The version of ruby installed on the remote host is prior to 3.0.4 / 3.1.2. It is, therefore, affected by multiple vulnerabilities as referenced in the SSA:2022-103-01 advisory.

  - There is a buffer over-read in Ruby before 2.6.10, 2.7.x before 2.7.6, 3.x before 3.0.4, and 3.1.x before     3.1.2. It occurs in String-to-Float conversion, including Kernel#Float and String#to_f. (CVE-2022-28739)

  - A double free was found in the Regexp compiler in Ruby 3.x before 3.0.4 and 3.1.x before 3.1.2. If a     victim attempts to create a Regexp from untrusted user input, an attacker may be able to write to     unexpected memory locations. (CVE-2022-28738)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote MiracleLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2022-4083:02 advisory.

    * Ruby: Double free in Regexp compilation (CVE-2022-28738)
      * Ruby: Buffer overrun in String-to-Float conversion (CVE-2022-28739)

Tenable has extracted the preceding description block directly from the MiracleLinux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote CentOS Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ruby-3.0.4-160.el9 build changelog.

  - A double free was found in the Regexp compiler in Ruby 3.x before 3.0.4 and 3.1.x before 3.1.2. If a     victim attempts to create a Regexp from untrusted user input, an attacker may be able to write to     unexpected memory locations. (CVE-2022-28738)

  - There is a buffer over-read in Ruby before 2.6.10, 2.7.x before 2.7.6, 3.x before 3.0.4, and 3.1.x before     3.1.2. It occurs in String-to-Float conversion, including Kernel#Float and String#to_f. (CVE-2022-28739)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2023-7025 advisory.

    - Fix HTTP response splitting in CGI.
      Resolves: CVE-2021-33621
    - Fix Buffer overrun in String-to-Float conversion.
      Resolves: CVE-2022-28739
    - Fix ReDoS vulnerability in URI.
      Resolves: CVE-2023-28755
    - Fix ReDoS vulnerability in Time.
      Resolves: CVE-2023-28756
    - Fix by adding length limit option for methods that parses date strings.
      Resolves: CVE-2021-41817
    - CGI::Cookie.parse no longer decodes cookie names to prevent spoofing security       prefixes in cookie names.
      Resolves: CVE-2021-41819
    - Properly fix command injection vulnerability in Rdoc.
      Related: CVE-2021-31799
    - Fix command injection vulnerability in RDoc.
      Resolves: CVE-2021-31799
    - Fix StartTLS stripping vulnerability in Net::IMAP       Resolves: CVE-2021-32066
    - Fix FTP PASV command response can cause Net::FTP to connect to arbitrary host.
      Resolves: CVE-2021-31810
    - Fix CVE-2013-4073.
    - Fix object taint bypassing in DL and Fiddle (CVE-2013-2065).
    - Fix Hash-flooding DoS vulnerability on MurmurHash function       (CVE-2012-5371)
    - Don't create files when NUL-containing path name is passed       (bug 865940, CVE-2012-4522)
    - Patch from trunk for CVE-2012-4464, CVE-2012-4466
    - Randomize hash on process startup (CVE-2011-4815, bug 750564)
    - CVE-2011-2686 is fixed in this version (bug 722415)
    - CVE-2010-0541 (bug 587731) is fixed in this version
    - CVE-2009-4492 ruby WEBrick log escape sequence (bug 554485)
    - New patchlevel fixing CVE-2009-1904
    - Fix regression in CVE-2008-3790 (#485383)
    - CVE-2008-5189: CGI header injection.
    - CVE-2008-3790: DoS vulnerability in the REXML module.
    - Security fixes.
      - CVE-2008-3655: Ruby does not properly restrict access to critical                        variables and methods at various safe levels.
      - CVE-2008-3656: DoS vulnerability in WEBrick.
      - CVE-2008-3657: Lack of taintness check in dl.
      - CVE-2008-1447: DNS spoofing vulnerability in resolv.rb.
      - CVE-2008-3443: Memory allocation failure in Ruby regex engine.
    - Security fixes. (#452295)
      - CVE-2008-1891: WEBrick CGI source disclosure.
      - CVE-2008-2662: Integer overflow in rb_str_buf_append().
      - CVE-2008-2663: Integer overflow in rb_ary_store().
      - CVE-2008-2664: Unsafe use of alloca in rb_str_format().
      - CVE-2008-2725: Integer overflow in rb_ary_splice().
      - CVE-2008-2726: Integer overflow in rb_ary_splice().
    - ruby-1.8.6.111-CVE-2007-5162.patch: removed.
    - Security fix for CVE-2008-1145.
    - ruby-1.8.6.111-CVE-2007-5162.patch: Update a bit with backporting the changes        at trunk to enable the fix without any modifications on the users' scripts.
       Note that Net::HTTP#enable_post_connection_check isn't available anymore.
       If you want to disable this post-check, you should give OpenSSL::SSL::VERIFY_NONE        to Net::HTTP#verify_mode= instead of.
    - ruby-1.8.6-CVE-2007-5162.patch: security fix for Net::HTTP that is       insufficient verification of SSL certificate.
    - ruby-1.8.5-cgi-CVE-2006-5467.patch: fix a CGI multipart parsing bug that       causes the denial of service. (#212396)
    - security fixes [CVE-2006-3694]
      - ruby-1.8.4-fix-insecure-dir-operation.patch:
      - ruby-1.8.4-fix-insecure-regexp-modification.patch: fixed the insecure         operations in the certain safe-level restrictions. (#199538)
      - ruby-1.8.4-fix-alias-safe-level.patch: fixed to not bypass the certain         safe-level restrictions. (#199543)

