USN-7442-1: ruby2.3 Ubuntu

Vulnerability summary

USN-7442-1 is a vulnerability in ruby2.3 Ubuntu with no CVSS score yet.

Timeline

1. 17-04-2025
   PublishedVulnerability first disclosed.
2. 25-06-2026
   Last modifiedVulnerability information updated.

Description

ruby2.3, ruby2.5 vulnerabilities It was discovered that the Ruby CGI gem incorrectly handled parsing certain cookies. A remote attacker could possibly use this issue to consume resources, leading to a denial of service. (CVE-2025-27219) It was discovered that the Ruby CGI gem incorrectly handled parsing certain regular expressions. A remote attacker could possibly use this issue to consume resources, leading to a denial of service. (CVE-2025-27220) It was discovered that the Ruby URI gem incorrectly handled certain URI handling methods. A remote attacker could possibly use this issue to leak authentication credentials. (CVE-2025-27221) It was discovered that the Ruby REXML gem incorrectly handled parsing XML documents containing many digits in a hex numeric character reference. A remote attacker could use this issue to consume resources, leading to a denial of service. (CVE-2024-49761)

No weakness data has been published for this record.