Vulnerability · Published Jan 1, 2022 · Assigned by mitre
CVE-2021-41819
High 7.5
In plain English
A high-severity security flaw in the ruby package (AlmaLinux). There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 3.2% (higher than 88% of all known vulnerabilities). Fixed versions are available - upgrade the affected package.
Severity (CVSS 3.1)7.5High
Exploit odds (30 days)3.2%top 12.0% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known
Official description
CGI::Cookie.parse in Ruby through 2.6.8 mishandles security prefixes in cookie names. This also affects the CGI gem through 0.3.0 for Ruby.
Affected packages & fixed versions
| Ecosystem | Package | Fixed in | Advisory |
|---|---|---|---|
| AlmaLinux:8 | ruby | 3.0.4-141.module_el8.6.0+3263+41cde0c0 | ALSA-2022:6450 |
| AlmaLinux:8 | ruby | 2.6.9-108.module_el8.5.0+250+ba22dbf7 | ALSA-2022:0543 |
| AlmaLinux:8 | ruby | 2.5.9-110.module_el8.6.0+3074+4b08f9d4 | ALSA-2022:5779 |
| AlmaLinux:8 | ruby | 2.7.6-138.module_el8.6.0+3263+904da987 | ALSA-2022:6447 |
| AlmaLinux:8 | ruby | 2.6.9-108.module_el8.5.0+2623+08a8ba32 | ALSA-2022:0543 |
| AlmaLinux:8 | ruby-default-gems | 2.7.6-138.module_el8.6.0+3263+904da987 | ALSA-2022:6447 |
| AlmaLinux:8 | ruby-default-gems | 3.0.4-141.module_el8.6.0+3263+41cde0c0 | ALSA-2022:6450 |
| AlmaLinux:8 | ruby-devel | 3.0.4-141.module_el8.6.0+3263+41cde0c0 | ALSA-2022:6450 |
| AlmaLinux:8 | ruby-devel | 2.6.9-108.module_el8.5.0+2623+08a8ba32 | ALSA-2022:0543 |
| AlmaLinux:8 | ruby-devel | 2.7.6-138.module_el8.6.0+3263+904da987 | ALSA-2022:6447 |
| AlmaLinux:8 | ruby-devel | 2.6.9-108.module_el8.5.0+250+ba22dbf7 | ALSA-2022:0543 |
| AlmaLinux:8 | ruby-devel | 2.5.9-110.module_el8.6.0+3074+4b08f9d4 | ALSA-2022:5779 |
| AlmaLinux:8 | ruby-doc | 2.6.9-108.module_el8.5.0+2623+08a8ba32 | ALSA-2022:0543 |
| AlmaLinux:8 | ruby-doc | 2.6.9-108.module_el8.5.0+250+ba22dbf7 | ALSA-2022:0543 |
| AlmaLinux:8 | ruby-doc | 2.5.9-110.module_el8.6.0+3074+4b08f9d4 | ALSA-2022:5779 |
| AlmaLinux:8 | ruby-doc | 2.7.6-138.module_el8.6.0+3263+904da987 | ALSA-2022:6447 |
| AlmaLinux:8 | ruby-doc | 3.0.4-141.module_el8.6.0+3263+41cde0c0 | ALSA-2022:6450 |
| AlmaLinux:8 | ruby-irb | 2.5.9-110.module_el8.6.0+3074+4b08f9d4 | ALSA-2022:5779 |
| AlmaLinux:8 | ruby-libs | 3.0.4-141.module_el8.6.0+3263+41cde0c0 | ALSA-2022:6450 |
