The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2020:2462 advisory.

    The pcs packages provide a command-line configuration system for the Pacemaker and Corosync utilities.

    Security Fix(es):

    * rubygem-json: Unsafe Object Creation Vulnerability in JSON (CVE-2020-10663)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

    Bug Fix(es):

    * pcs status on remotes is not working on rhel8.2 any longer (BZ#1832914)

    * pcs cluster stop --all throws errors and doesn't seem to honor the request-timeout option (BZ#1838084)

    * [GUI] Colocation constraint can't be added (BZ#1840158)

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

According to the versions of the ruby packages installed, the EulerOS Virtualization for ARM 64 installation on the remote host is affected by the following vulnerabilities :

  - An issue was discovered in Ruby 2.5.x through 2.5.7,     2.6.x through 2.6.5, and 2.7.0. If a victim calls     BasicSocket#read_nonblock(requested_size, buffer,     exception: false), the method resizes the buffer to fit     the requested size, but no data is copied. Thus, the     buffer string provides the previous value of the heap.
    This may expose possibly sensitive data from the     interpreter.(CVE-2020-10933)

  - The JSON gem through 2.2.0 for Ruby, as used in Ruby     2.4 through 2.4.9, 2.5 through 2.5.7, and 2.6 through     2.6.5, has an Unsafe Object Creation Vulnerability.
    This is quite similar to CVE-2013-0269, but does not     rely on poor garbage-collection behavior within Ruby.
    Specifically, use of JSON parsing methods can lead to     creation of a malicious object within the interpreter,     with adverse effects that are     application-dependent.(CVE-2020-10663)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

According to the versions of the ruby packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities :

  - An issue was discovered in Oniguruma 6.x before     6.9.4_rc2. In the function fetch_interval_quantifier     (formerly known as fetch_range_quantifier) in     regparse.c, PFETCH is called without checking PEND.
    This leads to a heap-based buffer     over-read.(CVE-2019-19204)

  - Ruby through 2.4.7, 2.5.x through 2.5.6, and 2.6.x     through 2.6.4 allows code injection if the first     argument (aka the 'command' argument) to Shell#[] or     Shell#test in lib/shell.rb is untrusted data. An     attacker can exploit this to call an arbitrary Ruby     method.(CVE-2019-16255)

  - Ruby through 2.4.7, 2.5.x through 2.5.6, and 2.6.x     through 2.6.4 mishandles path checking within     File.fnmatch functions.(CVE-2019-15845)

  - WEBrick::HTTPAuth::DigestAuth in Ruby through 2.4.7,     2.5.x through 2.5.6, and 2.6.x through 2.6.4 has a     regular expression Denial of Service cause by     looping/backtracking. A victim must expose a WEBrick     server that uses DigestAuth to the Internet or a     untrusted network.(CVE-2019-16201)

  - The JSON gem through 2.2.0 for Ruby, as used in Ruby     2.4 through 2.4.9, 2.5 through 2.5.7, and 2.6 through     2.6.5, has an Unsafe Object Creation Vulnerability.
    This is quite similar to CVE-2013-0269, but does not     rely on poor garbage-collection behavior within Ruby.
    Specifically, use of JSON parsing methods can lead to     creation of a malicious object within the interpreter,     with adverse effects that are     application-dependent.(CVE-2020-10663)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

Several vulnerabilities have been discovered in the interpreter for the Ruby language.

  - CVE-2020-10663     Jeremy Evans reported an unsafe object creation     vulnerability in the json gem bundled with Ruby. When     parsing certain JSON documents, the json gem can be     coerced into creating arbitrary objects in the target     system.

  - CVE-2020-10933     Samuel Williams reported a flaw in the socket library     which may lead to exposure of possibly sensitive data     from the interpreter.

The version of ruby20 installed on the remote host is prior to 2.0.0.648-1.33. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS-2020-1416 advisory.

