7-1.el9sat
rubygem-foreman_webhooks< 0:3.2.4-1.el8sat | < 0:3.2.4-1.el9sat
rubygem-io-console< 0:0.5.11-144.module+el8.10.0+22580+b97d9670 | < 0:0.4.6-113.module+el8.10.0+22581+23fc9c9e | < 0:0.5.7-163.el9_5 | < 0:0.5.11-145.module+el9.5.0+22579+d0aa0a16 | < 0:0.5.7-162.el9_4.1 | < 0:0.5.7-161.el9_2.2 | < 0:0.5.11-142.module+el8.8.0+22637+76cde83a | < 0:0.5.7-160.1.el9_0 | < 0:0.5.11-141.1.module+el9.2.0+22640+f1bd3602 | < 0:0.5.11-145.module+el9.4.0+22626+a031549d | < 0:0.4.6-111.module+el8.8.0+22642+d0d7978a | < 0:0.4.6-106.module+el8.2.0+22646+0b11b626 | < 0:0.4.6-108.module+el8.4.0+22645+8a608fad | < 0:0.4.6-111.module+el8.6.0+22644+99a75427
rubygem-io-console-debuginfo< 0:0.5.11-144.module+el8.10.0+22580+b97d9670 | < 0:0.4.6-113.module+el8.10.0+22581+23fc9c9e | < 0:0.5.7-163.el9_5 | < 0:0.5.11-145.module+el9.5.0+22579+d0aa0a16 | < 0:0.5.7-162.el9_4.1 | < 0:0.5.7-161.el9_2.2 | < 0:0.5.11-142.module+el8.8.0+22637+76cde83a | < 0:0.5.7-160.1.el9_0 | < 0:0.5.11-141.1.module+el9.2.0+22640+f1bd3602 | < 0:0.5.11-145.module+el9.4.0+22626+a031549d | < 0:0.4.6-111.module+el8.8.0+22642+d0d7978a | < 0:0.4.6-106.module+el8.2.0+22646+0b11b626 | < 0:0.4.6-108.module+el8.4.0+22645+8a608fad | < 0:0.4.6-111.module+el8.6.0+22644+99a75427
rubygem-irb< 0:1.4.1-144.module+el8.10.0+22580+b97d9670 | < 0:1.3.5-163.el9_5 | < 0:1.4.1-145.module+el9.5.0+22579+d0aa0a16 | < 0:1.3.5-162.el9_4.1 | < 0:1.3.5-161.el9_2.2 | < 0:1.4.1-142.module+el8.8.0+22637+76cde83a | < 0:1.3.5-160.1.el9_0 | < 0:1.4.1-141.1.module+el9.2.0+22640+f1bd3602 | < 0:1.4.1-145.module+el9.4.0+22626+a031549d
rubygem-json< 0:2.6.1-144.module+el8.10.0+22580+b97d9670 | < 0:2.1.0-113.module+el8.10.0+22581+23fc9c9e | < 0:2.5.1-163.el9_5 | < 0:2.6.1-145.module+el9.5.0+22579+d0aa0a16 | < 0:2.5.1-162.el9_4.1 | < 0:2.5.1-161.el9_2.2 | < 0:2.6.1-142.module+el8.8.0+22637+76cde83a | < 0:2.5.1-160.1.el9_0 | < 0:2.6.1-141.1.module+el9.2.0+22640+f1bd3602 | < 0:2.6.1-145.module+el9.4.0+22626+a031549d | < 0:2.1.0-111.module+el8.8.0+22642+d0d7978a | < 0:2.1.0-106.module+el8.2.0+22646+0b11b626 | < 0:2.1.0-108.module+el8.4.0+22645+8a608fad | < 0:2.1.0-111.module+el8.6.0+22644+99a75427
rubygem-json-debuginfo< 0:2.6.1-144.module+el8.10.0+22580+b97d9670 | < 0:2.1.0-113.module+el8.10.0+22581+23fc9c9e | < 0:2.5.1-163.el9_5 | < 0:2.6.1-145.module+el9.5.0+22579+d0aa0a16 | < 0:2.5.1-162.el9_4.1 | < 0:2.5.1-161.el9_2.2 | < 0:2.6.1-142.module+el8.8.0+22637+76cde83a | < 0:2.5.1-160.1.el9_0 | < 0:2.6.1-141.1.module+el9.2.0+22640+f1bd3602 | < 0:2.6.1-145.module+el9.4.0+22626+a031549d | < 0:2.1.0-111.module+el8.8.0+22642+d0d7978a | < 0:2.1.0-106.module+el8.2.0+22646+0b11b626 | < 0:2.1.0-108.module+el8.4.0+22645+8a608fad | < 0:2.1.0-111.module+el8.6.0+22644+99a75427
