遠端 Ubuntu 20.04 LTS/22.04 LTS/24.04 LTS/24.10 主機上安裝的套件受到 USN-7418-1 公告中所提及的多個弱點影響。

    據發現，Ruby 未正確處理使用 REXML gem 的屬性值中具有特定 XML 字元的 XML 文件剖析。攻擊者可利用此問題造成 Ruby 當機，進而導致拒絕服務。此問題僅影響了 Ubuntu 22.04 LTS、Ubuntu 24.04 LTS 和 Ubuntu 24.10。(CVE-2024-35176、CVE-2024-39908、CVE-2024-41123、CVE-2024-43398)

    據發現，Ruby 未正確處理 net-imap 回應剖析器中的擴充範圍。如果使用者或自動化系統遭誘騙而連線至惡意 IMAP 伺服器，遠端攻擊者可能利用此問題消耗記憶體，造成拒絕服務。此問題僅影響了 Ubuntu 24.04 LTS 和 Ubuntu 24.10。(CVE-2025-25186)

    據發現，Ruby CGI gem 未正確處理某些 cookie。遠端攻擊者可能會利用此問題耗用資源，進而導致拒絕服務。(CVE-2025-27219)

    據發現，Ruby CGI gem 未正確處理某些規則運算式的剖析。遠端攻擊者可能會利用此問題耗盡資源，進而導致拒絕服務。
    (CVE-2025-27220)

    據發現，Ruby URI gem 未正確處理某些 URI 處理方法。遠端攻擊者可能會利用此問題洩漏驗證憑證。(CVE-2025-27221)

Tenable 已直接從 Ubuntu 安全公告擷取前置描述區塊。

請注意，Nessus 並未測試這些問題，而是僅依據應用程式自我報告的版本號碼作出判斷。

遠端 Redhat Enterprise Linux 9 主機上安裝的多個套件受到 RHSA-2025:4488 公告中提及的多個弱點影響。

    Ruby 是可延伸的解譯式物件導向指令碼語言。它具有處理文字檔案及執行系統管理工作的功能。

    安全性修正：

    * rexml -- REXML 中的 DoS 弱點 (CVE-2024-39908)

    * rexml：rubygem-rexml：剖析具有許多特定字元 (例如，空白字元、>] 和 ]> ) 的 XML 時會發生 DoS (CVE-2024-41123)

    * rexml -- REXML 中的 DoS 弱點 (CVE-2024-41946)

    * rexml -- REXML 中的 DoS 弱點 (CVE-2024-43398)

    * CGICGI::Util#escapeElement 中的 ReDoS (CVE-2025-27220)

    * CGICGI::Cookie.parse 中的拒絕服務 (CVE-2025-27219)

    * uriURI#join、URI#merge 和 URI#+ 中的使用者資訊洩漏 (CVE-2025-27221)

    如需安全性問題的詳細資料，包括影響、CVSS 分數、致謝及其他相關資訊，請參閱〈參照〉一節列出的 CVE 頁面。

Tenable 已直接從 Red Hat Enterprise Linux 安全公告擷取前置描述區塊。

請注意，Nessus 並未測試這些問題，而是僅依據應用程式自我報告的版本號碼作出判斷。

远程 Ubuntu 20.04 LTS / 22.04 LTS / 24.04 LTS / 24.10 主机上安装的程序包受到 USN-7418-1 公告中提及的多个漏洞影响。

    发现 Ruby 未能正确处理 XML 文档的解析，该文档在使用 REXML gem 的属性值中包含特定 XML 字符。攻击者可利用此问题造成 Ruby 崩溃，从而导致拒绝服务。此问题仅影响 Ubuntu 22.04 LTS、Ubuntu 24.04 LTS 和 Ubuntu 24.10。（CVE-2024-35176、CVE-2024-39908、CVE-2024-41123、CVE-2024-43398）

