Skip to content

PatchFirst · Latest vulnerabilities

ruby2.3 vulnerabilities · Page 3

Vulnerabilities published for ruby2.3 in the last 30 days: 0. Listed in the KEV catalogue: 0.

RSS ↗ JSON ↗

Vulnerabilities: 41

CVE-2016-7798
High · CVSS 7.5EPSS 3.17%Fix available
CVE-2016-7798
The openssl gem for Ruby uses the same initialization vector (IV) in GCM Mode (aes-*-gcm) when the IV is set before the key, which makes it easier for context-dependent attackers to bypass the encryption protection mechanism.
ruby2.3 Operating systems
- Update to 2.3.1-2~16.04.2
Published January 30, 2017Updated August 6, 2024
Source advisory 1 ↗Source advisory 2 ↗Source advisory 3 ↗

Check your server

Check your installed stack and versions against the current vulnerability feeds.

Check your server →