rubygem-minitest< 0:5.15.0-144.module+el8.10.0+22580+b97d9670 | < 0:5.10.3-113.module+el8.10.0+22581+23fc9c9e | < 0:5.14.2-163.el9_5 | < 0:5.15.0-145.module+el9.5.0+22579+d0aa0a16 | < 0:5.14.2-162.el9_4.1 | < 0:5.14.2-161.el9_2.2 | < 0:5.15.0-142.module+el8.8.0+22637+76cde83a | < 0:5.14.2-160.1.el9_0 | < 0:5.15.0-141.1.module+el9.2.0+22640+f1bd3602 | < 0:5.15.0-145.module+el9.4.0+22626+a031549d | < 0:5.10.3-111.module+el8.8.0+22642+d0d7978a | < 0:5.10.3-106.module+el8.2.0+22646+0b11b626 | < 0:5.10.3-108.module+el8.4.0+22645+8a608fad | < 0:5.10.3-111.module+el8.6.0+22644+99a75427
rubygem-mongo< 0:2.5.1-2.module+el8.9.0+19193+435404ae | < 0:2.5.1-2.module+el8.1.0+3656+f80bfa1d
rubygem-mongo-doc< 0:2.5.1-2.module+el8.9.0+19193+435404ae | < 0:2.5.1-2.module+el8.1.0+3656+f80bfa1d
rubygem-mysql2< 0:0.5.3-3.module+el8.10.0+21470+43ec8058 | < 0:0.4.10-4.module+el8.9.0+19193+435404ae | < 0:0.5.4-1.module+el9.1.0+15737+76195479 | < 0:0.5.3-2.module+el8.7.0+15051+29b42f0c | < 0:0.4.10-4.module+el8.1.0+3656+f80bfa1d
rubygem-mysql2-debuginfo< 0:0.5.3-3.module+el8.10.0+21470+43ec8058 | < 0:0.4.10-4.module+el8.9.0+19193+435404ae | < 0:0.5.4-1.module+el9.1.0+15737+76195479 | < 0:0.5.3-2.module+el8.7.0+15051+29b42f0c | < 0:0.4.10-4.module+el8.1.0+3656+f80bfa1d
rubygem-mysql2-debugsource< 0:0.5.3-3.module+el8.10.0+21470+43ec8058 | < 0:0.4.10-4.module+el8.9.0+19193+435404ae | < 0:0.5.4-1.module+el9.1.0+15737+76195479 | < 0:0.5.3-2.module+el8.7.0+15051+29b42f0c | < 0:0.4.10-4.module+el8.1.0+3656+f80bfa1d
rubygem-mysql2-doc< 0:0.5.3-3.module+el8.10.0+21470+43ec8058 | < 0:0.4.10-4.module+el8.9.0+19193+435404ae | < 0:0.5.4-1.module+el9.1.0+15737+76195479 | < 0:0.5.3-2.module+el8.7.0+15051+29b42f0c | < 0:0.4.10-4.module+el8.1.0+3656+f80bfa1d
rubygem-net-telnet< 0:0.1.1-113.module+el8.10.0+22581+23fc9c9e | < 0:0.1.1-111.module+el8.8.0+22642+d0d7978a | < 0:0.1.1-106.module+el8.2.0+22646+0b11b626 | < 0:0.1.1-108.module+el8.4.0+22645+8a608fad | < 0:0.1.1-111.module+el8.6.0+22644+99a75427
rubygem-openssl< 0:2.1.2-113.module+el8.10.0+22581+23fc9c9e | < 0:2.1.2-111.module+el8.8.0+22642+d0d7978a | < 0:2.1.2-106.module+el8.2.0+22646+0b11b626 | < 0:2.1.2-108.module+el8.4.0+22645+8a608fad | < 0:2.1.2-111.module+el8.6.0+22644+99a75427
rubygem-openssl-debuginfo< 0:2.1.2-113.module+el8.10.0+22581+23fc9c9e | < 0:2.1.2-111.module+el8.8.0+22642+d0d7978a | < 0:2.1.2-106.module+el8.2.0+22646+0b11b626 | < 0:2.1.2-108.module+el8.4.0+22645+8a608fad | < 0:2.1.2-111.module+el8.6.0+22644+99a75427
