Vulnerability · Published May 8, 2024 · Assigned by mitre
CVE-2024-27281
Medium 4.5
In plain English
A medium-severity unsafe deserialization in the ruby package (AlmaLinux). Proof-of-concept exploit code is public. The chance it is exploited in the next 30 days is estimated at 1.6% (higher than 75% of all known vulnerabilities). Fixed versions are available - upgrade the affected package.
Severity (CVSS 3.1)4.5Medium
Exploit odds (30 days)1.6%top 24.5% of all CVEs
Exploited in the wildNo reportsCISA SSVC: poc
Attack toolingNoneno public tooling known
Official description
An issue was discovered in RDoc 6.3.3 through 6.6.2, as distributed in Ruby 3.x through 3.3.0. When parsing .rdoc_options (used for configuration in RDoc) as a YAML file, object injection and resultant remote code execution are possible because there are no restrictions on the classes that can be restored. (When loading the documentation cache, object injection and resultant remote code execution are also possible if there were a crafted cache.) The main fixed version is 6.6.3.1. For Ruby 3.0 users, a fixed version is rdoc 6.3.4.1. For Ruby 3.1 users, a fixed version is rdoc 6.4.1.1. For Ruby 3.2 users, a fixed version is rdoc 6.5.1.1.
Affected packages & fixed versions
| Ecosystem | Package | Fixed in | Advisory |
|---|---|---|---|
| AlmaLinux:8 | ruby | 3.0.7-143.module_el8.10.0+3852+ce828b19 | ALSA-2024:3500 |
| AlmaLinux:8 | ruby | 2.5.9-112.module_el8.10.0+3871+342e2c2f | ALSA-2024:4499 |
| AlmaLinux:8 | ruby | 3.3.1-2.module_el8.10.0+3855+767cb125 | ALSA-2024:3670 |
| AlmaLinux:8 | ruby | 3.1.5-143.module_el8.10.0+3854+02eaa59a | ALSA-2024:3546 |
| AlmaLinux:9 | ruby | 3.1.5-144.module_el9.4.0+101+d58a8d95 | ALSA-2024:3668 |
| AlmaLinux:9 | ruby | 3.3.1-2.module_el9.4.0+102+68a93853 | ALSA-2024:3671 |
| AlmaLinux:9 | ruby | 3.0.7-162.el9_4 | ALSA-2024:3838 |
| AlmaLinux:8 | ruby-bundled-gems | 3.3.1-2.module_el8.10.0+3855+767cb125 | ALSA-2024:3670 |
| AlmaLinux:8 | ruby-bundled-gems | 3.1.5-143.module_el8.10.0+3854+02eaa59a | ALSA-2024:3546 |
| AlmaLinux:9 | ruby-bundled-gems | 3.3.1-2.module_el9.4.0+102+68a93853 | ALSA-2024:3671 |
| AlmaLinux:9 | ruby-bundled-gems | 3.1.5-144.module_el9.4.0+101+d58a8d95 | ALSA-2024:3668 |
| AlmaLinux:8 | ruby-default-gems | 3.0.7-143.module_el8.10.0+3852+ce828b19 | ALSA-2024:3500 |
| AlmaLinux:8 | ruby-default-gems | 3.1.5-143.module_el8.10.0+3854+02eaa59a | ALSA-2024:3546 |