| AlmaLinux:8 | ruby-libs | 2.6.9-108.module_el8.5.0+2623+08a8ba32 | ALSA-2022:0543 |
| AlmaLinux:8 | ruby-libs | 2.6.9-108.module_el8.5.0+250+ba22dbf7 | ALSA-2022:0543 |
| AlmaLinux:8 | ruby-libs | 2.5.9-110.module_el8.6.0+3074+4b08f9d4 | ALSA-2022:5779 |
| AlmaLinux:8 | ruby-libs | 2.7.6-138.module_el8.6.0+3263+904da987 | ALSA-2022:6447 |
| AlmaLinux:8 | rubygem-abrt | 0.4.0-1.module_el8.5.0+2595+0c654ebc | ALSA-2022:6447 |
| AlmaLinux:8 | rubygem-abrt | 0.3.0-4.module_el8.5.0+2625+ec418553 | ALSA-2022:5779 |
| AlmaLinux:8 | rubygem-abrt | 0.3.0-4.module_el8.5.0+2623+08a8ba32 | ALSA-2022:0543 |
| AlmaLinux:8 | rubygem-abrt | 0.3.0-4.module_el8.5.0+259+8cec6917 | ALSA-2022:0543 |
| AlmaLinux:8 | rubygem-abrt | 0.4.0-1.module_el8.5.0+2595+0c654ebc | ALSA-2022:6450 |
| AlmaLinux:8 | rubygem-abrt-doc | 0.3.0-4.module_el8.5.0+2625+ec418553 | ALSA-2022:5779 |
| AlmaLinux:8 | rubygem-abrt-doc | 0.3.0-4.module_el8.5.0+259+8cec6917 | ALSA-2022:0543 |
| AlmaLinux:8 | rubygem-abrt-doc | 0.3.0-4.module_el8.5.0+2623+08a8ba32 | ALSA-2022:0543 |
| AlmaLinux:8 | rubygem-abrt-doc | 0.4.0-1.module_el8.5.0+2595+0c654ebc | ALSA-2022:6450 |
| AlmaLinux:8 | rubygem-abrt-doc | 0.4.0-1.module_el8.5.0+2595+0c654ebc | ALSA-2022:6447 |
| AlmaLinux:8 | rubygem-bigdecimal | 2.0.0-138.module_el8.6.0+3263+904da987 | ALSA-2022:6447 |
| AlmaLinux:8 | rubygem-bigdecimal | 1.3.4-110.module_el8.6.0+3074+4b08f9d4 | ALSA-2022:5779 |
| AlmaLinux:8 | rubygem-bigdecimal | 1.4.1-108.module_el8.5.0+2623+08a8ba32 | ALSA-2022:0543 |
| AlmaLinux:8 | rubygem-bigdecimal | 1.4.1-108.module_el8.5.0+250+ba22dbf7 | ALSA-2022:0543 |
| AlmaLinux:8 | rubygem-bigdecimal | 3.0.0-141.module_el8.6.0+3263+41cde0c0 | ALSA-2022:6450 |
| AlmaLinux:8 | rubygem-bson | 4.8.1-1.module_el8.4.0+2399+4e3a532a | ALSA-2022:6447 |
| AlmaLinux:8 | rubygem-bson | 4.8.1-1.module_el8.3.0+6147+d0dfc1e4 | ALSA-2022:6447 |
| AlmaLinux:8 | rubygem-bson | 4.3.0-2.module_el8.5.0+2625+ec418553 | ALSA-2022:5779 |
| AlmaLinux:8 | rubygem-bson | 4.5.0-1.module_el8.5.0+250+ba22dbf7 | ALSA-2022:0543 |
| AlmaLinux:8 | rubygem-bson | 4.8.1-1.module_el8.5.0+117+35d1289b | ALSA-2022:6447 |
| AlmaLinux:8 | rubygem-bson | 4.8.1-1.module_el8.6.0+3167+957ef55e | ALSA-2022:6447 |
| AlmaLinux:8 | rubygem-bson | 4.3.0-2.module_el8.5.0+259+8cec6917 | ALSA-2022:5779 |
| AlmaLinux:8 | rubygem-bson | 4.5.0-1.module_el8.5.0+2623+08a8ba32 | ALSA-2022:0543 |
