CVE-2018-16396

An issue was discovered in Ruby before 2.3.8, 2.4.x before 2.4.5, 2.5.x before 2.5.2, and 2.6.x before 2.6.0-preview3

published November 16, 2018

CVSS
—
EPSS
8%
Percentile
94.7
In the wild
Unconfirmed
What it is

An issue was discovered in Ruby before 2.3.8, 2.4.x before 2.4.5, 2.5.x before 2.5.2, and 2.6.x before 2.6.0-preview3. It does not taint strings that result from unpacking tainted strings with some formats.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.07968 · 94.7th percentile
Published
2018-11-16T18:00Z
EPSS history
Timeline
  • 16 NOV 18:00Z
    An issue was discovered in Ruby before 2.3.8, 2.4.x before 2.4.5, 2.5.x before 2.5.2, and 2.6.x before 2.6.0-preview3
    cvelistv5