| AlmaLinux:8 | ruby-default-gems | 3.3.1-2.module_el8.10.0+3855+767cb125 | ALSA-2024:3670 |
| AlmaLinux:9 | ruby-default-gems | 3.1.5-144.module_el9.4.0+101+d58a8d95 | ALSA-2024:3668 |
| AlmaLinux:9 | ruby-default-gems | 3.0.7-162.el9_4 | ALSA-2024:3838 |
| AlmaLinux:9 | ruby-default-gems | 3.3.1-2.module_el9.4.0+102+68a93853 | ALSA-2024:3671 |
| AlmaLinux:8 | ruby-devel | 3.0.7-143.module_el8.10.0+3852+ce828b19 | ALSA-2024:3500 |
| AlmaLinux:8 | ruby-devel | 3.3.1-2.module_el8.10.0+3855+767cb125 | ALSA-2024:3670 |
| AlmaLinux:8 | ruby-devel | 2.5.9-112.module_el8.10.0+3871+342e2c2f | ALSA-2024:4499 |
| AlmaLinux:8 | ruby-devel | 3.1.5-143.module_el8.10.0+3854+02eaa59a | ALSA-2024:3546 |
| AlmaLinux:9 | ruby-devel | 3.3.1-2.module_el9.4.0+102+68a93853 | ALSA-2024:3671 |
| AlmaLinux:9 | ruby-devel | 3.0.7-162.el9_4 | ALSA-2024:3838 |
| AlmaLinux:9 | ruby-devel | 3.1.5-144.module_el9.4.0+101+d58a8d95 | ALSA-2024:3668 |
| AlmaLinux:8 | ruby-doc | 3.1.5-143.module_el8.10.0+3854+02eaa59a | ALSA-2024:3546 |
| AlmaLinux:8 | ruby-doc | 3.0.7-143.module_el8.10.0+3852+ce828b19 | ALSA-2024:3500 |
| AlmaLinux:8 | ruby-doc | 3.3.1-2.module_el8.10.0+3855+767cb125 | ALSA-2024:3670 |
| AlmaLinux:8 | ruby-doc | 2.5.9-112.module_el8.10.0+3871+342e2c2f | ALSA-2024:4499 |
| AlmaLinux:9 | ruby-doc | 3.0.7-162.el9_4 | ALSA-2024:3838 |
| AlmaLinux:9 | ruby-doc | 3.1.5-144.module_el9.4.0+101+d58a8d95 | ALSA-2024:3668 |
| AlmaLinux:9 | ruby-doc | 3.3.1-2.module_el9.4.0+102+68a93853 | ALSA-2024:3671 |
| AlmaLinux:8 | ruby-irb | 2.5.9-112.module_el8.10.0+3871+342e2c2f | ALSA-2024:4499 |
| AlmaLinux:8 | ruby-libs | 2.5.9-112.module_el8.10.0+3871+342e2c2f | ALSA-2024:4499 |
| AlmaLinux:8 | ruby-libs | 3.3.1-2.module_el8.10.0+3855+767cb125 | ALSA-2024:3670 |
| AlmaLinux:8 | ruby-libs | 3.0.7-143.module_el8.10.0+3852+ce828b19 | ALSA-2024:3500 |
| AlmaLinux:8 | ruby-libs | 3.1.5-143.module_el8.10.0+3854+02eaa59a | ALSA-2024:3546 |
| AlmaLinux:9 | ruby-libs | 3.1.5-144.module_el9.4.0+101+d58a8d95 | ALSA-2024:3668 |
| AlmaLinux:9 | ruby-libs | 3.0.7-162.el9_4 | ALSA-2024:3838 |
| AlmaLinux:9 | ruby-libs | 3.3.1-2.module_el9.4.0+102+68a93853 | ALSA-2024:3671 |
| AlmaLinux:8 | rubygem-abrt | 0.3.0-4.module_el8.10.0+3871+342e2c2f | ALSA-2024:4499 |
| AlmaLinux:8 | rubygem-abrt | 0.4.0-1.module_el8.9.0+3746+91b8233a | ALSA-2024:3546 |
| AlmaLinux:8 | rubygem-abrt | 0.4.0-1.module_el8.10.0+3799+191214cc | ALSA-2024:3670 |