| AlmaLinux:8 | rubygem-bson-doc | 4.3.0-2.module_el8.5.0+2625+ec418553 | ALSA-2022:5779 |
| AlmaLinux:8 | rubygem-bson-doc | 4.5.0-1.module_el8.5.0+2623+08a8ba32 | ALSA-2022:0543 |
| AlmaLinux:8 | rubygem-bson-doc | 4.8.1-1.module_el8.3.0+6147+d0dfc1e4 | ALSA-2022:6447 |
| AlmaLinux:8 | rubygem-bson-doc | 4.5.0-1.module_el8.5.0+250+ba22dbf7 | ALSA-2022:0543 |
| AlmaLinux:8 | rubygem-bundler | 1.17.2-108.module_el8.5.0+250+ba22dbf7 | ALSA-2022:0543 |
| AlmaLinux:8 | rubygem-bundler | 2.2.33-141.module_el8.6.0+3263+41cde0c0 | ALSA-2022:6450 |
| AlmaLinux:8 | rubygem-bundler | 2.2.24-138.module_el8.6.0+3263+904da987 | ALSA-2022:6447 |
| AlmaLinux:8 | rubygem-bundler | 1.17.2-108.module_el8.5.0+2623+08a8ba32 | ALSA-2022:0543 |
| AlmaLinux:8 | rubygem-bundler | 1.16.1-4.module_el8.5.0+2625+ec418553 | ALSA-2022:5779 |
| AlmaLinux:8 | rubygem-bundler-doc | 1.16.1-4.module_el8.5.0+2625+ec418553 | ALSA-2022:5779 |
| AlmaLinux:8 | rubygem-did_you_mean | 1.2.0-110.module_el8.6.0+3074+4b08f9d4 | ALSA-2022:5779 |
| AlmaLinux:8 | rubygem-did_you_mean | 1.3.0-108.module_el8.5.0+250+ba22dbf7 | ALSA-2022:0543 |
| AlmaLinux:8 | rubygem-did_you_mean | 1.3.0-108.module_el8.5.0+2623+08a8ba32 | ALSA-2022:0543 |
| AlmaLinux:8 | rubygem-io-console | 0.5.7-141.module_el8.6.0+3263+41cde0c0 | ALSA-2022:6450 |
| AlmaLinux:8 | rubygem-io-console | 0.5.6-138.module_el8.6.0+3263+904da987 | ALSA-2022:6447 |
| AlmaLinux:8 | rubygem-io-console | 0.4.7-108.module_el8.5.0+2623+08a8ba32 | ALSA-2022:0543 |
| AlmaLinux:8 | rubygem-io-console | 0.4.7-108.module_el8.5.0+250+ba22dbf7 | ALSA-2022:0543 |
| AlmaLinux:8 | rubygem-io-console | 0.4.6-110.module_el8.6.0+3074+4b08f9d4 | ALSA-2022:5779 |
| AlmaLinux:8 | rubygem-irb | 1.2.6-138.module_el8.6.0+3263+904da987 | ALSA-2022:6447 |
| AlmaLinux:8 | rubygem-irb | 1.0.0-108.module_el8.5.0+2623+08a8ba32 | ALSA-2022:0543 |
| AlmaLinux:8 | rubygem-irb | 1.0.0-108.module_el8.5.0+250+ba22dbf7 | ALSA-2022:0543 |
| AlmaLinux:8 | rubygem-irb | 1.3.5-141.module_el8.6.0+3263+41cde0c0 | ALSA-2022:6450 |
| AlmaLinux:8 | rubygem-json | 2.1.0-108.module_el8.5.0+2623+08a8ba32 | ALSA-2022:0543 |
| AlmaLinux:8 | rubygem-json | 2.1.0-110.module_el8.6.0+3074+4b08f9d4 | ALSA-2022:5779 |
| AlmaLinux:8 | rubygem-json | 2.5.1-141.module_el8.6.0+3263+41cde0c0 | ALSA-2022:6450 |
| AlmaLinux:8 | rubygem-json | 2.3.0-138.module_el8.6.0+3263+904da987 | ALSA-2022:6447 |
