Known vulnerabilities in ruby2.5 (Ubuntu package)
Vendor:
Canonical Ltd.
Software:
ruby2.5 (Ubuntu package)
Software CPE:
cpe:2.3:o:canonical:ruby2.5_ubuntu_package:*:*:*:*:*:ubuntu:*:*
Website:
https://www.ubuntu.com/
Total vulnerabilities:
29
Public exploits:
2
Known exploited (KEV):
0
Highest CVSSv4 Score:
9.3
Breakdown by Severity Chart
2.5.1-1ubuntu1.16+esm5
2.7.0-5ubuntu1.18+esm1
3.0.2-7ubuntu2.11
3.2.3-1ubuntu0.24.04.6
3.3.7-1ubuntu2.1
Ubuntu Pro
2.5.1-1ubuntu1.16
2.5.1-1ubuntu1.15
2.5.1-1ubuntu1.14
2.5.1-1ubuntu1.13
2.5.1-1ubuntu1.12
2.5.1-1ubuntu1.11
2.5.1-1ubuntu1.10
2.5.1-1ubuntu1.9
2.5.1-1ubuntu1.8
2.5.1-1ubuntu1.7
2.5.5
2.5.1
2.5.7-1ubuntu4
2.5.7-1ubuntu2
2.5.7-1ubuntu3
2.5.7-1
2.5.7-1ubuntu1
2.5.5-4ubuntu2.1
2.5.5-1ubuntu1.1
2.5.1-1ubuntu1.6
2.5.5-4
2.5.5-3
2.5.5-3ubuntu1
2.5.5-2
2.5.5-2ubuntu1
2.5.1-1ubuntu1.4
2.5.5-4ubuntu2
2.5.5-4ubuntu1
2.5.1-1ubuntu1.5
2.5.5-1
2.5.5-1ubuntu1
2.5.3-4
2.5.3-4ubuntu1
2.5.1-5ubuntu4.3
2.5.1-1ubuntu1.2
2.5.1-5ubuntu4.2
2.5.3-3ubuntu3
2.5.3-3ubuntu2
2.5.0~preview1-1ubuntu1
2.5.3-1
2.5.3-2
2.5.3-3
2.5.3-3ubuntu1
2.5.1-6ubuntu3
2.5.1-6ubuntu2
2.5.1-6
2.5.1-6ubuntu1
2.5.1-5ubuntu4
2.5.1-5ubuntu4.1
2.5.1-5ubuntu2
2.5.1-5ubuntu3
2.5.1-5ubuntu1
2.5.1-2
2.5.1-3
2.5.1-4
2.5.1-5
2.5.1-1
2.5.1-1ubuntu1
2.5.1-1ubuntu1.1
2.5.0-5
2.5.0-5ubuntu1
2.5.0-6
2.5.0-6ubuntu1
2.5.0-4ubuntu4
2.5.0-4ubuntu3
2.5.0-4ubuntu2
2.5.0~preview1-1
2.5.0~preview1-1ubuntu2
2.5.0~rc1-1
2.5.0-1
2.5.0-2
2.5.0-3
2.5.0-4
2.5.0-4ubuntu1
Vulnerabilities (29)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU114812 - Resource exhaustion CVE-2025-24294 |
CWE-400 | Medium | 2.5.1-1ubuntu1.16+esm5, 2.7.0-5ubuntu1.18+esm1, 3.0.2-7ubuntu2.11, 3.2.3-1ubuntu0.24.04.6, 3.3.7-1ubuntu2.1 | 04.09.2025 |
SB2025090467 SB2025090470 SB2025090473 and 12 more |
||
| #VU105107 - Inefficient Regular Expression Complexity CVE-2025-27220 |
CWE-1333 | Medium | Ubuntu Pro | 27.02.2025 |
SB20250227242 SB2025030761 SB2025031451 and 9 more |
||
| #VU105106 - Improper input validation CVE-2025-27219 |
CWE-20 | Medium | Ubuntu Pro | 27.02.2025 |
SB20250227242 SB2025030761 SB2025031451 and 15 more |
||
| #VU105105 - Exposure of sensitive information to an unauthorized actor CVE-2025-27221 |
CWE-200 | Medium | Ubuntu Pro | 27.02.2025 |
SB20250227241 SB2025030761 SB2025031451 and 16 more |
||
| #VU99358 - Inefficient Regular Expression Complexity CVE-2024-49761 |
CWE-1333 | Medium | Ubuntu Pro | 28.10.2024 |
SB2024102837 SB2024110504 SB20241108111 and 38 more |
||
| #VU94361 - Improper input validation CVE-2024-35176 |
CWE-20 | Medium | 2.5.1-1ubuntu1.16+esm5, 2.7.0-5ubuntu1.18+esm1, 3.0.2-7ubuntu2.11, 3.2.3-1ubuntu0.24.04.6, 3.3.7-1ubuntu2.1 | 16.07.2024 |