| AlmaLinux:8 | rubygem-abrt | 0.4.0-1.module_el8.10.0+3852+ce828b19 | ALSA-2024:3500 |
| AlmaLinux:8 | rubygem-abrt-doc | 0.4.0-1.module_el8.10.0+3852+ce828b19 | ALSA-2024:3500 |
| AlmaLinux:8 | rubygem-abrt-doc | 0.4.0-1.module_el8.9.0+3746+91b8233a | ALSA-2024:3546 |
| AlmaLinux:8 | rubygem-abrt-doc | 0.3.0-4.module_el8.10.0+3871+342e2c2f | ALSA-2024:4499 |
| AlmaLinux:8 | rubygem-abrt-doc | 0.4.0-1.module_el8.10.0+3799+191214cc | ALSA-2024:3670 |
| AlmaLinux:8 | rubygem-bigdecimal | 3.1.1-143.module_el8.10.0+3854+02eaa59a | ALSA-2024:3546 |
| AlmaLinux:8 | rubygem-bigdecimal | 1.3.4-112.module_el8.10.0+3871+342e2c2f | ALSA-2024:4499 |
| AlmaLinux:8 | rubygem-bigdecimal | 3.0.0-143.module_el8.10.0+3852+ce828b19 | ALSA-2024:3500 |
| AlmaLinux:8 | rubygem-bigdecimal | 3.1.5-2.module_el8.10.0+3855+767cb125 | ALSA-2024:3670 |
| AlmaLinux:9 | rubygem-bigdecimal | 3.1.1-144.module_el9.4.0+101+d58a8d95 | ALSA-2024:3668 |
| AlmaLinux:9 | rubygem-bigdecimal | 3.0.0-162.el9_4 | ALSA-2024:3838 |
| AlmaLinux:9 | rubygem-bigdecimal | 3.1.5-2.module_el9.4.0+102+68a93853 | ALSA-2024:3671 |
| AlmaLinux:8 | rubygem-bson | 4.3.0-2.module_el8.6.0+3170+4b08f9d4 | ALSA-2024:4499 |
| AlmaLinux:8 | rubygem-bson | 4.3.0-2.module_el8.5.0+2625+ec418553 | ALSA-2024:4499 |
| AlmaLinux:8 | rubygem-bson | 4.3.0-2.module_el8.5.0+259+8cec6917 | ALSA-2024:4499 |
| AlmaLinux:8 | rubygem-bson-doc | 4.3.0-2.module_el8.5.0+2625+ec418553 | ALSA-2024:4499 |
| AlmaLinux:8 | rubygem-bundler | 2.5.9-2.module_el8.10.0+3855+767cb125 | ALSA-2024:3670 |
| AlmaLinux:8 | rubygem-bundler | 1.16.1-4.module_el8.10.0+3871+342e2c2f | ALSA-2024:4499 |
| AlmaLinux:8 | rubygem-bundler | 2.2.33-143.module_el8.10.0+3852+ce828b19 | ALSA-2024:3500 |
| AlmaLinux:8 | rubygem-bundler | 2.3.27-143.module_el8.10.0+3854+02eaa59a | ALSA-2024:3546 |
| AlmaLinux:9 | rubygem-bundler | 2.2.33-162.el9_4 | ALSA-2024:3838 |
| AlmaLinux:9 | rubygem-bundler | 2.3.27-144.module_el9.4.0+101+d58a8d95 | ALSA-2024:3668 |
| AlmaLinux:9 | rubygem-bundler | 2.5.9-2.module_el9.4.0+102+68a93853 | ALSA-2024:3671 |
| AlmaLinux:8 | rubygem-bundler-doc | 1.16.1-4.module_el8.10.0+3871+342e2c2f | ALSA-2024:4499 |
| AlmaLinux:8 | rubygem-did_you_mean | 1.2.0-112.module_el8.10.0+3871+342e2c2f | ALSA-2024:4499 |
| AlmaLinux:8 | rubygem-io-console | 0.5.7-143.module_el8.10.0+3852+ce828b19 | ALSA-2024:3500 |