| AlmaLinux:8 | rubygem-json | 2.1.0-108.module_el8.5.0+250+ba22dbf7 | ALSA-2022:0543 |
| AlmaLinux:8 | rubygem-minitest | 5.14.2-141.module_el8.6.0+3263+41cde0c0 | ALSA-2022:6450 |
| AlmaLinux:8 | rubygem-minitest | 5.11.3-108.module_el8.5.0+250+ba22dbf7 | ALSA-2022:0543 |
| AlmaLinux:8 | rubygem-minitest | 5.10.3-110.module_el8.6.0+3074+4b08f9d4 | ALSA-2022:5779 |
| AlmaLinux:8 | rubygem-minitest | 5.11.3-108.module_el8.5.0+2623+08a8ba32 | ALSA-2022:0543 |
| AlmaLinux:8 | rubygem-minitest | 5.13.0-138.module_el8.6.0+3263+904da987 | ALSA-2022:6447 |
| AlmaLinux:8 | rubygem-mongo | 2.11.3-1.module_el8.3.0+6147+d0dfc1e4 | ALSA-2022:6447 |
| AlmaLinux:8 | rubygem-mongo | 2.8.0-1.module_el8.5.0+250+ba22dbf7 | ALSA-2022:0543 |
| AlmaLinux:8 | rubygem-mongo | 2.8.0-1.module_el8.5.0+2623+08a8ba32 | ALSA-2022:0543 |
| AlmaLinux:8 | rubygem-mongo | 2.5.1-2.module_el8.5.0+2625+ec418553 | ALSA-2022:5779 |
| AlmaLinux:8 | rubygem-mongo-doc | 2.8.0-1.module_el8.5.0+2623+08a8ba32 | ALSA-2022:0543 |
| AlmaLinux:8 | rubygem-mongo-doc | 2.8.0-1.module_el8.5.0+250+ba22dbf7 | ALSA-2022:0543 |
| AlmaLinux:8 | rubygem-mongo-doc | 2.11.3-1.module_el8.3.0+6147+d0dfc1e4 | ALSA-2022:6447 |
| AlmaLinux:8 | rubygem-mongo-doc | 2.5.1-2.module_el8.5.0+2625+ec418553 | ALSA-2022:5779 |
| AlmaLinux:8 | rubygem-mysql2 | 0.5.3-1.module_el8.6.0+3167+957ef55e | ALSA-2022:6447 |
| AlmaLinux:8 | rubygem-mysql2 | 0.5.3-1.module_el8.4.0+2399+4e3a532a | ALSA-2022:6447 |
| AlmaLinux:8 | rubygem-mysql2 | 0.5.3-1.module_el8.5.0+118+1ab773e1 | ALSA-2022:6450 |
| AlmaLinux:8 | rubygem-mysql2 | 0.5.3-1.module_el8.6.0+3144+d138acf1 | ALSA-2022:6450 |
| AlmaLinux:8 | rubygem-mysql2 | 0.5.3-1.module_el8.5.0+2595+0c654ebc | ALSA-2022:6450 |
| AlmaLinux:8 | rubygem-mysql2 | 0.5.2-1.module_el8.5.0+250+ba22dbf7 | ALSA-2022:0543 |
| AlmaLinux:8 | rubygem-mysql2 | 0.5.2-1.module_el8.5.0+2623+08a8ba32 | ALSA-2022:0543 |
| AlmaLinux:8 | rubygem-mysql2 | 0.4.10-4.module_el8.5.0+259+8cec6917 | ALSA-2022:5779 |
| AlmaLinux:8 | rubygem-mysql2 | 0.4.10-4.module_el8.5.0+2625+ec418553 | ALSA-2022:5779 |
| AlmaLinux:8 | rubygem-mysql2 | 0.5.3-1.module_el8.5.0+117+35d1289b | ALSA-2022:6447 |
| AlmaLinux:8 | rubygem-mysql2 | 0.5.3-1.module_el8.5.0+2595+0c654ebc | ALSA-2022:6447 |
| AlmaLinux:8 | rubygem-mysql2-doc | 0.5.2-1.module_el8.5.0+2623+08a8ba32 | ALSA-2022:0543 |
