CVE-2017-0901
RubyGems version 2.6.12 and earlier fails to validate specification names, allowing a maliciously crafted gem to potentially overwrite any file on the filesystem.
Published Updated
PatchFirst · Latest vulnerabilities
jruby vulnerabilities · Page 3
Vulnerabilities published for jruby in the last 30 days: 0. Listed in the KEV catalogue: 0.
Vulnerabilities: 43
CVE-2017-0900
RubyGems version 2.6.12 and earlier is vulnerable to maliciously crafted gem specifications to cause a denial of service attack against RubyGems clients who have issued a `query` command.
Published UpdatedCVE-2017-0899
RubyGems version 2.6.12 and earlier is vulnerable to maliciously crafted gem specifications that include terminal escape characters. Printing the gem specification would execute terminal escape sequences.
Published Updated
Check your server
Check your installed stack and versions against the current vulnerability feeds.