    发现 Ruby 未能正确处理 net-imap 响应解析器中的扩展范围。如果用户或自动化系统受到诱骗连接到恶意 IMAP 服务器，远程攻击者可利用此问题消耗内存，造成拒绝服务。此问题仅影响 Ubuntu 24.04 LTS 和 Ubuntu 24.10。(CVE-2025-25186)

    发现 Ruby CGI gem 未能正确解析某些 Cookie。远程攻击者可能利用此问题消耗资源，从而导致拒绝服务。(CVE-2025-27219)

    发现 Ruby CGI gem 未能正确解析某些正则表达式。远程攻击者可能利用此问题消耗资源，从而导致拒绝服务。
    (CVE-2025-27220)

    发现 Ruby URI gem 未能正确处理某些 URI 的处理方式。远程攻击者可能利用此问题泄露身份验证凭据。(CVE-2025-27221)

Tenable 已直接从 Ubuntu 安全公告中提取上述描述块。

请注意，Nessus 尚未测试这些问题，而是只依据应用程序自我报告的版本号进行判断。

远程 Redhat Enterprise Linux 9 主机上安装的程序包受到 RHSA-2025:4488 公告中提及的多个漏洞影响。

    Ruby 是一种可扩展的直译式面向对象的脚本语言。它具有处理文本文件和执行系统管理任务的功能。

    安全修复：

    * rexml：REXML 中的 DoS 漏洞 (CVE-2024-39908)

    * rexml：rubygem-rexml：解析具有许多特定字符（例如空白字符、 >] 和 ]>）的 XML 时会发生 DoS (CVE-2024-41123)

    * rexml：REXML 中的 DoS 漏洞 (CVE-2024-41946)

    * rexml：REXML 中的 DoS 漏洞 (CVE-2024-43398)

    * CGICGI::Util#escapeElement 中的 ReDoS (CVE-2025-27220)

    * CGICGI::Cookie.parse 中的拒绝服务 (CVE-2025-27219)

    * uriURI#join、URI#merge 和 URI#+ 中的用户信息泄漏 (CVE-2025-27221)

    有关上述安全问题的更多详细信息，包括其影响、CVSS 得分、致谢，以及其他相关信息，请参阅列于“参考”部分的 CVE 页面。

Tenable 已直接从 Red Hat Enterprise Linux 安全公告中提取上述描述块。

请注意，Nessus 尚未测试这些问题，而是只依据应用程序自我报告的版本号进行判断。

远程 Oracle Linux 9 主机上安装的程序包受到 ELSA-2025-4488 公告中提及的多个漏洞影响。

    ruby [3.1.7-146]
    - 升级到 Ruby 3.1.7。
      已解决：RHEL-55410
    - 修复了 REXML 中的 DoS 漏洞。 (CVE-2024-39908) 解决 RHEL-86077

Tenable 已直接从 Oracle Linux 安全公告中提取上述描述块。

请注意，Nessus 尚未测试这些问题，而是只依据应用程序自我报告的版本号进行判断。

Linux/Unix 主机中安装的一个或多个程序包受到一个漏洞影响，而供应商没有提供补丁程序。

  - 在 Ruby 0.4.2 之前的 CGI gem 中，Util#escapeElement 方法中存在一个正则表达式拒绝服务 (ReDoS) 漏洞。 (CVE-2025-27220)

请注意，Nessus 依赖供应商报告的程序包是否存在进行判断。

The remote SUSE Linux SLED15 / SLED_SAP15 / SLES15 / SLES_SAP15 / openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2025:1369-1 advisory.

    - CVE-2025-27219: Fixed denial of service in CGI::Cookie.parse (bsc#1237804)
    - CVE-2025-27220: Fixed ReDoS in CGI::Util#escapeElement (bsc#1237806)

    Other fixes:
    - Improved fix for CVE-2024-47220 (bsc#1230930, bsc#1235773)

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Ubuntu 20.04 LTS / 22.04 LTS / 24.04 LTS / 24.10 host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-7418-1 advisory.