| AlmaLinux:8 | rubygem-mysql2-doc | 0.5.3-1.module_el8.5.0+2595+0c654ebc | ALSA-2022:6447 |
| AlmaLinux:8 | rubygem-mysql2-doc | 0.4.10-4.module_el8.5.0+2625+ec418553 | ALSA-2022:5779 |
| AlmaLinux:8 | rubygem-mysql2-doc | 0.5.2-1.module_el8.5.0+250+ba22dbf7 | ALSA-2022:0543 |
| AlmaLinux:8 | rubygem-mysql2-doc | 0.5.3-1.module_el8.5.0+2595+0c654ebc | ALSA-2022:6450 |
| AlmaLinux:8 | rubygem-net-telnet | 0.2.0-138.module_el8.6.0+3263+904da987 | ALSA-2022:6447 |
| AlmaLinux:8 | rubygem-net-telnet | 0.2.0-108.module_el8.5.0+2623+08a8ba32 | ALSA-2022:0543 |
| AlmaLinux:8 | rubygem-net-telnet | 0.2.0-108.module_el8.5.0+250+ba22dbf7 | ALSA-2022:0543 |
| AlmaLinux:8 | rubygem-net-telnet | 0.1.1-110.module_el8.6.0+3074+4b08f9d4 | ALSA-2022:5779 |
| AlmaLinux:8 | rubygem-openssl | 2.1.2-108.module_el8.5.0+2623+08a8ba32 | ALSA-2022:0543 |
| AlmaLinux:8 | rubygem-openssl | 2.1.2-108.module_el8.5.0+250+ba22dbf7 | ALSA-2022:0543 |
| AlmaLinux:8 | rubygem-openssl | 2.1.3-138.module_el8.6.0+3263+904da987 | ALSA-2022:6447 |
| AlmaLinux:8 | rubygem-openssl | 2.1.2-110.module_el8.6.0+3074+4b08f9d4 | ALSA-2022:5779 |
| AlmaLinux:8 | rubygem-pg | 1.1.4-1.module_el8.5.0+2623+08a8ba32 | ALSA-2022:0543 |
| AlmaLinux:8 | rubygem-pg | 1.0.0-2.module_el8.5.0+2625+ec418553 | ALSA-2022:5779 |
| AlmaLinux:8 | rubygem-pg | 1.0.0-2.module_el8.5.0+259+8cec6917 | ALSA-2022:5779 |
| AlmaLinux:8 | rubygem-pg | 1.2.3-1.module_el8.5.0+2595+0c654ebc | ALSA-2022:6447 |
| AlmaLinux:8 | rubygem-pg | 1.2.3-1.module_el8.5.0+117+35d1289b | ALSA-2022:6447 |
| AlmaLinux:8 | rubygem-pg | 1.2.3-1.module_el8.4.0+2399+4e3a532a | ALSA-2022:6447 |
| AlmaLinux:8 | rubygem-pg | 1.2.3-1.module_el8.6.0+3167+957ef55e | ALSA-2022:6447 |
| AlmaLinux:8 | rubygem-pg | 1.1.4-1.module_el8.5.0+250+ba22dbf7 | ALSA-2022:0543 |
| AlmaLinux:8 | rubygem-pg | 1.2.3-1.module_el8.5.0+2595+0c654ebc | ALSA-2022:6450 |
| AlmaLinux:8 | rubygem-pg | 1.2.3-1.module_el8.5.0+118+1ab773e1 | ALSA-2022:6450 |
| AlmaLinux:8 | rubygem-pg | 1.2.3-1.module_el8.6.0+3144+d138acf1 | ALSA-2022:6450 |
| AlmaLinux:8 | rubygem-pg-doc | 1.2.3-1.module_el8.5.0+2595+0c654ebc | ALSA-2022:6450 |
| AlmaLinux:8 | rubygem-pg-doc | 1.1.4-1.module_el8.5.0+250+ba22dbf7 | ALSA-2022:0543 |
| AlmaLinux:8 | rubygem-pg-doc | 1.0.0-2.module_el8.5.0+2625+ec418553 | ALSA-2022:5779 |
| AlmaLinux:8 | rubygem-pg-doc | 1.1.4-1.module_el8.5.0+2623+08a8ba32 | ALSA-2022:0543 |