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote host is affected by the vulnerability described in GLSA-202401-27 (Ruby: Multiple vulnerabilities)

  - An issue was discovered in Ruby through 2.5.8, 2.6.x through 2.6.6, and 2.7.x through 2.7.1. WEBrick, a     simple HTTP server bundled with Ruby, had not checked the transfer-encoding header value rigorously. An     attacker may potentially exploit this issue to bypass a reverse proxy (which also has a poor header     check), which may lead to an HTTP Request Smuggling attack. (CVE-2020-25613)

  - An issue was discovered in Ruby through 2.6.7, 2.7.x through 2.7.3, and 3.x through 3.0.1. A malicious FTP     server can use the PASV response to trick Net::FTP into connecting back to a given IP address and port.
    This potentially makes curl extract information about services that are otherwise private and not     disclosed (e.g., the attacker can conduct port scans and service banner extractions). (CVE-2021-31810)

  - An issue was discovered in Ruby through 2.6.7, 2.7.x through 2.7.3, and 3.x through 3.0.1. Net::IMAP does     not raise an exception when StartTLS fails with an an unknown response, which might allow man-in-the-     middle attackers to bypass the TLS protections by leveraging a network position between the client and the     registry to block the StartTLS command, aka a StartTLS stripping attack. (CVE-2021-32066)

  - The cgi gem before 0.1.0.2, 0.2.x before 0.2.2, and 0.3.x before 0.3.5 for Ruby allows HTTP response     splitting. This is relevant to applications that use untrusted user input either to generate an HTTP     response or to create a CGI::Cookie object. (CVE-2021-33621)

  - CGI.escape_html in Ruby before 2.7.5 and 3.x before 3.0.3 has an integer overflow and resultant buffer     overflow via a long string on platforms (such as Windows) where size_t and long have different numbers of     bytes. This also affects the CGI gem before 0.3.1 for Ruby. (CVE-2021-41816)

  - Date.parse in the date gem through 3.2.0 for Ruby allows ReDoS (regular expression Denial of Service) via     a long string. The fixed versions are 3.2.1, 3.1.2, 3.0.2, and 2.0.1. (CVE-2021-41817)

  - CGI::Cookie.parse in Ruby through 2.6.8 mishandles security prefixes in cookie names. This also affects     the CGI gem through 0.3.0 for Ruby. (CVE-2021-41819)

  - A double free was found in the Regexp compiler in Ruby 3.x before 3.0.4 and 3.1.x before 3.1.2. If a     victim attempts to create a Regexp from untrusted user input, an attacker may be able to write to     unexpected memory locations. (CVE-2022-28738)

  - There is a buffer over-read in Ruby before 2.6.10, 2.7.x before 2.7.6, 3.x before 3.0.4, and 3.1.x before     3.1.2. It occurs in String-to-Float conversion, including Kernel#Float and String#to_f. (CVE-2022-28739)

  - A ReDoS issue was discovered in the URI component through 0.12.0 in Ruby through 3.2.1. The URI parser     mishandles invalid URLs that have specific characters. It causes an increase in execution time for parsing     strings to URI objects. The fixed versions are 0.12.1, 0.11.1, 0.10.2 and 0.10.0.1. (CVE-2023-28755)

  - A ReDoS issue was discovered in the Time component through 0.2.1 in Ruby through 3.2.1. The Time parser     mishandles invalid URLs that have specific characters. It causes an increase in execution time for parsing     strings to Time objects. The fixed versions are 0.1.1 and 0.2.2. (CVE-2023-28756)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2022-6447 advisory.