    An issue was discovered in Ruby before 2.3.8, 2.4.x before 2.4.5, 2.5.x before 2.5.2, and 2.6.x before     2.6.0-preview3. It does not taint strings that result from unpacking tainted strings with some formats.
    (CVE-2018-16396)

    The JSON gem through 2.2.0 for Ruby, as used in Ruby 2.4 through 2.4.9, 2.5 through 2.5.7, and 2.6 through     2.6.5, has an Unsafe Object Creation Vulnerability. This is quite similar toCVE-2013-0269, but does not     rely on poor garbage-collection behavior within Ruby. Specifically, use of JSON parsing methods can lead     to creation of a malicious object within the interpreter, with adverse effects that are application-     dependent. (CVE-2020-10663)

Tenable has extracted the preceding description block directly from the tested product security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

It is, therefore, affected by a vulnerability as referenced in the ALAS-2020-1423 advisory.

    The JSON gem through 2.2.0 for Ruby, as used in Ruby 2.4 through 2.4.9, 2.5 through 2.5.7, and 2.6 through     2.6.5, has an Unsafe Object Creation Vulnerability. This is quite similar toCVE-2013-0269, but does not     rely on poor garbage-collection behavior within Ruby. Specifically, use of JSON parsing methods can lead     to creation of a malicious object within the interpreter, with adverse effects that are application-     dependent. (CVE-2020-10663)

Tenable has extracted the preceding description block directly from the tested product security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Ubuntu 16.04 LTS / 18.04 LTS / 20.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-4882-1 advisory.

    It was discovered that the Ruby JSON gem incorrectly handled certain JSON files. If a user or automated     system were tricked into parsing a specially crafted JSON file, a remote attacker could use this issue to     execute arbitrary code. This issue only affected Ubuntu 16.04 LTS and Ubuntu 18.04 LTS. (CVE-2020-10663)

    It was discovered that Ruby incorrectly handled certain socket memory operations. A remote attacker could     possibly use this issue to obtain sensitive information. This issue only affected Ubuntu 18.04 LTS and     Ubuntu 20.04 LTS. (CVE-2020-10933)

    It was discovered that Ruby incorrectly handled certain transfer-encoding headers when using Webrick. A     remote attacker could possibly use this issue to bypass a reverse proxy. (CVE-2020-25613)

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of ruby installed on the remote host is prior to 2.0.0.648-36. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2021-1641 advisory.

    The JSON gem through 2.2.0 for Ruby, as used in Ruby 2.4 through 2.4.9, 2.5 through 2.5.7, and 2.6 through     2.6.5, has an Unsafe Object Creation Vulnerability. This is quite similar to CVE-2013-0269, but does not     rely on poor garbage-collection behavior within Ruby. Specifically, use of JSON parsing methods can lead     to creation of a malicious object within the interpreter, with adverse effects that are application-     dependent. (CVE-2020-10663)

    An issue was discovered in Ruby through 2.5.8, 2.6.x through 2.6.6, and 2.7.x through 2.7.1. WEBrick, a     simple HTTP server bundled with Ruby, had not checked the transfer-encoding header value rigorously. An     attacker may potentially exploit this issue to bypass a reverse proxy (which also has a poor header     check), which may lead to an HTTP Request Smuggling attack. (CVE-2020-25613)

Tenable has extracted the preceding description block directly from the tested product security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CESA-2021:2587 advisory.

  - ruby: NUL injection vulnerability of File.fnmatch and File.fnmatch? (CVE-2019-15845)

  - ruby: Regular expression denial of service vulnerability of WEBrick's Digest authentication     (CVE-2019-16201)

  - ruby: HTTP response splitting in WEBrick (CVE-2019-16254)

  - ruby: Code injection via command argument of Shell#test / Shell#[] (CVE-2019-16255)

  - rubygem-json: Unsafe object creation vulnerability in JSON (CVE-2020-10663)

  - ruby: BasicSocket#read_nonblock method leads to information disclosure (CVE-2020-10933)

  - ruby: Potential HTTP request smuggling in WEBrick (CVE-2020-25613)

  - ruby: XML round-trip vulnerability in REXML (CVE-2021-28965)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Oracle Linux 8 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2020-5724 advisory.

