CVE-2009-5147

DL::dlopen in Ruby 1.8, 1.9.0, 1.9.2, 1.9.3, 2.0.0 before patchlevel 648, and 2.1 before 2.1.8 opens libraries with tainted names

published March 29, 2017

CVSS
—
EPSS
8%
Percentile
94.6
In the wild
Unconfirmed
What it is

DL::dlopen in Ruby 1.8, 1.9.0, 1.9.2, 1.9.3, 2.0.0 before patchlevel 648, and 2.1 before 2.1.8 opens libraries with tainted names.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.07766 · 94.6th percentile
Published
2017-03-29T14:00Z
EPSS history
Timeline
  • 29 MAR 14:00Z
    DL::dlopen in Ruby 1.8, 1.9.0, 1.9.2, 1.9.3, 2.0.0 before patchlevel 648, and 2.1 before 2.1.8 opens libraries with tainted names
    cvelistv5