Known vulnerabilities in libruby3.0 (Ubuntu package)
Vendor:
Canonical Ltd.
Software:
libruby3.0 (Ubuntu package)
Software CPE:
cpe:2.3::canonical:libruby3.0_ubuntu_package:*:*:*:*:*:*:*:*
Website:
https://www.ubuntu.com/
Total vulnerabilities:
12
Public exploits:
1
Known exploited (KEV):
0
Breakdown by Severity Chart
3.0.2-5ubuntu1
3.0.2-7
3.0.2-7ubuntu1
3.0.2-7ubuntu2.2
3.0.2-7ubuntu2.5
3.0.2-7ubuntu2.7
3.0.2-7ubuntu2.12
3.0.2-7ubuntu2.13
3.0.2-7ubuntu2
3.0.4-7
3.0.2-7ubuntu2.11
3.0.2-7ubuntu2.10
3.0.2-7ubuntu2.8
3.0.2-7ubuntu2.6
3.0.2-7ubuntu2.4
3.0.4-7ubuntu0.2
3.0.2-7ubuntu2.3
3.0.4-7ubuntu0.1
3.0.2-7ubuntu2.1
Vulnerabilities (12)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU99358 - Inefficient Regular Expression Complexity CVE-2024-49761 |
CWE-1333 | Medium | 3.0.2-7ubuntu2.8 | 28.10.2024 |
SB2024102837 SB2024110504 SB20241108111 and 38 more |
||
| #VU95149 - Improper input validation CVE-2024-41123 |
CWE-20 | Medium | 3.0.2-7ubuntu2.8 | 01.08.2024 |
SB2024080145 SB2024091009 SB2024091607 and 24 more |
||
| #VU95148 - Improper Restriction of Recursive Entity References in DTDs ('XML Entity Expansion') CVE-2024-41946 |
CWE-776 | Medium | 3.0.2-7ubuntu2.8 | 01.08.2024 |
SB2024080145 SB2024082374 SB2024091607 and 22 more |
||
| #VU94363 - Improper input validation CVE-2024-39908 |
CWE-20 | Medium | 3.0.2-7ubuntu2.8 | 16.07.2024 |
SB2024071616 SB2024083015 SB2024091009 and 22 more |
||
| #VU94361 - Improper input validation CVE-2024-35176 |
CWE-20 | Medium | 3.0.2-7ubuntu2.8 | 16.07.2024 |
SB2024071615 SB2024071914 SB2024072112 and 19 more |
||
| #VU88970 - Out-of-bounds read CVE-2024-27282 |
CWE-125 | Medium | 3.0.2-7ubuntu2.6 | 24.04.2024 |
SB2024042420 SB2024042421 SB2024042450 and 21 more |
||
| #VU87692 - Improper input validation CVE-2024-27281 |
CWE-20 | High | 3.0.2-7ubuntu2.6 | 21.03.2024 |
SB2024032137 SB2024041295 SB2024042421 and 18 more |
||
| #VU77803 - Incorrect Regular Expression CVE-2023-36617 |
CWE-185 | Medium | 3.0.2-7ubuntu2.4, 3.0.4-7ubuntu0.2 | 29.06.2023 |
SB2023062931 SB2023071289 SB2023101967 and 13 more |
||
| #VU74004 - Incorrect Regular Expression CVE-2023-28755 |
CWE-185 | Medium | 3.0.2-7ubuntu2.4, 3.0.4-7ubuntu0.2 | 24.03.2023 |
SB2023033146 SB2023042108 SB2023050430 and 41 more |
||
| #VU69506 - Improper Neutralization of CRLF Sequences in HTTP Headers ('HTTP Response Splitting') CVE-2021-33621 |
CWE-113 | Medium | 3.0.2-7ubuntu2.3, 3.0.4-7ubuntu0.1 | 22.11.2022 |
SB2022112239 SB2022112439 SB2023011730 and 31 more |
||
| #VU62081 - Type conversion CVE-2022-28739 |
CWE-704 | High | 3.0.2-7ubuntu2.1 | 12.04.2022 |
SB2022041215 SB2022041404 SB2022060704 and 28 more |
||
| #VU62080 - Double Free CVE-2022-28738 |
CWE-415 | High | 3.0.2-7ubuntu2.1 | 12.04.2022 |
SB2022041215 SB2022041404 SB2022060704 and 13 more |