    [0.10.4-6.0.1.el8_2.1]
    - Replace HAM-logo.png with a generic one

    [0.10.4-6.el8_2.1]
    - Fixed running pcs status on remote nodes
    - Fixed ruby daemon closing connection after 30s
    - Fixed inability to create colocation constraint in webUI
    - Updated bundled rubygem-json
    - Resolves: rhbz#1832914 rhbz#1838084 rhbz#1840154 rhbz#1840158

    [0.10.4-6]
    - Fixed communication between python and ruby daemons
    - Resolves: rhbz#1783106

    [0.10.4-5]
    - Fixed link to sbd man page from  doc
    - Fixed safe-disabling clones, groups, bundles
    - Fixed sinatra wrapper performance issue
    - Fixed detecting fence history support
    - Fixed cookie options
    - Updated hint for 'resource create ... master'
    - Updated gating tests execution, smoke tests run from upstream sources
    - Resolves: rhbz#1750427 rhbz#1781303 rhbz#1783106 rhbz#1793574

    [0.10.4-4]
    - Fix testsuite for pacemaker-2.0.3-4
    - Resolves: rhbz#1792946

    [0.10.4-3]
    - Added basic resource views in new webUI

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of ruby installed on the remote host is prior to 2.6.6-125. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2RUBY2.6-2023-007 advisory.

    jQuery before 1.9.0 is vulnerable to Cross-site Scripting (XSS) attacks. The jQuery(strInput) function     does not differentiate selectors from HTML in a reliable fashion. In vulnerable versions, jQuery     determined whether the input was HTML by looking for the '<' character anywhere in the string, giving     attackers more flexibility when attempting to construct a malicious payload. In fixed versions, jQuery     only deems the input to be HTML if it explicitly starts with the '<' character, limiting exploitability     only to attackers who can control the beginning of a string, which is far less common. (CVE-2012-6708)

    jQuery before 3.0.0 is vulnerable to Cross-site Scripting (XSS) attacks when a cross-domain Ajax request     is performed without the dataType option, causing text/javascript responses to be executed.
    (CVE-2015-9251)

    A flaw was discovered in Ruby in the way certain functions handled strings containing NULL bytes.
    Specifically, the built-in methods File.fnmatch and its alias File.fnmatch? did not properly handle path     patterns containing the NULL byte. A remote attacker could exploit this flaw to make a Ruby script access     unexpected files and to bypass intended file system access restrictions. (CVE-2019-15845)

    WEBrick::HTTPAuth::DigestAuth in Ruby through 2.4.7, 2.5.x through 2.5.6, and 2.6.x through 2.6.4 has a     regular expression Denial of Service cause by looping/backtracking. A victim must expose a WEBrick server     that uses DigestAuth to the Internet or a untrusted network. (CVE-2019-16201)

    Ruby through 2.4.7, 2.5.x through 2.5.6, and 2.6.x through 2.6.4 allows HTTP Response Splitting. If a     program using WEBrick inserts untrusted input into the response header, an attacker can exploit it to     insert a newline character to split a header, and inject malicious content to deceive clients. NOTE: this     issue exists because of an incomplete fix for CVE-2017-17742, which addressed the CRLF vector, but did not     address an isolated CR or an isolated LF. (CVE-2019-16254)

    Ruby through 2.4.7, 2.5.x through 2.5.6, and 2.6.x through 2.6.4 allows code injection if the first     argument (aka the command argument) to Shell#[] or Shell#test in lib/shell.rb is untrusted data. An     attacker can exploit this to call an arbitrary Ruby method. (CVE-2019-16255)

    A flaw was found in rubygem-json. While parsing certain JSON documents, the json gem (including the one     bundled with Ruby) can be coerced into creating arbitrary objects in the target system. This is the same     issue as CVE-2013-0269. (CVE-2020-10663)

    An issue was discovered in Ruby 2.5.x through 2.5.7, 2.6.x through 2.6.5, and 2.7.0. If a victim calls     BasicSocket#read_nonblock(requested_size, buffer, exception: false), the method resizes the buffer to fit     the requested size, but no data is copied. Thus, the buffer string provides the previous value of the     heap. This may expose possibly sensitive data from the interpreter. (CVE-2020-10933)

Tenable has extracted the preceding description block directly from the tested product security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote MiracleLinux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2021-1762:01 advisory.

