Known vulnerabilities in rubygem-ffi (Red Hat package)

Vendor: Red Hat Inc.

Software: rubygem-ffi (Red Hat package)

Software CPE: cpe:2.3:o:red_hat:rubygem-ffi_redhat_package:*:*:*:*:*:red_hat_enterprise_linux:*:*

Website: https://www.redhat.com/en

Total vulnerabilities: 36

Public exploits: 2

Known exploited (KEV): 1

Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Vulnerabilities (36)

Vulnerability	CWE-ID	CSH Severity	Public Exploit	KEV	First fixed release	Published	Bulletins
#VU105796 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') CVE-2025-27610	CWE-22	Medium	No	No	1.16.3-2.el9sat	17.03.2025	SB2025031756 SB20250317118 SB20250317119 and 15 more
#VU105689 - Improper Control of Generation of Code ('Code Injection') CVE-2025-27407	CWE-94	High	No	No	1.16.3-2.el9sat	13.03.2025	SB2025031315 SB2025031316 SB2025040330 and 3 more
#VU103000 - Improper input validation CVE-2024-56374	CWE-20	Medium	No	No	1.16.3-2.el9sat	20.01.2025	SB2025012005 SB2025012029 SB2025012030 and 11 more
#VU101972 - Security Features CVE-2024-56326	CWE-254	Low	No	No	1.16.3-2.el9sat	27.12.2024	SB2024122789 SB2024122790 SB2024122791 and 78 more
#VU99570 - Exposure of sensitive information to an unauthorized actor CVE-2024-8553	CWE-200	Low	No	No	1.16.3-2.el8sat, 1.16.3-2.el9sat	31.10.2024	SB20241031110 SB2024110111 SB2024110112 and 2 more
#VU99568 - Missing release of memory after effective lifetime CVE-2024-8376	CWE-401	Medium	No	No	1.16.3-2.el8sat, 1.16.3-2.el9sat	31.10.2024	SB20241031109 SB2024110111 SB2024110112 and 7 more
#VU97594 - Improper Authentication CVE-2024-7923	CWE-287	High	No	No	1.16.3-2.el8sat, 1.16.3-2.el9sat	19.09.2024	SB2024092064 SB2024092065 SB2024092066 and 1 more
#VU97593 - Improper Authentication CVE-2024-7012	CWE-287	High	No	No	1.16.3-2.el8sat, 1.16.3-2.el9sat	19.09.2024	SB2024092064 SB2024092065 SB2024092066 and 1 more
#VU96644 - Improper input validation CVE-2024-7246	CWE-20	Medium	No	No	1.16.3-2.el8sat, 1.16.3-2.el9sat	30.08.2024	SB2024083031 SB2024083036 SB2024090612 and 11 more
#VU95445 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') CVE-2024-42005	CWE-89	High	No	No	1.16.3-2.el8sat, 1.16.3-2.el9sat	07.08.2024	SB2024080728 SB2024080771 SB2024080772 and 12 more
#VU94792 - Loop with Unreachable Exit Condition ('Infinite Loop') CVE-2024-5569	CWE-835	Medium	No	No	1.16.3-2.el8sat, 1.16.3-2.el9sat	26.07.2024	SB2024072688 SB2024072690 SB2024072692 and 59 more
#VU94188 - Improper input validation CVE-2024-39614	CWE-20	Medium	Available	No	1.16.3-2.el8sat, 1.16.3-2.el9sat	12.07.2024	SB2024071225 SB2024071228 SB2024071229 and 15 more
#VU94184 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') CVE-2024-39330	CWE-22	Medium	No	No	1.16.3-2.el8sat, 1.16.3-2.el9sat	12.07.2024	SB2024071225 SB2024071228 SB2024071229 and 13 more
#VU94183 - Exposure of sensitive information to an unauthorized actor CVE-2024-39329	CWE-200	Medium	No	No	1.16.3-2.el8sat, 1.16.3-2.el9sat	12.07.2024	SB2024071225 SB2024071228 SB2024071229 and 14 more
#VU94182 - Improper input validation CVE-2024-38875	CWE-20	Medium	No	No	1.16.3-2.el8sat, 1.16.3-2.el9sat	12.07.2024	SB2024071225 SB2024071228 SB2024071229 and 13 more
#VU92406 - Incorrect Regular Expression CVE-2024-4067	CWE-185	Medium	No	No	1.16.3-2.el8sat, 1.16.3-2.el9sat	20.06.2024	SB20240620121 SB2024062832 SB2024070501 and 41 more
#VU92262 - Exposure of sensitive information to an unauthorized actor CVE-2024-37891	CWE-200	Low	No	No	1.16.3-2.el8sat, 1.16.3-2.el9sat	19.06.2024	SB2024061955 SB20240625146 SB2024062605 and 194 more
#VU87734 - Resource exhaustion CVE-2024-28863	CWE-400	Medium	No	No	1.16.3-2.el8sat, 1.16.3-2.el9sat	22.03.2024	SB2024032234 SB2024052306 SB2024061114 and 30 more
#VU85747 - Observable discrepancy CVE-2023-52323	CWE-203	Low	No	No	1.16.3-1.el8sat	24.01.2024	SB2024012414 SB2024012416 SB2024022053 and 24 more
#VU80791 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling') CVE-2023-40167	CWE-444	Medium	No	No	1.16.3-1.el8sat	14.09.2023	SB2023091440 SB2023092933 SB2023101760 and 68 more

Showing elements 1 - 20 out of 36

Known vulnerabilities in rubygem-ffi (Red Hat package)

Breakdown by Severity Chart

Vulnerabilities (36)

Please verify you're human