rubygem-pg< 0:1.3.2-1.module+el8.10.0+21470+43ec8058 | < 0:1.0.0-3.module+el8.9.0+19193+435404ae | < 0:1.3.5-1.module+el9.1.0+15737+76195479 | < 0:1.3.2-1.module+el8.7.0+15125+b11ff321 | < 0:1.0.0-2.module+el8.1.0+3656+f80bfa1d
rubygem-pg-debuginfo< 0:1.3.2-1.module+el8.10.0+21470+43ec8058 | < 0:1.0.0-3.module+el8.9.0+19193+435404ae | < 0:1.3.5-1.module+el9.1.0+15737+76195479 | < 0:1.3.2-1.module+el8.7.0+15125+b11ff321 | < 0:1.0.0-2.module+el8.1.0+3656+f80bfa1d
rubygem-pg-debugsource< 0:1.3.2-1.module+el8.10.0+21470+43ec8058 | < 0:1.0.0-3.module+el8.9.0+19193+435404ae | < 0:1.3.5-1.module+el9.1.0+15737+76195479 | < 0:1.3.2-1.module+el8.7.0+15125+b11ff321 | < 0:1.0.0-2.module+el8.1.0+3656+f80bfa1d
rubygem-pg-doc< 0:1.3.2-1.module+el8.10.0+21470+43ec8058 | < 0:1.0.0-3.module+el8.9.0+19193+435404ae | < 0:1.3.5-1.module+el9.1.0+15737+76195479 | < 0:1.3.2-1.module+el8.7.0+15125+b11ff321 | < 0:1.0.0-2.module+el8.1.0+3656+f80bfa1d
rubygem-power_assert< 0:2.0.1-144.module+el8.10.0+22580+b97d9670 | < 0:1.1.1-113.module+el8.10.0+22581+23fc9c9e | < 0:1.2.1-163.el9_5 | < 0:2.0.1-145.module+el9.5.0+22579+d0aa0a16 | < 0:1.2.1-162.el9_4.1 | < 0:1.2.0-161.el9_2.2 | < 0:2.0.1-142.module+el8.8.0+22637+76cde83a | < 0:1.2.0-160.1.el9_0 | < 0:2.0.1-141.1.module+el9.2.0+22640+f1bd3602 | < 0:2.0.1-145.module+el9.4.0+22626+a031549d | < 0:1.1.1-111.module+el8.8.0+22642+d0d7978a | < 0:1.1.1-106.module+el8.2.0+22646+0b11b626 | < 0:1.1.1-108.module+el8.4.0+22645+8a608fad | < 0:1.1.1-111.module+el8.6.0+22644+99a75427
rubygem-psych< 0:4.0.4-144.module+el8.10.0+22580+b97d9670 | < 0:3.0.2-113.module+el8.10.0+22581+23fc9c9e | < 0:3.3.2-163.el9_5 | < 0:4.0.4-145.module+el9.5.0+22579+d0aa0a16 | < 0:3.3.2-162.el9_4.1 | < 0:3.3.2-161.el9_2.2 | < 0:4.0.3-142.module+el8.8.0+22637+76cde83a | < 0:3.3.2-160.1.el9_0 | < 0:4.0.3-141.1.module+el9.2.0+22640+f1bd3602 | < 0:4.0.4-145.module+el9.4.0+22626+a031549d | < 0:3.0.2-111.module+el8.8.0+22642+d0d7978a | < 0:3.0.2-106.module+el8.2.0+22646+0b11b626 | < 0:3.0.2-108.module+el8.4.0+22645+8a608fad | < 0:3.0.2-111.module+el8.6.0+22644+99a75427
rubygem-psych-debuginfo< 0:4.0.4-144.module+el8.10.0+22580+b97d9670 | < 0:3.0.2-113.module+el8.10.0+22581+23fc9c9e | < 0:3.3.2-163.el9_5 | < 0:4.0.4-145.module+el9.5.0+22579+d0aa0a16 | < 0:3.3.2-162.el9_4.1 | < 0:3.3.2-161.el9_2.2 | < 0:4.0.3-142.module+el8.8.0+22637+76cde83a | < 0:3.3.2-160.1.el9_0 | < 0:4.0.3-141.1.module+el9.2.0+22640+f1bd3602 | < 0:4.0.4-145.module+el9.4.0+22626+a031549d | < 0:3.0.2-111.module+el8.8.0+22642+d0d7978a | < 0:3.0.2-106.module+el8.2.0+22646+0b11b626 | < 0:3.0.2-108.module+el8.4.0+22645+8a608fad | < 0:3.0.2-111.module+el8.6.0+22644+99a75427