    * ruby: NUL injection vulnerability of File.fnmatch and File.fnmatch?     (CVE-2019-15845)
      * ruby: Regular expression denial of service vulnerability of WEBrick's Digest     authentication (CVE-2019-16201)
      * ruby: Code injection via command argument of Shell#test / Shell#[]     (CVE-2019-16255)
      * rubygem-json: Unsafe object creation vulnerability in JSON (CVE-2020-10663)
      * ruby: BasicSocket#read_nonblock method leads to information disclosure     (CVE-2020-10933)
      * ruby: Potential HTTP request smuggling in WEBrick (CVE-2020-25613)
      * ruby: XML round-trip vulnerability in REXML (CVE-2021-28965)
      * ruby: HTTP response splitting in WEBrick (CVE-2019-16254)

Tenable has extracted the preceding description block directly from the MiracleLinux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote MiracleLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2021-2402:01 advisory.

    * rubygem-bundler: Insecure permissions on directory in /tmp/ allows for execution of malicious code     (CVE-2019-3881)
      * ruby: NUL injection vulnerability of File.fnmatch and File.fnmatch? (CVE-2019-15845)
      * ruby: Regular expression denial of service vulnerability of WEBrick's Digest authentication     (CVE-2019-16201)
      * ruby: Code injection via command argument of Shell#test / Shell#[] (CVE-2019-16255)
      * rubygem-json: Unsafe object creation vulnerability in JSON (CVE-2020-10663)
      * ruby: BasicSocket#read_nonblock method leads to information disclosure (CVE-2020-10933)
      * ruby: Potential HTTP request smuggling in WEBrick (CVE-2020-25613)
      * ruby: XML round-trip vulnerability in REXML (CVE-2021-28965)
      * ruby: HTTP response splitting in WEBrick (CVE-2019-16254)

Tenable has extracted the preceding description block directly from the MiracleLinux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
137310	RHEL 8 : pcs (RHSA-2020:2462)	Nessus	Red Hat Local Security Checks	2020/6/10	2024/11/7	high
137798	EulerOS Virtualization for ARM 64 3.0.6.0 : ruby (EulerOS-SA-2020-1691)	Nessus	Huawei Local Security Checks	2020/6/25	2024/3/5	high
137936	EulerOS Virtualization 3.0.6.0 : ruby (EulerOS-SA-2020-1717)	Nessus	Huawei Local Security Checks	2020/7/1	2024/3/5	high
138227	Debian DSA-4721-1 : ruby2.5 - security update	Nessus	Debian Local Security Checks	2020/7/9	2024/3/1	high
139550	Amazon Linux AMI : ruby20 (ALAS-2020-1416)	Nessus	Amazon Linux Local Security Checks	2020/8/13	2025/2/21	high
140093	Amazon Linux AMI : rubygem-json (ALAS-2020-1423)	Nessus	Amazon Linux Local Security Checks	2020/8/31	2024/12/11	high
147970	Ubuntu 16.04 LTS / 18.04 LTS / 20.04 LTS : Ruby vulnerabilities (USN-4882-1)	Nessus	Ubuntu Local Security Checks	2021/3/23	2025/9/3	high
149871	Amazon Linux 2 : ruby (ALAS-2021-1641)	Nessus	Amazon Linux Local Security Checks	2021/5/24	2024/12/11	high
151147	CentOS 8 : ruby:2.5 (CESA-2021:2587)	Nessus	CentOS Local Security Checks	2021/6/29	2023/12/12	high
180944	Oracle Linux 8 : pcs (ELSA-2020-5724)	Nessus	Oracle Linux Local Security Checks	2023/9/7	2024/10/23	high
182068	Amazon Linux 2 : ruby (ALASRUBY2.6-2023-007)	Nessus	Amazon Linux Local Security Checks	2023/9/27	2024/12/11	high
294582	MiracleLinux 7 : rh-ruby25-ruby-2.5.9-9.el7 (AXSA:2021-1762:01)	Nessus	Miracle Linux Local Security Checks	2026/1/20	2026/1/20	high
294606	MiracleLinux 8 : ruby:2.6 (AXSA:2021-2402:01)	Nessus	Miracle Linux Local Security Checks	2026/1/20	2026/1/20	high

检测

插件搜索

high

high

high

high

high

high

high

high

high

high

high

high

high