SB2024071615 SB2024071914 SB2024072112 and 19 more |
||
| #VU88970 - Out-of-bounds read CVE-2024-27282 |
CWE-125 | Medium | 2.5.1-1ubuntu1.16+esm5, 2.7.0-5ubuntu1.18+esm1, 3.0.2-7ubuntu2.11, 3.2.3-1ubuntu0.24.04.6, 3.3.7-1ubuntu2.1 | 24.04.2024 |
SB2024042420 SB2024042421 SB2024042450 and 21 more |
||
| #VU87693 - Out-of-bounds read CVE-2024-27280 |
CWE-125 | Medium | 2.5.1-1ubuntu1.16+esm5, 2.7.0-5ubuntu1.18+esm1, 3.0.2-7ubuntu2.11, 3.2.3-1ubuntu0.24.04.6, 3.3.7-1ubuntu2.1 | 21.03.2024 |
SB2024032138 SB2024041295 SB2024042421 and 22 more |
||
| #VU87692 - Improper input validation CVE-2024-27281 |
CWE-20 | High | Ubuntu Pro | 21.03.2024 |
SB2024032137 SB2024041295 SB2024042421 and 18 more |
||
| #VU77803 - Incorrect Regular Expression CVE-2023-36617 |
CWE-185 | Medium | Ubuntu Pro | 29.06.2023 |
SB2023062931 SB2023071289 SB2023101967 and 13 more |
||
| #VU74007 - Incorrect Regular Expression CVE-2023-28756 |
CWE-185 | Medium | 2.5.1-1ubuntu1.14, 2.5.1-1ubuntu1.16 | 24.03.2023 |
SB2023033146 SB2023050430 SB2023051746 and 33 more |
||
| #VU74004 - Incorrect Regular Expression CVE-2023-28755 |
CWE-185 | Medium | Ubuntu Pro, 2.5.1-1ubuntu1.14, 2.5.1-1ubuntu1.15, 2.5.1-1ubuntu1.16 | 24.03.2023 |
SB2023033146 SB2023042108 SB2023050430 and 41 more |
||
| #VU69506 - Improper Neutralization of CRLF Sequences in HTTP Headers ('HTTP Response Splitting') CVE-2021-33621 |
CWE-113 | Medium | 2.5.1-1ubuntu1.13 | 22.11.2022 |
SB2022112239 SB2022112439 SB2023011730 and 31 more |
||
| #VU62081 - Type conversion CVE-2022-28739 |
CWE-704 | High | 2.5.1-1ubuntu1.12 | 12.04.2022 |
SB2022041215 SB2022041404 SB2022060704 and 28 more |
||
| #VU62080 - Double Free CVE-2022-28738 |
CWE-415 | High | 2.5.1-1ubuntu1.12 | 12.04.2022 |
SB2022041215 SB2022041404 SB2022060704 and 13 more |
||
| #VU59824 - Incorrect Regular Expression CVE-2021-41817 |
CWE-185 | Medium | 2.5.1-1ubuntu1.11 | 19.01.2022 |
SB2022011919 SB2022011920 SB2022020413 and 24 more |
||
| #VU58365 - User Interface (UI) Misrepresentation of Critical Information (Clickjacking, spoofing) CVE-2021-41819 |
CWE-451 | Medium | 2.5.1-1ubuntu1.11 | 25.11.2021 |
SB2021112503 SB2022011920 SB2022020413 and 21 more |
||
| #VU58364 - Memory corruption CVE-2021-41816 |
CWE-119 | High | 2.5.1-1ubuntu1.11 | 25.11.2021 |
SB2021112503 SB2022011920 SB2022020414 and 7 more |
||
| #VU55488 - Exposure of sensitive information to an unauthorized actor CVE-2021-31810 |
CWE-200 | Medium | 2.5.1-1ubuntu1.10 | 02.08.2021 |
SB2021080209 SB2021080210 SB2021080913 and 27 more |
||
| #VU52796 - Command injection CVE-2021-31799 |
CWE-77 | High | 2.5.1-1ubuntu1.10 | 03.05.2021 |
SB2021050306 SB2021052413 SB2021052414 and 27 more |
Showing elements 1 - 20 out of 29