| AlmaLinux:8 | rubygem-pg-doc | 1.2.3-1.module_el8.5.0+2595+0c654ebc | ALSA-2022:6447 |
| AlmaLinux:8 | rubygem-power_assert | 1.1.3-108.module_el8.5.0+250+ba22dbf7 | ALSA-2022:0543 |
| AlmaLinux:8 | rubygem-power_assert | 1.1.3-108.module_el8.5.0+2623+08a8ba32 | ALSA-2022:0543 |
| AlmaLinux:8 | rubygem-power_assert | 1.1.7-138.module_el8.6.0+3263+904da987 | ALSA-2022:6447 |
| AlmaLinux:8 | rubygem-power_assert | 1.2.0-141.module_el8.6.0+3263+41cde0c0 | ALSA-2022:6450 |
| AlmaLinux:8 | rubygem-power_assert | 1.1.1-110.module_el8.6.0+3074+4b08f9d4 | ALSA-2022:5779 |
| AlmaLinux:8 | rubygem-psych | 3.0.2-110.module_el8.6.0+3074+4b08f9d4 | ALSA-2022:5779 |
| AlmaLinux:8 | rubygem-psych | 3.1.0-108.module_el8.5.0+2623+08a8ba32 | ALSA-2022:0543 |
| AlmaLinux:8 | rubygem-psych | 3.1.0-138.module_el8.6.0+3263+904da987 | ALSA-2022:6447 |
| AlmaLinux:8 | rubygem-psych | 3.3.2-141.module_el8.6.0+3263+41cde0c0 | ALSA-2022:6450 |
| AlmaLinux:8 | rubygem-psych | 3.1.0-108.module_el8.5.0+250+ba22dbf7 | ALSA-2022:0543 |
| AlmaLinux:8 | rubygem-rake | 12.3.3-110.module_el8.6.0+3074+4b08f9d4 | ALSA-2022:5779 |
| AlmaLinux:8 | rubygem-rake | 13.0.3-141.module_el8.6.0+3263+41cde0c0 | ALSA-2022:6450 |
| AlmaLinux:8 | rubygem-rake | 12.3.3-108.module_el8.5.0+2623+08a8ba32 | ALSA-2022:0543 |
| AlmaLinux:8 | rubygem-rake | 12.3.3-108.module_el8.5.0+250+ba22dbf7 | ALSA-2022:0543 |
| AlmaLinux:8 | rubygem-rake | 13.0.1-138.module_el8.6.0+3263+904da987 | ALSA-2022:6447 |
| AlmaLinux:8 | rubygem-rbs | 1.4.0-141.module_el8.6.0+3263+41cde0c0 | ALSA-2022:6450 |
| AlmaLinux:8 | rubygem-rdoc | 6.1.2.1-108.module_el8.5.0+250+ba22dbf7 | ALSA-2022:0543 |
| AlmaLinux:8 | rubygem-rdoc | 6.2.1.1-138.module_el8.6.0+3263+904da987 | ALSA-2022:6447 |
| AlmaLinux:8 | rubygem-rdoc | 6.0.1.1-110.module_el8.6.0+3074+4b08f9d4 | ALSA-2022:5779 |
| AlmaLinux:8 | rubygem-rdoc | 6.3.3-141.module_el8.6.0+3263+41cde0c0 | ALSA-2022:6450 |
| AlmaLinux:8 | rubygem-rdoc | 6.1.2.1-108.module_el8.5.0+2623+08a8ba32 | ALSA-2022:0543 |
| AlmaLinux:8 | rubygem-rexml | 3.2.5-141.module_el8.6.0+3263+41cde0c0 | ALSA-2022:6450 |
| AlmaLinux:8 | rubygem-rss | 0.2.9-141.module_el8.6.0+3263+41cde0c0 | ALSA-2022:6450 |
| AlmaLinux:8 | rubygem-test-unit | 3.2.9-108.module_el8.5.0+250+ba22dbf7 | ALSA-2022:0543 |
| AlmaLinux:8 | rubygem-test-unit | 3.3.7-141.module_el8.6.0+3263+41cde0c0 | ALSA-2022:6450 |