    - Fix regular Expression Denial of Service Vulnerability of Date Parsing Methods.
      Resolves: CVE-2021-41817
    - Fix cookie prefix spoofing in CGI::Cookie.parse.
      Resolves: CVE-2021-41819

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

According to the versions of the ruby packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities :

  - An issue was discovered in Ruby through 2.6.7, 2.7.x through 2.7.3, and 3.x through 3.0.1. A malicious FTP     server can use the PASV response to trick Net::FTP into connecting back to a given IP address and port.
    This potentially makes curl extract information about services that are otherwise private and not     disclosed (e.g., the attacker can conduct port scans and service banner extractions). (CVE-2021-31810)

  - CGI::Cookie.parse in Ruby through 2.6.8 mishandles security prefixes in cookie names. This also affects     the CGI gem through 0.3.0 for Ruby. (CVE-2021-41819)

  - There is a buffer over-read in Ruby before 2.6.10, 2.7.x before 2.7.6, 3.x before 3.0.4, and 3.1.x before     3.1.2. It occurs in String-to-Float conversion, including Kernel#Float and String#to_f. (CVE-2022-28739)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The version of ruby installed on the remote host is prior to 2.0.0.648-36. It is, therefore, affected by a vulnerability as referenced in the ALAS2-2022-1853 advisory.

    A buffer overrun vulnerability was found in Ruby. The issue occurs in a conversion algorithm from a String     to a Float that causes process termination due to a segmentation fault, but under limited circumstances.
    This flaw may cause an illegal memory read. (CVE-2022-28739)

Tenable has extracted the preceding description block directly from the tested product security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote host is running a version of macOS / Mac OS X that is 11.x prior to 11.7.1. It is, therefore, affected by multiple vulnerabilities:

  - This issue was addressed by removing additional entitlements. This issue is fixed in tvOS 16.1, macOS     Ventura 13, watchOS 9.1, iOS 16.1 and iPadOS 16, macOS Monterey 12.6.1, macOS Big Sur 11.7.1. An app may     be able to modify protected parts of the file system. (CVE-2022-42825)

  - The issue was addressed with improved memory handling. This issue is fixed in tvOS 16.1, iOS 15.7.1 and     iPadOS 15.7.1, macOS Ventura 13, watchOS 9.1, iOS 16.1 and iPadOS 16, macOS Monterey 12.6.1, macOS Big Sur     11.7.1. Parsing a maliciously crafted audio file may lead to disclosure of user information.
    (CVE-2022-42798)

  - This issue was addressed with improved checks to prevent unauthorized actions. This issue is fixed in     macOS Monterey 12.6.1, macOS Big Sur 11.7.1, macOS Ventura 13. An app may be able to modify protected     parts of the file system (CVE-2022-42860)

  - This issue was addressed with improved checks. This issue is fixed in macOS Monterey 12.6.1, macOS Big Sur     11.7.1. A remote user may be able to write arbitrary files. (CVE-2022-46723)

  - A memory corruption issue was addressed with improved state management. This issue is fixed in tvOS 16.1,     iOS 15.7.1 and iPadOS 15.7.1, macOS Ventura 13, watchOS 9.1, iOS 16.1 and iPadOS 16, macOS Monterey     12.6.1, macOS Big Sur 11.7.1. An app may be able to execute arbitrary code with kernel privileges.
    (CVE-2022-32944)

  - A race condition was addressed with additional validation. This issue is fixed in macOS Ventura 13, macOS     Monterey 12.6.1, macOS Big Sur 11.7.1. An app may be able to modify protected parts of the file system.
    (CVE-2022-46713)

  - The issue was addressed with improved bounds checks. This issue is fixed in iOS 15.7.1 and iPadOS 15.7.1,     macOS Ventura 13, iOS 16.1 and iPadOS 16, macOS Monterey 12.6.1, macOS Big Sur 11.7.1. A buffer overflow     may result in arbitrary code execution. (CVE-2022-32941)

  - There is a buffer over-read in Ruby before 2.6.10, 2.7.x before 2.7.6, 3.x before 3.0.4, and 3.1.x before     3.1.2. It occurs in String-to-Float conversion, including Kernel#Float and String#to_f. (CVE-2022-28739)

  - This issue was addressed with improved data protection. This issue is fixed in macOS Big Sur 11.7.1, macOS     Ventura 13, macOS Monterey 12.6.1. An app with root privileges may be able to access private information.
    (CVE-2022-32862)

  - zlib through 1.2.12 has a heap-based buffer over-read or buffer overflow in inflate in inflate.c via a     large gzip header extra field. NOTE: only applications that call inflateGetHeader are affected. Some     common applications bundle the affected zlib source code but may be unable to call inflateGetHeader (e.g.,     see the nodejs/node reference). (CVE-2022-37434)

  - This issue was addressed with improved checks. This issue is fixed in iOS 15.7.1 and iPadOS 15.7.1, macOS     Ventura 13, watchOS 9.1, iOS 16.1 and iPadOS 16, macOS Monterey 12.6.1, macOS Big Sur 11.7.1. A user may     be able to cause unexpected app termination or arbitrary code execution. (CVE-2022-42800)

Note that Nessus has not tested for these issues but has instead relied only on the operating system's self-reported version number.

The remote NewStart CGSL host, running version MAIN 6.02, has ruby packages installed that are affected by a vulnerability:

  - There is a buffer over-read in Ruby before 2.6.10, 2.7.x before 2.7.6, 3.x before 3.0.4, and 3.1.x before     3.1.2. It occurs in String-to-Float conversion, including Kernel#Float and String#to_f. (CVE-2022-28739)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2023-12064 advisory.

    ruby     [2.5.9-110.0.1]
    - Fix for CVE-2022-28739 [Orabug: 34824177]

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLED15 / SLED_SAP15 / SLES15 / SLES_SAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2022:1512-1 advisory.

  - In RDoc 3.11 through 6.x before 6.3.1, as distributed with Ruby through 3.0.1, it is possible to execute     arbitrary code via | and tags in a filename. (CVE-2021-31799)

  - An issue was discovered in Ruby through 2.6.7, 2.7.x through 2.7.3, and 3.x through 3.0.1. A malicious FTP     server can use the PASV response to trick Net::FTP into connecting back to a given IP address and port.
    This potentially makes curl extract information about services that are otherwise private and not     disclosed (e.g., the attacker can conduct port scans and service banner extractions). (CVE-2021-31810)

  - An issue was discovered in Ruby through 2.6.7, 2.7.x through 2.7.3, and 3.x through 3.0.1. Net::IMAP does     not raise an exception when StartTLS fails with an an unknown response, which might allow man-in-the-     middle attackers to bypass the TLS protections by leveraging a network position between the client and the     registry to block the StartTLS command, aka a StartTLS stripping attack. (CVE-2021-32066)

  - Date.parse in the date gem through 3.2.0 for Ruby allows ReDoS (regular expression Denial of Service) via     a long string. The fixed versions are 3.2.1, 3.1.2, 3.0.2, and 2.0.1. (CVE-2021-41817)

  - There is a buffer over-read in Ruby before 2.6.10, 2.7.x before 2.7.6, 3.x before 3.0.4, and 3.1.x before     3.1.2. It occurs in String-to-Float conversion, including Kernel#Float and String#to_f. (CVE-2022-28739)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Published	Updated	Severity
159726	Slackware Linux 15.0 / current ruby Multiple Vulnerabilities (SSA:2022-103-01)	Nessus	Slackware Local Security Checks	4/13/2022	5/23/2022	critical
292951	MiracleLinux 9 : ruby-3.0.4-160.el9 (AXSA:2022-4083:02)	Nessus	Miracle Linux Local Security Checks	1/20/2026	1/20/2026	critical
191346	CentOS 9 : ruby-3.0.4-160.el9	Nessus	CentOS Local Security Checks	2/29/2024	4/26/2024	critical
186102	Oracle Linux 8 : ruby:2.5 (ELSA-2023-7025)	Nessus	Oracle Linux Local Security Checks	11/21/2023	9/9/2025	high
189405	GLSA-202401-27 : Ruby: Multiple vulnerabilities	Nessus	Gentoo Local Security Checks	1/24/2024	1/24/2024	critical
165166	Oracle Linux 8 : ruby:2.7 (ELSA-2022-6447)	Nessus	Oracle Linux Local Security Checks	9/15/2022	11/1/2024	high
165918	EulerOS Virtualization 3.0.6.6 : ruby (EulerOS-SA-2022-2536)	Nessus	Huawei Local Security Checks	10/9/2022	10/10/2023	high
165987	Amazon Linux 2 : ruby (ALAS-2022-1853)	Nessus	Amazon Linux Local Security Checks	10/10/2022	12/11/2024	high
166457	macOS 11.x < 11.7.1 Multiple Vulnerabilities (HT213493)	Nessus	MacOS X Local Security Checks	10/25/2022	5/28/2024	critical
171710	NewStart CGSL MAIN 6.02 : ruby Vulnerability (NS-SA-2023-0005)	Nessus	NewStart CGSL Local Security Checks	2/21/2023	2/21/2023	high
170255	Oracle Linux 8 : ruby:2.5 (ELSA-2023-12064)	Nessus	Oracle Linux Local Security Checks	1/21/2023	11/1/2024	high
160492	SUSE SLED15 / SLES15 Security Update : ruby2.5 (SUSE-SU-2022:1512-1)	Nessus	SuSE Local Security Checks	5/4/2022	7/14/2023	high

Detections

Analytics

Plugins Search

critical

critical

critical

high

critical

high

high

high

critical

high

high

high