rubygem-rake< 0:13.0.6-144.module+el8.10.0+22580+b97d9670 | < 0:12.3.3-113.module+el8.10.0+22581+23fc9c9e | < 0:13.0.3-163.el9_5 | < 0:13.0.6-145.module+el9.5.0+22579+d0aa0a16 | < 0:13.0.3-162.el9_4.1 | < 0:13.0.3-161.el9_2.2 | < 0:13.0.6-142.module+el8.8.0+22637+76cde83a | < 0:13.0.3-160.1.el9_0 | < 0:13.0.6-141.1.module+el9.2.0+22640+f1bd3602 | < 0:13.0.6-145.module+el9.4.0+22626+a031549d | < 0:12.3.3-111.module+el8.8.0+22642+d0d7978a | < 0:12.3.0-106.module+el8.2.0+22646+0b11b626 | < 0:12.3.3-108.module+el8.4.0+22645+8a608fad | < 0:12.3.3-111.module+el8.6.0+22644+99a75427
rubygem-rbs< 0:2.7.0-144.module+el8.10.0+22580+b97d9670 | < 0:1.4.0-163.el9_5 | < 0:2.7.0-145.module+el9.5.0+22579+d0aa0a16 | < 0:1.4.0-162.el9_4.1 | < 0:1.4.0-161.el9_2.2 | < 0:2.1.0-142.module+el8.8.0+22637+76cde83a | < 0:1.4.0-160.1.el9_0 | < 0:2.1.0-141.1.module+el9.2.0+22640+f1bd3602 | < 0:2.7.0-145.module+el9.4.0+22626+a031549d
rubygem-rbs-debuginfo< 0:2.7.0-144.module+el8.10.0+22580+b97d9670 | < 0:2.7.0-145.module+el9.5.0+22579+d0aa0a16 | < 0:2.1.0-142.module+el8.8.0+22637+76cde83a | < 0:2.1.0-141.1.module+el9.2.0+22640+f1bd3602 | < 0:2.7.0-145.module+el9.4.0+22626+a031549d
rubygem-rdoc< 0:6.4.1.1-144.module+el8.10.0+22580+b97d9670 | < 0:6.0.1.1-113.module+el8.10.0+22581+23fc9c9e | < 0:6.3.4.1-163.el9_5 | < 0:6.4.1.1-145.module+el9.5.0+22579+d0aa0a16 | < 0:6.3.4.1-162.el9_4.1 | < 0:6.3.3-161.el9_2.2 | < 0:6.4.0-142.module+el8.8.0+22637+76cde83a | < 0:6.3.3-160.1.el9_0 | < 0:6.4.0-141.1.module+el9.2.0+22640+f1bd3602 | < 0:6.4.1.1-145.module+el9.4.0+22626+a031549d | < 0:6.0.1.1-111.module+el8.8.0+22642+d0d7978a | < 0:6.0.1-106.module+el8.2.0+22646+0b11b626 | < 0:6.0.1.1-108.module+el8.4.0+22645+8a608fad | < 0:6.0.1.1-111.module+el8.6.0+22644+99a75427
rubygem-rexml< 0:3.2.5-144.module+el8.10.0+22580+b97d9670 | < 0:3.2.5-163.el9_5 | < 0:3.2.5-145.module+el9.5.0+22579+d0aa0a16 | < 0:3.2.5-162.el9_4.1 | < 0:3.2.5-161.el9_2.2 | < 0:3.2.5-142.module+el8.8.0+22637+76cde83a | < 0:3.2.5-160.1.el9_0 | < 0:3.2.5-141.1.module+el9.2.0+22640+f1bd3602 | < 0:3.2.5-145.module+el9.4.0+22626+a031549d
rubygem-rss< 0:0.2.9-144.module+el8.10.0+22580+b97d9670 | < 0:0.2.9-163.el9_5 | < 0:0.2.9-145.module+el9.5.0+22579+d0aa0a16 | < 0:0.2.9-162.el9_4.1 | < 0:0.2.9-161.el9_2.2 | < 0:0.2.9-142.module+el8.8.0+22637+76cde83a | < 0:0.2.9-160.1.el9_0 | < 0:0.2.9-141.1.module+el9.2.0+22640+f1bd3602 | < 0:0.2.9-145.module+el9.4.0+22626+a031549d