| AlmaLinux:8 | rubygem-test-unit | 3.2.7-110.module_el8.6.0+3074+4b08f9d4 | ALSA-2022:5779 |
| AlmaLinux:8 | rubygem-test-unit | 3.2.9-108.module_el8.5.0+2623+08a8ba32 | ALSA-2022:0543 |
| AlmaLinux:8 | rubygem-test-unit | 3.3.4-138.module_el8.6.0+3263+904da987 | ALSA-2022:6447 |
| AlmaLinux:8 | rubygem-typeprof | 0.15.2-141.module_el8.6.0+3263+41cde0c0 | ALSA-2022:6450 |
| AlmaLinux:8 | rubygem-xmlrpc | 0.3.0-108.module_el8.5.0+2623+08a8ba32 | ALSA-2022:0543 |
| AlmaLinux:8 | rubygem-xmlrpc | 0.3.0-110.module_el8.6.0+3074+4b08f9d4 | ALSA-2022:5779 |
| AlmaLinux:8 | rubygem-xmlrpc | 0.3.0-108.module_el8.5.0+250+ba22dbf7 | ALSA-2022:0543 |
| AlmaLinux:8 | rubygem-xmlrpc | 0.3.0-138.module_el8.6.0+3263+904da987 | ALSA-2022:6447 |
| AlmaLinux:8 | rubygems | 3.1.6-138.module_el8.6.0+3263+904da987 | ALSA-2022:6447 |
| AlmaLinux:8 | rubygems | 3.0.3.1-108.module_el8.5.0+250+ba22dbf7 | ALSA-2022:0543 |
| AlmaLinux:8 | rubygems | 3.0.3.1-108.module_el8.5.0+2623+08a8ba32 | ALSA-2022:0543 |
| AlmaLinux:8 | rubygems | 3.2.33-141.module_el8.6.0+3263+41cde0c0 | ALSA-2022:6450 |
| AlmaLinux:8 | rubygems | 2.7.6.3-110.module_el8.6.0+3074+4b08f9d4 | ALSA-2022:5779 |
| AlmaLinux:8 | rubygems-devel | 3.0.3.1-108.module_el8.5.0+2623+08a8ba32 | ALSA-2022:0543 |
| AlmaLinux:8 | rubygems-devel | 3.2.33-141.module_el8.6.0+3263+41cde0c0 | ALSA-2022:6450 |
| AlmaLinux:8 | rubygems-devel | 3.1.6-138.module_el8.6.0+3263+904da987 | ALSA-2022:6447 |
| AlmaLinux:8 | rubygems-devel | 3.0.3.1-108.module_el8.5.0+250+ba22dbf7 | ALSA-2022:0543 |
| AlmaLinux:8 | rubygems-devel | 2.7.6.3-110.module_el8.6.0+3074+4b08f9d4 | ALSA-2022:5779 |
| Alpine:v3.20 | ruby | 3.0.3-r0 | ALPINE-CVE-2021-41819 |
| Alpine:v3.21 | ruby | 3.0.3-r0 | ALPINE-CVE-2021-41819 |
| Alpine:v3.22 | ruby | 3.0.3-r0 | ALPINE-CVE-2021-41819 |
| Alpine:v3.23 | ruby | 3.0.3-r0 | ALPINE-CVE-2021-41819 |
| Alpine:v3.24 | ruby | 3.0.3-r0 | ALPINE-CVE-2021-41819 |
| Rocky Linux:8 | ruby | 0:3.0.4-141.module+el8.6.0+1002+a7dba0ac | RLSA-2022:6450 |
| Rocky Linux:8 | ruby | 0:2.7.6-138.module+el8.6.0+1001+b5678180 | RLSA-2022:6447 |
| Rocky Linux:8 | ruby | 0:2.5.9-110.module+el8.6.0+992+fc951c18 | RLSA-2022:5779 |
| Rocky Linux:8 | ruby | 0:2.6.9-108.module+el8.5.0+738+032c9c02 | RLSA-2022:0543 |
| Rocky Linux:8 | rubygem-abrt | 0:0.4.0-1.module+el8.4.0+594+11b6673a | RLSA-2022:6450 |