    It was discovered that Ruby incorrectly handled parsing of an XML document that has specific XML     characters in an attribute value using REXML gem. An attacker could use this issue to cause Ruby to crash,     resulting in a denial of service. This issue only affected in Ubuntu 22.04 LTS, Ubuntu 24.04 LTS, and     Ubuntu 24.10. (CVE-2024-35176, CVE-2024-39908, CVE-2024-41123, CVE-2024-43398)

    It was discovered that Ruby incorrectly handled expanding ranges in the net-imap response parser. If a     user or automated system were tricked into connecting to a malicious IMAP server, a remote attacker could     possibly use this issue to consume memory, leading to a denial of service. This issue only affected Ubuntu     24.04 LTS, and Ubuntu 24.10. (CVE-2025-25186)

    It was discovered that the Ruby CGI gem incorrectly handled parsing certain cookies. A remote attacker     could possibly use this issue to consume resources, leading to a denial of service. (CVE-2025-27219)

    It was discovered that the Ruby CGI gem incorrectly handled parsing certain regular expressions. A remote     attacker could possibly use this issue to consume resources, leading to a denial of service.
    (CVE-2025-27220)

    It was discovered that the Ruby URI gem incorrectly handled certain URI handling methods. A remote     attacker could possibly use this issue to leak authentication credentials. (CVE-2025-27221)

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2025:4488 advisory.

    Ruby is an extensible, interpreted, object-oriented, scripting language. It has features to process text     files and to perform system management tasks.

    Security Fix(es):

    * rexml: DoS vulnerability in REXML (CVE-2024-39908)

    * rexml: rubygem-rexml: DoS when parsing an XML having many specific characters such as whitespace     character, >] and ]> (CVE-2024-41123)

    * rexml: DoS vulnerability in REXML (CVE-2024-41946)

    * rexml: DoS vulnerability in REXML (CVE-2024-43398)

    * CGI: ReDoS in CGI::Util#escapeElement (CVE-2025-27220)

    * CGI: Denial of Service in CGI::Cookie.parse (CVE-2025-27219)

    * uri: userinfo leakage in URI#join, URI#merge and URI#+ (CVE-2025-27221)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

According to the versions of the ruby packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities :

    In the CGI gem before 0.4.2 for Ruby, the CGI::Cookie.parse method in the CGI library contains a potential     Denial of Service (DoS) vulnerability. The method does not impose any limit on the length of the raw     cookie value it processes. This oversight can lead to excessive resource consumption when parsing     extremely large cookies.(CVE-2025-27219)

    In the URI gem before 1.0.3 for Ruby, the URI handling methods (URI.join, URI#merge, URI#+) have an     inadvertent leakage of authentication credentials because userinfo is retained even after changing the     host.(CVE-2025-27221)

    In the CGI gem before 0.4.2 for Ruby, a Regular Expression Denial of Service (ReDoS) vulnerability exists     in the Util#escapeElement method.(CVE-2025-27220)

Tenable has extracted the preceding description block directly from the EulerOS ruby security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

According to the versions of the ruby packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities :

    In the CGI gem before 0.4.2 for Ruby, a Regular Expression Denial of Service (ReDoS) vulnerability exists     in the Util#escapeElement method.(CVE-2025-27220)

    In the URI gem before 1.0.3 for Ruby, the URI handling methods (URI.join, URI#merge, URI#+) have an     inadvertent leakage of authentication credentials because userinfo is retained even after changing the     host.(CVE-2025-27221)

    In the CGI gem before 0.4.2 for Ruby, the CGI::Cookie.parse method in the CGI library contains a potential     Denial of Service (DoS) vulnerability. The method does not impose any limit on the length of the raw     cookie value it processes. This oversight can lead to excessive resource consumption when parsing     extremely large cookies.(CVE-2025-27219)

Tenable has extracted the preceding description block directly from the EulerOS ruby security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - In the CGI gem before 0.4.2 for Ruby, a Regular Expression Denial of Service (ReDoS) vulnerability exists     in the Util#escapeElement method. (CVE-2025-27220)

Note that Nessus relies on the presence of the package as reported by the vendor.