| AlmaLinux:8 | rubygem-io-console | 0.7.1-2.module_el8.10.0+3855+767cb125 | ALSA-2024:3670 |
| AlmaLinux:8 | rubygem-io-console | 0.4.6-112.module_el8.10.0+3871+342e2c2f | ALSA-2024:4499 |
| AlmaLinux:8 | rubygem-io-console | 0.5.11-143.module_el8.10.0+3854+02eaa59a | ALSA-2024:3546 |
| AlmaLinux:9 | rubygem-io-console | 0.5.7-162.el9_4 | ALSA-2024:3838 |
| AlmaLinux:9 | rubygem-io-console | 0.5.11-144.module_el9.4.0+101+d58a8d95 | ALSA-2024:3668 |
| AlmaLinux:9 | rubygem-io-console | 0.7.1-2.module_el9.4.0+102+68a93853 | ALSA-2024:3671 |
| AlmaLinux:8 | rubygem-irb | 1.3.5-143.module_el8.10.0+3852+ce828b19 | ALSA-2024:3500 |
| AlmaLinux:8 | rubygem-irb | 1.4.1-143.module_el8.10.0+3854+02eaa59a | ALSA-2024:3546 |
| AlmaLinux:8 | rubygem-irb | 1.11.0-2.module_el8.10.0+3855+767cb125 | ALSA-2024:3670 |
| AlmaLinux:9 | rubygem-irb | 1.3.5-162.el9_4 | ALSA-2024:3838 |
| AlmaLinux:9 | rubygem-irb | 1.4.1-144.module_el9.4.0+101+d58a8d95 | ALSA-2024:3668 |
| AlmaLinux:9 | rubygem-irb | 1.11.0-2.module_el9.4.0+102+68a93853 | ALSA-2024:3671 |
| AlmaLinux:8 | rubygem-json | 2.1.0-112.module_el8.10.0+3871+342e2c2f | ALSA-2024:4499 |
| AlmaLinux:8 | rubygem-json | 2.5.1-143.module_el8.10.0+3852+ce828b19 | ALSA-2024:3500 |
| AlmaLinux:8 | rubygem-json | 2.6.1-143.module_el8.10.0+3854+02eaa59a | ALSA-2024:3546 |
| AlmaLinux:8 | rubygem-json | 2.7.1-2.module_el8.10.0+3855+767cb125 | ALSA-2024:3670 |
| AlmaLinux:9 | rubygem-json | 2.5.1-162.el9_4 | ALSA-2024:3838 |
| AlmaLinux:9 | rubygem-json | 2.6.1-144.module_el9.4.0+101+d58a8d95 | ALSA-2024:3668 |
| AlmaLinux:9 | rubygem-json | 2.7.1-2.module_el9.4.0+102+68a93853 | ALSA-2024:3671 |
| AlmaLinux:8 | rubygem-minitest | 5.15.0-143.module_el8.10.0+3854+02eaa59a | ALSA-2024:3546 |
| AlmaLinux:8 | rubygem-minitest | 5.10.3-112.module_el8.10.0+3871+342e2c2f | ALSA-2024:4499 |
| AlmaLinux:8 | rubygem-minitest | 5.20.0-2.module_el8.10.0+3855+767cb125 | ALSA-2024:3670 |
| AlmaLinux:8 | rubygem-minitest | 5.14.2-143.module_el8.10.0+3852+ce828b19 | ALSA-2024:3500 |
| AlmaLinux:9 | rubygem-minitest | 5.20.0-2.module_el9.4.0+102+68a93853 | ALSA-2024:3671 |
| AlmaLinux:9 | rubygem-minitest | 5.14.2-162.el9_4 | ALSA-2024:3838 |
| AlmaLinux:9 | rubygem-minitest | 5.15.0-144.module_el9.4.0+101+d58a8d95 | ALSA-2024:3668 |
| AlmaLinux:8 | rubygem-mongo | 2.5.1-2.module_el8.5.0+2625+ec418553 | ALSA-2024:4499 |
| AlmaLinux:8 | rubygem-mongo-doc | 2.5.1-2.module_el8.5.0+2625+ec418553 | ALSA-2024:4499 |
