GCVE - cpe:2.3:a:ruby-lang:ruby:1.8.6:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:ruby-lang:ruby:1.8.6:*:*:*:*:*:*:*

part: a version: 1.8.6 update: *

Vendor	Ruby Lang (`5813a634-c286-5f1d-90d5-a1a352f78d39`)
Product	Ruby (`48f7c14c-c576-5b15-be87-22eeb9add91e`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from NVD CPE 2.0 feed

PURL mappings

PURL	Source	Last updated
`pkg:github/ruby/ruby`	purl2cpe	2026-06-01 10:11:45.403296
`pkg:ruby-lang/ruby`	purl2cpe	2026-06-01 10:11:45.403297

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2011-1005`	vulnerable	2026-06-08 04:56:40.692307	Details available The safe-level feature in Ruby 1.8.6 through 1.8.6-420, 1.8.7 through 1.8.7-330, and 1.8.8dev allows context-dependent attackers to modify strings via the Exception#to_s method, as demonstrated by changing an intended pathname. Published: 2011-03-02T19:00:00.000Z Updated: 2024-08-06T22:14:26.987Z Open on db.gcve.eu Reference links http://www.redhat.com/support/errata/RHSA-2011-0910.html http://www.openwall.com/lists/oss-security/2011/02/21/5 http://www.mandriva.com/security/advisories?name=MDVSA-2011:098 http://www.vupen.com/english/advisories/2011/0539 http://www.redhat.com/support/errata/RHSA-2011-0909.html	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2011-1004`	vulnerable	2026-06-08 04:56:40.689091	Details available The FileUtils.remove_entry_secure method in Ruby 1.8.6 through 1.8.6-420, 1.8.7 through 1.8.7-330, 1.8.8dev, 1.9.1 through 1.9.1-430, 1.9.2 through 1.9.2-136, and 1.9.3dev allows local users to delete arbitrary files via a symlink attack. Published: 2011-03-02T19:00:00.000Z Updated: 2024-08-06T22:14:26.892Z Open on db.gcve.eu Reference links http://www.redhat.com/support/errata/RHSA-2011-0910.html http://www.securityfocus.com/bid/46460 http://www.openwall.com/lists/oss-security/2011/02/21/5 http://www.vupen.com/english/advisories/2011/0539 http://www.redhat.com/support/errata/RHSA-2011-0909.html	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2009-1904`	vulnerable	2026-06-08 04:51:25.634526	Details available The BigDecimal library in Ruby 1.8.6 before p369 and 1.8.7 before p173 allows context-dependent attackers to cause a denial of service (application crash) via a string argument that represents a large number, as demonstrated by an attempted conversion to the Float data type. Published: 2009-06-11T21:00:00.000Z Updated: 2024-08-07T05:27:54.831Z Open on db.gcve.eu Reference links http://www.vupen.com/english/advisories/2009/1563 http://secunia.com/advisories/35937 http://secunia.com/advisories/35593 http://www.ruby-lang.org/en/news/2009/06/09/dos-vulnerability-in-bigdecimal/ http://redmine.ruby-lang.org/issues/show/794	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2008-3905`	vulnerable	2026-06-08 04:50:37.143542	Details available resolv.rb in Ruby 1.8.5 and earlier, 1.8.6 before 1.8.6-p287, 1.8.7 before 1.8.7-p72, and 1.9 r18423 and earlier uses sequential transaction IDs and constant source ports for DNS requests, which makes it easier for remote attackers to spoof DNS responses, a different vulnerability than CVE-2008-1447. Published: 2008-09-04T17:00:00.000Z Updated: 2024-08-07T09:53:00.497Z Open on db.gcve.eu Reference links http://www.openwall.com/lists/oss-security/2008/09/04/9 http://secunia.com/advisories/31430 https://usn.ubuntu.com/651-1/ http://www.securityfocus.com/bid/31699 http://www.debian.org/security/2008/dsa-1652	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2008-3790`	vulnerable	2026-06-08 04:50:36.355309	Details available The REXML module in Ruby 1.8.6 through 1.8.6-p287, 1.8.7 through 1.8.7-p72, and 1.9 allows context-dependent attackers to cause a denial of service (CPU consumption) via an XML document with recursively nested entities, aka an "XML entity explosion." Published: 2008-08-27T20:00:00.000Z Updated: 2024-08-07T09:52:59.694Z Open on db.gcve.eu Reference links https://usn.ubuntu.com/651-1/ http://secunia.com/advisories/33185 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10393 http://support.apple.com/kb/HT3549 http://www.ruby-lang.org/security/20080823rexml/rexml-expansion-fix.rb	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2008-3657`	vulnerable	2026-06-08 04:50:35.856293	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2008-3656`	vulnerable	2026-06-08 04:50:35.854822	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2008-3655`	vulnerable	2026-06-08 04:50:35.853169	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2008-3443`	vulnerable	2026-06-08 04:50:34.734521	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2008-1891`	vulnerable	2026-06-08 04:50:22.167367	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2007-5770`	vulnerable	2026-06-08 04:50:07.009893	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2007-5162`	vulnerable	2026-06-08 04:50:04.503292	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.