Known vulnerabilities in ruby (Alpine package) 1.8.7_p374-r0

Version: 1.8.7_p374-r0
Software CPE: cpe:2.3:o:alpine:ruby_alpine_package:*:*:*:*:*:alpine_linux:*:*
Total vulnerabilities: 7
Public exploits: 1
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.2

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting ruby (Alpine package) version 1.8.7_p374-r0 ruby (Alpine package) 1.8.7_p374-r0 is affected by 7 vulnerabilities: 1 high, 6 medium Critical High Medium Low

Vulnerabilities (7)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU23009 - Improper Control of Generation of Code ('Code Injection')
CVE-2019-16255
CWE-94 High
No
No
2.5.7-r0 27.11.2019 SB2019100211
SB2019112701
SB2019121714
and 14 more
#VU23008 - Improper Neutralization of CRLF Sequences in HTTP Headers ('HTTP Response Splitting')
CVE-2019-16254
CWE-113 Medium
No
No
2.5.7-r0 27.11.2019 SB2019100211
SB2019112701
SB2019121714
and 14 more
#VU23007 - Improper input validation
CVE-2019-16201
CWE-20 Medium
No
No
2.5.7-r0 27.11.2019 SB2019100211
SB2019112701
SB2019121714
and 14 more
#VU23006 - Improper input validation
CVE-2019-15845
CWE-20 Medium
No
No
2.5.7-r0 26.11.2019 SB2019100211
SB2019112701
SB2019121714
and 15 more
#VU32601 - Heap-based Buffer Overflow
CVE-2013-4164
CWE-122 Medium
Public exploit available
No
1.8.7_p374-r1 23.11.2013 SB2013112301
SB2013120313
SB2013112203
and 2 more
#VU33320 - Permissions, Privileges, and Access Controls
CVE-2012-4464
CWE-264 Medium
No
No
1.9.3_p194-r0 26.04.2013 SB2013042602
SB2012101107
#VU33321 - Permissions, Privileges, and Access Controls
CVE-2012-4466
CWE-264 Medium
No
No
1.9.3_p194-r0 26.04.2013 SB2013042603
SB2012101108
SB2012102310