| AlmaLinux:8 | rubygem-mysql2 | 0.5.3-3.module_el8.9.0+3746+91b8233a | ALSA-2024:3546 |
| AlmaLinux:8 | rubygem-mysql2 | 0.5.3-2.module_el8.10.0+3852+ce828b19 | ALSA-2024:3500 |
| AlmaLinux:8 | rubygem-mysql2 | 0.4.10-4.module_el8.6.0+3170+4b08f9d4 | ALSA-2024:4499 |
| AlmaLinux:8 | rubygem-mysql2 | 0.4.10-4.module_el8.5.0+2625+ec418553 | ALSA-2024:4499 |
| AlmaLinux:8 | rubygem-mysql2 | 0.4.10-4.module_el8.5.0+259+8cec6917 | ALSA-2024:4499 |
| AlmaLinux:8 | rubygem-mysql2 | 0.5.5-1.module_el8.10.0+3799+191214cc | ALSA-2024:3670 |
| AlmaLinux:9 | rubygem-mysql2 | 0.5.4-1.module_el9.1.0+8+503f6fbd | ALSA-2024:3668 |
| AlmaLinux:9 | rubygem-mysql2 | 0.5.5-1.module_el9.4.0+75+1a8fe981 | ALSA-2024:3671 |
| AlmaLinux:8 | rubygem-mysql2-doc | 0.5.3-3.module_el8.9.0+3746+91b8233a | ALSA-2024:3546 |
| AlmaLinux:8 | rubygem-mysql2-doc | 0.4.10-4.module_el8.5.0+2625+ec418553 | ALSA-2024:4499 |
| AlmaLinux:8 | rubygem-mysql2-doc | 0.5.3-2.module_el8.10.0+3852+ce828b19 | ALSA-2024:3500 |
| AlmaLinux:8 | rubygem-mysql2-doc | 0.5.5-1.module_el8.10.0+3799+191214cc | ALSA-2024:3670 |
| AlmaLinux:9 | rubygem-mysql2-doc | 0.5.4-1.module_el9.1.0+8+503f6fbd | ALSA-2024:3668 |
| AlmaLinux:9 | rubygem-mysql2-doc | 0.5.5-1.module_el9.4.0+75+1a8fe981 | ALSA-2024:3671 |
| AlmaLinux:8 | rubygem-net-telnet | 0.1.1-112.module_el8.10.0+3871+342e2c2f | ALSA-2024:4499 |
| AlmaLinux:8 | rubygem-openssl | 2.1.2-112.module_el8.10.0+3871+342e2c2f | ALSA-2024:4499 |
| AlmaLinux:8 | rubygem-pg | 1.2.3-1.module_el8.5.0+118+1ab773e1 | ALSA-2024:3500 |
| AlmaLinux:8 | rubygem-pg | 1.0.0-3.module_el8.9.0+3635+c6f99506 | ALSA-2024:4499 |
| AlmaLinux:8 | rubygem-pg | 1.2.3-1.module_el8.6.0+3144+d138acf1 | ALSA-2024:3500 |
| AlmaLinux:8 | rubygem-pg | 1.5.4-1.module_el8.10.0+3799+191214cc | ALSA-2024:3670 |
| AlmaLinux:8 | rubygem-pg | 1.2.3-1.module_el8.5.0+2595+0c654ebc | ALSA-2024:3500 |
| AlmaLinux:8 | rubygem-pg | 1.3.2-1.module_el8.9.0+3746+91b8233a | ALSA-2024:3546 |
| AlmaLinux:9 | rubygem-pg | 1.5.4-1.module_el9.4.0+75+1a8fe981 | ALSA-2024:3671 |
| AlmaLinux:9 | rubygem-pg | 1.3.5-1.module_el9.1.0+8+503f6fbd | ALSA-2024:3668 |
| AlmaLinux:8 | rubygem-pg-doc | 1.2.3-1.module_el8.10.0+3852+ce828b19 | ALSA-2024:3500 |
| AlmaLinux:8 | rubygem-pg-doc | 1.3.2-1.module_el8.9.0+3746+91b8233a | ALSA-2024:3546 |
| AlmaLinux:8 | rubygem-pg-doc | 1.2.3-1.module_el8.5.0+2595+0c654ebc | ALSA-2024:3500 |