rubygem-test-unit< 0:3.5.3-144.module+el8.10.0+22580+b97d9670 | < 0:3.2.7-113.module+el8.10.0+22581+23fc9c9e | < 0:3.3.7-163.el9_5 | < 0:3.5.3-145.module+el9.5.0+22579+d0aa0a16 | < 0:3.3.7-162.el9_4.1 | < 0:3.3.7-161.el9_2.2 | < 0:3.5.3-142.module+el8.8.0+22637+76cde83a | < 0:3.3.7-160.1.el9_0 | < 0:3.5.3-141.1.module+el9.2.0+22640+f1bd3602 | < 0:3.5.3-145.module+el9.4.0+22626+a031549d | < 0:3.2.7-111.module+el8.8.0+22642+d0d7978a | < 0:3.2.7-106.module+el8.2.0+22646+0b11b626 | < 0:3.2.7-108.module+el8.4.0+22645+8a608fad | < 0:3.2.7-111.module+el8.6.0+22644+99a75427
rubygem-typeprof< 0:0.21.3-144.module+el8.10.0+22580+b97d9670 | < 0:0.15.2-163.el9_5 | < 0:0.21.3-145.module+el9.5.0+22579+d0aa0a16 | < 0:0.15.2-162.el9_4.1 | < 0:0.15.2-161.el9_2.2 | < 0:0.21.2-142.module+el8.8.0+22637+76cde83a | < 0:0.15.2-160.1.el9_0 | < 0:0.21.2-141.1.module+el9.2.0+22640+f1bd3602 | < 0:0.21.3-145.module+el9.4.0+22626+a031549d
rubygem-xmlrpc< 0:0.3.0-113.module+el8.10.0+22581+23fc9c9e | < 0:0.3.0-111.module+el8.8.0+22642+d0d7978a | < 0:0.3.0-106.module+el8.2.0+22646+0b11b626 | < 0:0.3.0-108.module+el8.4.0+22645+8a608fad | < 0:0.3.0-111.module+el8.6.0+22644+99a75427
rubygems< 0:3.3.27-144.module+el8.10.0+22580+b97d9670 | < 0:2.7.6.3-113.module+el8.10.0+22581+23fc9c9e | < 0:3.2.33-163.el9_5 | < 0:3.3.27-145.module+el9.5.0+22579+d0aa0a16 | < 0:3.2.33-162.el9_4.1 | < 0:3.2.33-161.el9_2.2 | < 0:3.3.7-142.module+el8.8.0+22637+76cde83a | < 0:3.2.33-160.1.el9_0 | < 0:3.3.7-141.1.module+el9.2.0+22640+f1bd3602 | < 0:3.3.27-145.module+el9.4.0+22626+a031549d | < 0:2.7.6.3-111.module+el8.8.0+22642+d0d7978a | < 0:2.7.6.2-106.module+el8.2.0+22646+0b11b626 | < 0:2.7.6.3-108.module+el8.4.0+22645+8a608fad | < 0:2.7.6.3-111.module+el8.6.0+22644+99a75427
rubygems-devel< 0:3.3.27-144.module+el8.10.0+22580+b97d9670 | < 0:2.7.6.3-113.module+el8.10.0+22581+23fc9c9e | < 0:3.2.33-163.el9_5 | < 0:3.3.27-145.module+el9.5.0+22579+d0aa0a16 | < 0:3.2.33-162.el9_4.1 | < 0:3.2.33-161.el9_2.2 | < 0:3.3.7-142.module+el8.8.0+22637+76cde83a | < 0:3.2.33-160.1.el9_0 | < 0:3.3.7-141.1.module+el9.2.0+22640+f1bd3602 | < 0:3.3.27-145.module+el9.4.0+22626+a031549d | < 0:2.7.6.3-111.module+el8.8.0+22642+d0d7978a | < 0:2.7.6.2-106.module+el8.2.0+22646+0b11b626 | < 0:2.7.6.3-108.module+el8.4.0+22645+8a608fad | < 0:2.7.6.3-111.module+el8.6.0+22644+99a75427
satellite< 0:6.16.5.3-1.el8sat | < 0:6.16.5.3-1.el9sat
satellite-capsule< 0:6.16.5.3-1.el8sat | < 0:6.16.5.3-1.el9sat
satellite-cli< 0:6.16.5.3-1.el8sat | < 0:6.16.5.3-1.el9sat
satellite-common< 0:6.16.5.3-1.el8sat | < 0:6.16.5.3-1.el9sat

