[Forgot Password]
Login  Register Subscribe

30479

 
 

423868

 
 

250038

 
 

909

 
 

195843

 
 

282

Paid content will be excluded from the download.


Download | Alert*
OVAL

ALAS2-2019-1143 --- ruby

ID: oval:org.secpod.oval:def:1700132Date: (C)2019-03-29   (M)2023-12-20
Class: PATCHFamily: unix




An issue was discovered in the OpenSSL library in Ruby. When two OpenSSL::X509::Name objects are compared using ==, depending on the ordering, non-equal objects may return true. When the first argument is one character longer than the second, or the second argument contains a character that is one less than a character in the same position of the first argument, the result of == will be true. This could be leveraged to create an illegitimate certificate that may be accepted as legitimate and then used in signing or encryption operations.

Platform:
Amazon Linux 2
Product:
ruby
Reference:
ALAS2-2019-1143
CVE-2018-16395
CVE    1
CVE-2018-16395
CPE    2
cpe:/a:ruby:ruby
cpe:/o:amazon:linux:2

© SecPod Technologies