| AlmaLinux:8 | rubygem-pg-doc | 1.5.4-1.module_el8.10.0+3799+191214cc | ALSA-2024:3670 |
| AlmaLinux:8 | rubygem-pg-doc | 1.0.0-3.module_el8.9.0+3635+c6f99506 | ALSA-2024:4499 |
| AlmaLinux:9 | rubygem-pg-doc | 1.5.4-1.module_el9.4.0+75+1a8fe981 | ALSA-2024:3671 |
| AlmaLinux:9 | rubygem-pg-doc | 1.3.5-1.module_el9.1.0+8+503f6fbd | ALSA-2024:3668 |
| AlmaLinux:8 | rubygem-power_assert | 1.1.1-112.module_el8.10.0+3871+342e2c2f | ALSA-2024:4499 |
| AlmaLinux:8 | rubygem-power_assert | 2.0.3-2.module_el8.10.0+3855+767cb125 | ALSA-2024:3670 |
| AlmaLinux:8 | rubygem-power_assert | 1.2.1-143.module_el8.10.0+3852+ce828b19 | ALSA-2024:3500 |
| AlmaLinux:8 | rubygem-power_assert | 2.0.1-143.module_el8.10.0+3854+02eaa59a | ALSA-2024:3546 |
| AlmaLinux:9 | rubygem-power_assert | 2.0.1-144.module_el9.4.0+101+d58a8d95 | ALSA-2024:3668 |
| AlmaLinux:9 | rubygem-power_assert | 1.2.1-162.el9_4 | ALSA-2024:3838 |
| AlmaLinux:9 | rubygem-power_assert | 2.0.3-2.module_el9.4.0+102+68a93853 | ALSA-2024:3671 |
| AlmaLinux:8 | rubygem-psych | 4.0.4-143.module_el8.10.0+3854+02eaa59a | ALSA-2024:3546 |
| AlmaLinux:8 | rubygem-psych | 3.3.2-143.module_el8.10.0+3852+ce828b19 | ALSA-2024:3500 |
| AlmaLinux:8 | rubygem-psych | 5.1.2-2.module_el8.10.0+3855+767cb125 | ALSA-2024:3670 |
| AlmaLinux:8 | rubygem-psych | 3.0.2-112.module_el8.10.0+3871+342e2c2f | ALSA-2024:4499 |
| AlmaLinux:9 | rubygem-psych | 5.1.2-2.module_el9.4.0+102+68a93853 | ALSA-2024:3671 |
| AlmaLinux:9 | rubygem-psych | 4.0.4-144.module_el9.4.0+101+d58a8d95 | ALSA-2024:3668 |
| AlmaLinux:9 | rubygem-psych | 3.3.2-162.el9_4 | ALSA-2024:3838 |
| AlmaLinux:8 | rubygem-racc | 1.7.3-2.module_el8.10.0+3855+767cb125 | ALSA-2024:3670 |
| AlmaLinux:9 | rubygem-racc | 1.7.3-2.module_el9.4.0+102+68a93853 | ALSA-2024:3671 |
| AlmaLinux:8 | rubygem-rake | 13.1.0-2.module_el8.10.0+3855+767cb125 | ALSA-2024:3670 |
| AlmaLinux:8 | rubygem-rake | 12.3.3-112.module_el8.10.0+3871+342e2c2f | ALSA-2024:4499 |
| AlmaLinux:8 | rubygem-rake | 13.0.6-143.module_el8.10.0+3854+02eaa59a | ALSA-2024:3546 |
| AlmaLinux:8 | rubygem-rake | 13.0.3-143.module_el8.10.0+3852+ce828b19 | ALSA-2024:3500 |
| AlmaLinux:9 | rubygem-rake | 13.1.0-2.module_el9.4.0+102+68a93853 | ALSA-2024:3671 |
| AlmaLinux:9 | rubygem-rake | 13.0.3-162.el9_4 | ALSA-2024:3838 |
| AlmaLinux:9 | rubygem-rake | 13.0.6-144.module_el9.4.0+101+d58a8d95 | ALSA-2024:3668 |
| AlmaLinux:8 | rubygem-rbs | 3.4.0-2.module_el8.10.0+3855+767cb125 | ALSA-2024:3670 |
| AlmaLinux:8 | rubygem-rbs | 1.4.0-143.module_el8.10.0+3852+ce828b19 | ALSA-2024:3500 |
| AlmaLinux:8 | rubygem-rbs | 2.7.0-143.module_el8.10.0+3854+02eaa59a | ALSA-2024:3546 |
| AlmaLinux:9 | rubygem-rbs | 2.7.0-144.module_el9.4.0+101+d58a8d95 | ALSA-2024:3668 |
| AlmaLinux:9 | rubygem-rbs | 1.4.0-162.el9_4 | ALSA-2024:3838 |
| AlmaLinux:9 | rubygem-rbs | 3.4.0-2.module_el9.4.0+102+68a93853 | ALSA-2024:3671 |
| AlmaLinux:8 | rubygem-rdoc | 6.3.4.1-143.module_el8.10.0+3852+ce828b19 | ALSA-2024:3500 |
| AlmaLinux:8 | rubygem-rdoc | 6.0.1.1-112.module_el8.10.0+3871+342e2c2f | ALSA-2024:4499 |
| AlmaLinux:8 | rubygem-rdoc | 6.4.1.1-143.module_el8.10.0+3854+02eaa59a | ALSA-2024:3546 |
| AlmaLinux:8 | rubygem-rdoc | 6.6.3.1-2.module_el8.10.0+3855+767cb125 | ALSA-2024:3670 |
| AlmaLinux:9 | rubygem-rdoc | 6.3.4.1-162.el9_4 | ALSA-2024:3838 |
| AlmaLinux:9 | rubygem-rdoc | 6.4.1.1-144.module_el9.4.0+101+d58a8d95 | ALSA-2024:3668 |
| AlmaLinux:9 | rubygem-rdoc | 6.6.3.1-2.module_el9.4.0+102+68a93853 | ALSA-2024:3671 |
| AlmaLinux:8 | rubygem-rexml | 3.2.5-143.module_el8.10.0+3854+02eaa59a | ALSA-2024:3546 |
| AlmaLinux:8 | rubygem-rexml | 3.2.6-2.module_el8.10.0+3855+767cb125 | ALSA-2024:3670 |
| AlmaLinux:8 | rubygem-rexml | 3.2.5-143.module_el8.10.0+3852+ce828b19 | ALSA-2024:3500 |
| AlmaLinux:9 | rubygem-rexml | 3.2.6-2.module_el9.4.0+102+68a93853 | ALSA-2024:3671 |
| AlmaLinux:9 | rubygem-rexml | 3.2.5-144.module_el9.4.0+101+d58a8d95 | ALSA-2024:3668 |
| AlmaLinux:9 | rubygem-rexml | 3.2.5-162.el9_4 | ALSA-2024:3838 |
| AlmaLinux:8 | rubygem-rss | 0.2.9-143.module_el8.10.0+3854+02eaa59a | ALSA-2024:3546 |
| AlmaLinux:8 | rubygem-rss | 0.3.0-2.module_el8.10.0+3855+767cb125 | ALSA-2024:3670 |
| AlmaLinux:8 | rubygem-rss | 0.2.9-143.module_el8.10.0+3852+ce828b19 | ALSA-2024:3500 |
| AlmaLinux:9 | rubygem-rss | 0.2.9-162.el9_4 | ALSA-2024:3838 |
| AlmaLinux:9 | rubygem-rss | 0.3.0-2.module_el9.4.0+102+68a93853 | ALSA-2024:3671 |
| AlmaLinux:9 | rubygem-rss | 0.2.9-144.module_el9.4.0+101+d58a8d95 | ALSA-2024:3668 |
| AlmaLinux:8 | rubygem-test-unit | 3.3.7-143.module_el8.10.0+3852+ce828b19 | ALSA-2024:3500 |
| AlmaLinux:8 | rubygem-test-unit | 3.6.1-2.module_el8.10.0+3855+767cb125 | ALSA-2024:3670 |
| AlmaLinux:8 | rubygem-test-unit | 3.2.7-112.module_el8.10.0+3871+342e2c2f | ALSA-2024:4499 |
| AlmaLinux:8 | rubygem-test-unit | 3.5.3-143.module_el8.10.0+3854+02eaa59a | ALSA-2024:3546 |
| AlmaLinux:9 | rubygem-test-unit | 3.6.1-2.module_el9.4.0+102+68a93853 | ALSA-2024:3671 |
| AlmaLinux:9 | rubygem-test-unit | 3.3.7-162.el9_4 | ALSA-2024:3838 |
| AlmaLinux:9 | rubygem-test-unit | 3.5.3-144.module_el9.4.0+101+d58a8d95 | ALSA-2024:3668 |
| AlmaLinux:8 | rubygem-typeprof | 0.21.3-143.module_el8.10.0+3854+02eaa59a | ALSA-2024:3546 |
| AlmaLinux:8 | rubygem-typeprof | 0.21.9-2.module_el8.10.0+3855+767cb125 | ALSA-2024:3670 |
| AlmaLinux:8 | rubygem-typeprof | 0.15.2-143.module_el8.10.0+3852+ce828b19 | ALSA-2024:3500 |
| AlmaLinux:9 | rubygem-typeprof | 0.21.3-144.module_el9.4.0+101+d58a8d95 | ALSA-2024:3668 |
| AlmaLinux:9 | rubygem-typeprof | 0.15.2-162.el9_4 | ALSA-2024:3838 |
| AlmaLinux:9 | rubygem-typeprof | 0.21.9-2.module_el9.4.0+102+68a93853 | ALSA-2024:3671 |
| AlmaLinux:8 | rubygem-xmlrpc | 0.3.0-112.module_el8.10.0+3871+342e2c2f | ALSA-2024:4499 |
| AlmaLinux:8 | rubygems | 3.3.27-143.module_el8.10.0+3854+02eaa59a | ALSA-2024:3546 |
| AlmaLinux:8 | rubygems | 3.2.33-143.module_el8.10.0+3852+ce828b19 | ALSA-2024:3500 |
| AlmaLinux:8 | rubygems | 3.5.9-2.module_el8.10.0+3855+767cb125 | ALSA-2024:3670 |
| AlmaLinux:8 | rubygems | 2.7.6.3-112.module_el8.10.0+3871+342e2c2f | ALSA-2024:4499 |
| AlmaLinux:9 | rubygems | 3.2.33-162.el9_4 | ALSA-2024:3838 |
| AlmaLinux:9 | rubygems | 3.5.9-2.module_el9.4.0+102+68a93853 | ALSA-2024:3671 |
| AlmaLinux:9 | rubygems | 3.3.27-144.module_el9.4.0+101+d58a8d95 | ALSA-2024:3668 |
| AlmaLinux:8 | rubygems-devel | 3.3.27-143.module_el8.10.0+3854+02eaa59a | ALSA-2024:3546 |
| AlmaLinux:8 | rubygems-devel | 2.7.6.3-112.module_el8.10.0+3871+342e2c2f | ALSA-2024:4499 |
| AlmaLinux:8 | rubygems-devel | 3.5.9-2.module_el8.10.0+3855+767cb125 | ALSA-2024:3670 |
| AlmaLinux:8 | rubygems-devel | 3.2.33-143.module_el8.10.0+3852+ce828b19 | ALSA-2024:3500 |
Affected products (as reported)
Weakness: CWE-502 · Vector: CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:L
References
- https://hackerone.com/reports/1187477
- https://www.ruby-lang.org/en/news/2024/03/21/rce-rdoc-cve-2024-27281/
- https://lists.debian.org/debian-lts-announce/2024/09/msg00000.html
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/27LUWREIFTP3MQAW7QE4PJM4DPAQJWXF/
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/XYDHPHEZI7OQXTQKTDZHGZNPIJH7ZV5N/