RHSA-2018:3731: rh-ruby25-ruby Red Hat

Published

Published 13-09-2024Last modified 29-06-2026

Vulnerability summary

RHSA-2018:3731 is a high (CVSS 7.8) vulnerability in rh-ruby25-ruby Red Hat.

Overall risk

31/100

0100

Medium · default modelHow is this calculated?

CVSS score

7.8/10

010

High · v3.0 (OSV · Red hat), selected by version preference

EPSS scoreNot scoredRisk metrics not yet published.

KEVNot listedNot listed by any tracked catalog.

RansomwareNot flaggedNo ransomware use recorded.

Public exploits0No public exploits recorded

Advisory lineage

Upstream 15 · Downstream 0

CVE-2017-17742 CVE-2018-1000073 CVE-2018-1000074 CVE-2018-1000075 CVE-2018-1000076 CVE-2018-1000077+9 more

Timeline

13-09-2024
PublishedVulnerability first disclosed.
29-06-2026
Last modifiedVulnerability information updated.

Description

Red Hat Security Advisory: rh-ruby25-ruby security, bug fix, and enhancement update

CVSS metrics

1 score · 1 source · 1 version

v3.07.8

EPSS trend

No EPSS score has been published for this record yet.

Known exploited

Compare KEV catalogs

CISA KEV

Not in the CISA KEV catalog.

ENISA CNW

Not in the ENISA CNW catalog.

CIRCL

Not in the CIRCL catalog.

Public exploits

0 found

No public exploits indexed.

Weaknesses

CWE · root cause

No weakness data has been published for this record.

Affected systems

Redhat21 products

rh-ruby25-ruby< 0:2.5.3-6.el7
rh-ruby25-ruby-debuginfo< 0:2.5.3-6.el7
rh-ruby25-ruby-devel< 0:2.5.3-6.el7
rh-ruby25-ruby-doc< 0:2.5.3-6.el7
rh-ruby25-ruby-irb< 0:2.5.3-6.el7

Show all 21

1 vendor · 21 products

References

73 links

Show all 73 references

bugzilla.redhat.com/show_bug.cgi?id=1561948REPORT
bugzilla.redhat.com/show_bug.cgi?id=1561949REPORT
bugzilla.redhat.com/show_bug.cgi?id=1561950REPORT
bugzilla.redhat.com/show_bug.cgi?id=1561952REPORT
bugzilla.redhat.com/show_bug.cgi?id=1561953REPORT
bugzilla.redhat.com/show_bug.cgi?id=1643086REPORT
bugzilla.redhat.com/show_bug.cgi?id=1643089REPORT
bugzilla.redhat.com/show_bug.cgi?id=1650588REPORT
security.access.redhat.com/data/csaf/v2/advisories/2018/rhsa-2018_3731.jsonAdvisory
access.redhat.com/security/cve/CVE-2017-17742REPORT
www.cve.org/CVERecord?id=CVE-2017-17742Advisory
nvd.nist.gov/vuln/detail/CVE-2017-17742Advisory
www.ruby-lang.org/en/news/2018/03/28/http-response-splitting-in-webrick-cve-2017-17742/ARTICLE
access.redhat.com/security/cve/CVE-2018-6914REPORT
www.cve.org/CVERecord?id=CVE-2018-6914Advisory
nvd.nist.gov/vuln/detail/CVE-2018-6914Advisory
www.ruby-lang.org/en/…ARTICLE
access.redhat.com/security/cve/CVE-2018-8777REPORT
www.cve.org/CVERecord?id=CVE-2018-8777Advisory
nvd.nist.gov/vuln/detail/CVE-2018-8777Advisory
www.ruby-lang.org/en/news/2018/03/28/large-request-dos-in-webrick-cve-2018-8777/ARTICLE
access.redhat.com/security/cve/CVE-2018-8778REPORT
www.cve.org/CVERecord?id=CVE-2018-8778Advisory
nvd.nist.gov/vuln/detail/CVE-2018-8778Advisory
www.ruby-lang.org/en/news/2018/03/28/buffer-under-read-unpack-cve-2018-8778/ARTICLE
access.redhat.com/security/cve/CVE-2018-8779REPORT
www.cve.org/CVERecord?id=CVE-2018-8779Advisory
nvd.nist.gov/vuln/detail/CVE-2018-8779Advisory
www.ruby-lang.org/en/news/2018/03/28/poisoned-nul-byte-unixsocket-cve-2018-8779/ARTICLE
access.redhat.com/security/cve/CVE-2018-8780REPORT
www.cve.org/CVERecord?id=CVE-2018-8780Advisory
nvd.nist.gov/vuln/detail/CVE-2018-8780Advisory
www.ruby-lang.org/en/news/2018/03/28/poisoned-nul-byte-dir-cve-2018-8780/ARTICLE
access.redhat.com/security/cve/CVE-2018-16395REPORT
www.cve.org/CVERecord?id=CVE-2018-16395Advisory
nvd.nist.gov/vuln/detail/CVE-2018-16395Advisory
www.ruby-lang.org/en/…ARTICLE
access.redhat.com/security/cve/CVE-2018-16396REPORT
www.cve.org/CVERecord?id=CVE-2018-16396Advisory
nvd.nist.gov/vuln/detail/CVE-2018-16396Advisory
www.ruby-lang.org/en/…ARTICLE
access.redhat.com/security/cve/CVE-2018-1000073REPORT
www.cve.org/CVERecord?id=CVE-2018-1000073Advisory
nvd.nist.gov/vuln/detail/CVE-2018-1000073Advisory
www.ruby-lang.org/en/news/2018/02/17/multiple-vulnerabilities-in-rubygems/ARTICLE
access.redhat.com/security/cve/CVE-2018-1000074REPORT
www.cve.org/CVERecord?id=CVE-2018-1000074Advisory
nvd.nist.gov/vuln/detail/CVE-2018-1000074Advisory
access.redhat.com/security/cve/CVE-2018-1000075REPORT
www.cve.org/CVERecord?id=CVE-2018-1000075Advisory
nvd.nist.gov/vuln/detail/CVE-2018-1000075Advisory
access.redhat.com/security/cve/CVE-2018-1000076REPORT
www.cve.org/CVERecord?id=CVE-2018-1000076Advisory
nvd.nist.gov/vuln/detail/CVE-2018-1000076Advisory
access.redhat.com/security/cve/CVE-2018-1000077REPORT
www.cve.org/CVERecord?id=CVE-2018-1000077Advisory
nvd.nist.gov/vuln/detail/CVE-2018-1000077Advisory
access.redhat.com/security/cve/CVE-2018-1000078REPORT
www.cve.org/CVERecord?id=CVE-2018-1000078Advisory
nvd.nist.gov/vuln/detail/CVE-2018-1000078Advisory
access.redhat.com/security/cve/CVE-2018-1000079REPORT
www.cve.org/CVERecord?id=CVE-2018-1000079Advisory
nvd.nist.gov/vuln/detail/CVE-2018-1000079Advisory