| Rocky Linux:8 | rubygem-abrt | 0:0.3.0-4.module+el8.5.0+738+032c9c02 | RLSA-2022:0543 |
| Rocky Linux:8 | rubygem-abrt | 0:0.3.0-4.module+el8.3.0+167+5c390590 | RLSA-2022:0543 |
| Rocky Linux:8 | rubygem-abrt | 0:0.3.0-4.module+el8.4.0+592+03ff458a | RLSA-2022:0543 |
| Rocky Linux:8 | rubygem-abrt | 0:0.4.0-1.module+el8.5.0+668+665814fa | RLSA-2022:6447 |
| Rocky Linux:8 | rubygem-abrt | 0:0.4.0-1.module+el8.4.0+411+b946f28c | RLSA-2022:6450 |
| Rocky Linux:8 | rubygem-abrt | 0:0.4.0-1.module+el8.5.0+668+665814fa | RLSA-2022:6450 |
| Rocky Linux:8 | rubygem-abrt | 0:0.3.0-4.module+el8.5.0+738+032c9c02 | RLSA-2022:5779 |
| Rocky Linux:8 | rubygem-abrt | 0:0.3.0-4.module+el8.3.0+167+5c390590 | RLSA-2022:5779 |
| Rocky Linux:8 | rubygem-abrt | 0:0.3.0-4.module+el8.4.0+592+03ff458a | RLSA-2022:5779 |
| Rocky Linux:8 | rubygem-abrt | 0:0.4.0-1.module+el8.4.0+411+b946f28c | RLSA-2022:6447 |
| Rocky Linux:8 | rubygem-abrt | 0:0.4.0-1.module+el8.4.0+594+11b6673a | RLSA-2022:6447 |
| Rocky Linux:8 | rubygem-bson | 0:4.8.1-1.module+el8.4.0+594+11b6673a | RLSA-2022:6447 |
| Rocky Linux:8 | rubygem-bson | 0:4.3.0-2.module+el8.4.0+592+03ff458a | RLSA-2022:5779 |
| Rocky Linux:8 | rubygem-bson | 0:4.5.0-1.module+el8.4.0+446+80b53620 | RLSA-2022:0543 |
| Rocky Linux:8 | rubygem-bson | 0:4.5.0-1.module+el8.4.0+593+8d7f9f0c | RLSA-2022:0543 |
| Rocky Linux:8 | rubygem-bson | 0:4.3.0-2.module+el8.3.0+167+5c390590 | RLSA-2022:5779 |
| Rocky Linux:8 | rubygem-bson | 0:4.8.1-1.module+el8.4.0+411+b946f28c | RLSA-2022:6447 |
| Rocky Linux:8 | rubygem-bundler | 0:1.16.1-4.module+el8.6.0+992+fc951c18 | RLSA-2022:5779 |
| Rocky Linux:8 | rubygem-bundler | 0:1.16.1-4.module+el8.5.0+739+43897a5e | RLSA-2022:5779 |
| Rocky Linux:8 | rubygem-mongo | 0:2.11.3-1.module+el8.4.0+411+b946f28c | RLSA-2022:6447 |
| Rocky Linux:8 | rubygem-mongo | 0:2.8.0-1.module+el8.4.0+446+80b53620 | RLSA-2022:0543 |
Affected products (as reported)
Weakness: CWE-565 · Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
References
- https://hackerone.com/reports/910552
- https://www.ruby-lang.org/en/news/2021/11/24/cookie-prefix-spoofing-in-cgi-cookie-parse-cve-2021-41819/
- https://security.netapp.com/advisory/ntap-20220121-0003/
- FEDORA-2022-82a9edac27 vendor-advisory
- FEDORA-2022-8cf0124add vendor-advisory
- GLSA-202401-27 vendor-advisory