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2025-4488 advisory.

    ruby     [3.1.7-146]
    - Upgrade to Ruby 3.1.7.
      Resolves: RHEL-55410
    - Fix DoS vulnerability in REXML. (CVE-2024-39908)       Resolves: RHEL-86077

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

According to the versions of the ruby packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities :

    In the CGI gem before 0.4.2 for Ruby, a Regular Expression Denial of Service (ReDoS) vulnerability exists     in the Util#escapeElement method.(CVE-2025-27220)

    In the CGI gem before 0.4.2 for Ruby, the CGI::Cookie.parse method in the CGI library contains a potential     Denial of Service (DoS) vulnerability. The method does not impose any limit on the length of the raw     cookie value it processes. This oversight can lead to excessive resource consumption when parsing     extremely large cookies.(CVE-2025-27219)

    In the URI gem before 1.0.3 for Ruby, the URI handling methods (URI.join, URI#merge, URI#+) have an     inadvertent leakage of authentication credentials because userinfo is retained even after changing the     host.(CVE-2025-27221)

Tenable has extracted the preceding description block directly from the EulerOS ruby security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

An update of the ruby package has been released.

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
233968	Ubuntu 20.04 LTS / 22.04 LTS / 24.04 LTS / 24.10 : Ruby 弱點 (USN-7418-1)	Nessus	Ubuntu Local Security Checks	2025/4/7	2025/4/7	medium
235165	RHEL 9 : ruby:3.1 (RHSA-2025:4488)	Nessus	Red Hat Local Security Checks	2025/5/6	2025/6/5	high
233968	Ubuntu 20.04 LTS / 22.04 LTS / 24.04 LTS / 24.10：Ruby 漏洞 (USN-7418-1)	Nessus	Ubuntu Local Security Checks	2025/4/7	2025/4/7	medium
235165	RHEL 9：ruby：3.1 (RHSA-2025:4488)	Nessus	Red Hat Local Security Checks	2025/5/6	2025/6/5	high
235375	Oracle Linux 9：ruby:3.1 (ELSA-2025-4488)	Nessus	Oracle Linux Local Security Checks	2025/5/6	2025/5/6	high
232149	Linux Distros 未修补的漏洞: CVE-2025-27220	Nessus	Misc.	2025/3/6	2025/3/6	high
234841	SUSE SLED15 / SLES15 / openSUSE 15 Security Update : ruby2.5 (SUSE-SU-2025:1369-1)	Nessus	SuSE Local Security Checks	2025/4/25	2025/4/25	medium
233968	Ubuntu 20.04 LTS / 22.04 LTS / 24.04 LTS / 24.10 : Ruby vulnerabilities (USN-7418-1)	Nessus	Ubuntu Local Security Checks	2025/4/7	2025/4/7	medium
235165	RHEL 9 : ruby:3.1 (RHSA-2025:4488)	Nessus	Red Hat Local Security Checks	2025/5/6	2025/6/5	high
238215	EulerOS 2.0 SP12 : ruby (EulerOS-SA-2025-1603)	Nessus	Huawei Local Security Checks	2025/6/11	2025/6/11	medium
238407	EulerOS 2.0 SP11 : ruby (EulerOS-SA-2025-1677)	Nessus	Huawei Local Security Checks	2025/6/12	2025/6/12	medium
232149	Linux Distros Unpatched Vulnerability : CVE-2025-27220	Nessus	Misc.	2025/3/6	2025/3/6	high
235375	Oracle Linux 9 : ruby:3.1 (ELSA-2025-4488)	Nessus	Oracle Linux Local Security Checks	2025/5/6	2025/5/6	high
235742	EulerOS 2.0 SP10 : ruby (EulerOS-SA-2025-1538)	Nessus	Huawei Local Security Checks	2025/5/12	2025/5/12	medium
233319	Photon OS 5.0: Ruby PHSA-2025-5.0-0488	Nessus	PhotonOS Local Security Checks	2025/3/25	2025/3/25	medium

检测

插件搜索

medium

high

medium

high

high

high

medium

medium

high

medium

medium

high

high

medium

medium