DeutschShown in its original language — a full translation is planned for a future version.
Ruby: Mehrere Schwachstellen
view advisory published 2026-07-15
Ein Angreifer kann mehrere Schwachstellen in Ruby ausnutzen, um Informationen offenzulegen, um einen Denial of Service Angriff durchzuführen, und um beliebigen Programmcode auszuführen.
01
describes (9)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2026-47242US | — | — | ||
Net::IMAP implements Internet Message Access Protocol (IMAP) client functionality in Ruby. Prior to 0.6.5 and 0.5.15, when Net::IMAP#id is called with a hash argument, although the… | ||||
| CVE-2026-47241US | — | — | ||
Net::IMAP implements Internet Message Access Protocol (IMAP) client functionality in Ruby. Prior to 0.6.5 and 0.5.15, several Net::IMAP commands accept a raw string argument which… | ||||
| CVE-2026-47240US | — | — | ||
Net::IMAP implements Internet Message Access Protocol (IMAP) client functionality in Ruby. Prior to 0.6.5 and 0.5.15, several Net::IMAP commands accept a "raw data" argument that i… | ||||
| CVE-2026-42258US | medium5.3 | — | ||
Net::IMAP implements Internet Message Access Protocol (IMAP) client functionality in Ruby. Prior to versions 0.4.24, 0.5.14, and 0.6.4, symbol arguments to commands are vulnerable… | ||||
| CVE-2026-42257US | critical9.8 | — | ||
Net::IMAP implements Internet Message Access Protocol (IMAP) client functionality in Ruby. Prior to versions 0.4.24, 0.5.14, and 0.6.4, several Net::IMAP commands accept a raw stri… | ||||
| CVE-2026-42256US | medium6.5 | — | ||
Net::IMAP implements Internet Message Access Protocol (IMAP) client functionality in Ruby. From versions 0.4.0 to before 0.4.24, 0.5.0 to before 0.5.14, and 0.6.0 to before 0.6.4,… | ||||
| CVE-2026-42246US | high7.4 | — | ||
Net::IMAP implements Internet Message Access Protocol (IMAP) client functionality in Ruby. Prior to versions 0.3.10, 0.4.24, 0.5.14, and 0.6.4, a man-in-the-middle attacker can cau… | ||||
| CVE-2026-42245US | high7.5 | — | ||
Net::IMAP implements Internet Message Access Protocol (IMAP) client functionality in Ruby. Prior to versions 0.4.24, 0.5.14, and 0.6.4, Net::IMAP::ResponseReader has quadratic time… | ||||
| CVE-2026-41316US | — | — | ||
ERB is a templating system for Ruby. Ruby 2.7.0 (before ERB 2.2.0 was published on rubygems.org) introduced an `@_init` instance variable guard in `ERB#result` and `ERB#run` to pre… | ||||
02
references
External citations — patches, advisories, analysis.
- Oracle Linux Security Advisory ELSA-2026-33540 vom 2026-07-17external
- Oracle Linux Security Advisory ELSA-2026-33565 vom 2026-07-17external
- Oracle Linux Security Advisory ELSA-2026-50827 vom 2026-08-11external
- Red Hat Security Advisory RHSA-2026:50728 vom 2026-08-05external
- Red Hat Security Advisory RHSA-2026:54391 vom 2026-08-12external
- Red Hat Security Advisory RHSA-2026:54393 vom 2026-08-12external
- Red Hat Security Advisory RHSA-2026:54416 vom 2026-08-12external
- Rocky Linux Security Advisory RLSA-2026:33512 vom 2026-07-29external
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan