ALPINE-CVE-2018-16396
ALPINE-CVE-2018-16396
This page contains facts from public vulnerability sources. Check the original advisory before updating.
An issue was discovered in Ruby before 2.3.8, 2.4.x before 2.4.5, 2.5.x before 2.5.2, and 2.6.x before 2.6.0-preview3. It does not taint strings that result from unpacking tainted strings with some formats.
CVSS 8.1 · High · Fix available
- Published
- Updated
Stack: system
Affected products and versions
ruby Alpine:v3.11
- Affected ranges
- ECOSYSTEM: ≥ 2.3.0, < 2.5.2-r0
Update to 2.5.2-r0
ruby Alpine:v3.12
- Affected ranges
- ECOSYSTEM: ≥ 2.3.0, < 2.5.2-r0
Update to 2.5.2-r0
ruby Alpine:v3.13
- Affected ranges
- ECOSYSTEM: ≥ 2.3.0, < 2.5.2-r0
Update to 2.5.2-r0
ruby Alpine:v3.14
- Affected ranges
- ECOSYSTEM: ≥ 2.3.0, < 2.5.2-r0
Update to 2.5.2-r0
ruby Alpine:v3.15
- Affected ranges
- ECOSYSTEM: ≥ 2.3.0, < 2.5.2-r0
Update to 2.5.2-r0
ruby Alpine:v3.16
- Affected ranges
- ECOSYSTEM: ≥ 2.3.0, < 2.5.2-r0
Update to 2.5.2-r0
ruby Alpine:v3.17
- Affected ranges
- ECOSYSTEM: ≥ 2.3.0, < 2.5.2-r0
Update to 2.5.2-r0
ruby Alpine:v3.18
- Affected ranges
- ECOSYSTEM: ≥ 2.3.0, < 2.5.2-r0
Update to 2.5.2-r0
ruby Alpine:v3.19
- Affected ranges
- ECOSYSTEM: ≥ 2.3.0, < 2.5.2-r0
Update to 2.5.2-r0
ruby Alpine:v3.20
- Affected ranges
- ECOSYSTEM: ≥ 2.3.0, < 2.5.2-r0
Update to 2.5.2-r0
ruby Alpine:v3.21
- Affected ranges
- ECOSYSTEM: ≥ 2.3.0, < 2.5.2-r0
Update to 2.5.2-r0
ruby Alpine:v3.22
- Affected ranges
- ECOSYSTEM: ≥ 2.3.0, < 2.5.2-r0
Update to 2.5.2-r0
ruby Alpine:v3.23
- Affected ranges
- ECOSYSTEM: ≥ 2.3.0, < 2.5.2-r0
Update to 2.5.2-r0
ruby Alpine:v3.24
- Affected ranges
- ECOSYSTEM: ≥ 2.3.0, < 2.5.2-r0
Update to 2.5.2-r0
ruby Alpine:v3.4
- Affected ranges
- ECOSYSTEM: ≥ 2.3.0, < 2.3.8-r0
Update to 2.3.8-r0
ruby Alpine:v3.5
- Affected ranges
- ECOSYSTEM: ≥ 2.3.0, < 2.3.8-r0
Update to 2.3.8-r0
ruby Alpine:v3.6
- Affected ranges
- ECOSYSTEM: ≥ 2.3.0, < 2.4.5-r0
Update to 2.4.5-r0
ruby Alpine:v3.7
- Affected ranges
- ECOSYSTEM: ≥ 2.3.0, < 2.4.5-r0
Update to 2.4.5-r0
ruby Alpine:v3.8
- Affected ranges
- ECOSYSTEM: ≥ 2.3.0, < 2.5.2-r0
Update to 2.5.2-r0
ruby Alpine:v3.9
- Affected ranges
- ECOSYSTEM: ≥ 2.3.0, < 2.5.2-r0
Update to 2.5.2-r0