Show all 65

Chainguard26 products

jruby-9.4< 9.4.9.0-r0
jruby-9.4-default-ruby< 9.4.9.0-r0
kube-fluentd-operator< 1.18.2-r18
kube-fluentd-operator-compat< 1.18.2-r18
kube-fluentd-operator-default-config< 1.18.2-r18

Show all 26

Wolfi17 products

jruby-9.4< 9.4.9.0-r0
jruby-9.4-default-ruby< 9.4.9.0-r0
kube-fluentd-operator< 1.18.2-r18
kube-fluentd-operator-compat< 1.18.2-r18
kube-fluentd-operator-default-config< 1.18.2-r18

Show all 17

Ubuntu7 products

jrubyAll versions (No fix recorded)
ruby2.3< 2.3.1-2~ubuntu16.04.16+esm10 | All versions (No fix recorded)
ruby2.5< 2.5.1-1ubuntu1.16+esm4 | All versions (No fix recorded)
ruby2.7< 2.7.0-5ubuntu1.15 | All versions (No fix recorded)
ruby3.0< 3.0.2-7ubuntu2.8 | All versions (No fix recorded)

Show all 7

Debian2 products

ruby3.1All versions (No fix recorded)
ruby3.3< 3.3.6-1

Alpine1 product

ruby-rexml< 3.3.9-r0

Netapp1 product

ontap_tools10

Ruby1 product

rexml< 3.3.9

Ruby-lang1 product

rexml< 3.3.9

RubyGems1 product

rexml< 3.3.9

10 vendors · 122 products

References

89 links

github.com/ruby/rexml/security/advisories/GHSA-2rxp-v6pw-ch6mX Refsource CONFIRMARTICLEREPORTAdvisoryWEBThird Party Advisory
github.com/ruby/rexml/commit/ce59f2eb1aeb371fe1643414f06618dbe031979fX Refsource MISCARTICLEREPORTFIXWEBPatch
www.ruby-lang.org/en/news/2024/10/28/redos-rexml-cve-2024-49761X Refsource MISCARTICLEREPORTWEBVendor Advisory
security.netapp.com/advisory/ntap-20241227-0004/AdvisoryThird Party Advisory
lists.debian.org/debian-lts-announce/2025/01/msg00011.htmlWEB
security.alpinelinux.org/vuln/CVE-2024-49761Advisory
access.redhat.com/errata/RHSA-2024:10777Advisory
access.redhat.com/security/updates/classification/ARTICLE
bugzilla.redhat.com/show_bug.cgi?id=2322153REPORT
security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_10777.jsonAdvisory

Show all 89 references

Vulnerability summary

Advisory lineage

Timeline

Description

CVSS metrics

EPSS trend

Known exploited

Public exploits

Weaknesses

Affected systems

References

Related vulnerabilities