USN-4882-1: ruby2.3 Ubuntu

Published

Published 18-03-2021Last modified 27-04-2026

Vulnerability summary

USN-4882-1 is a vulnerability in ruby2.3 Ubuntu with no CVSS score yet.

Priority

Insufficient evidence

No CVSS vector published; no exploitation reported by the 5 checked sources

Source freshness unavailable

How is this decided?

CVSS score

Not scored

010

No CVSS score recorded

EPSS scoreNot scoredRisk metrics not yet published.

KEVNot listedNot listed by any tracked catalog.

RansomwareNot flaggedNo ransomware use recorded.

Public exploits0No public exploits recorded

Advisory lineage

Upstream 3 · Downstream 0 · Related 3

CVE-2020-10663 CVE-2020-10933 CVE-2020-25613

Timeline

18-03-2021
PublishedVulnerability first disclosed.
27-04-2026
Last modifiedVulnerability information updated.

Description

ruby2.3, ruby2.5, ruby2.7 vulnerabilities It was discovered that the Ruby JSON gem incorrectly handled certain JSON files. If a user or automated system were tricked into parsing a specially crafted JSON file, a remote attacker could use this issue to execute arbitrary code. This issue only affected Ubuntu 16.04 LTS and Ubuntu 18.04 LTS. (CVE-2020-10663) It was discovered that Ruby incorrectly handled certain socket memory operations. A remote attacker could possibly use this issue to obtain sensitive information. This issue only affected Ubuntu 18.04 LTS and Ubuntu 20.04 LTS. (CVE-2020-10933) It was discovered that Ruby incorrectly handled certain transfer-encoding headers when using Webrick. A remote attacker could possibly use this issue to bypass a reverse proxy. (CVE-2020-25613)