CVE-2013-0334
Description
Bundler before 1.7, when multiple top-level source lines are used, allows remote attackers to install arbitrary gems by creating a gem with the same name as another gem in a different source.
Risk Information
Base Score
9.8
MODERATE
Vector
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
EPSS Score
Exploitation Probability
0.498
Associated Vulnerability
| Vulnerability | OS Platform |
|---|---|
| Vulnerabilities CVE-2013-0334 are fixed in Ruby-bundler 1.7.0 | Windows |
| (RHSA-2015:2180) Moderate: rubygem-bundler and rubygem-thor security, bug fix, and enhancement update rubygem-bundler-1.7.8-3.el7.noarch.rpm | Linux |
| (RHSA-2015:2180) Moderate: rubygem-bundler and rubygem-thor security, bug fix, and enhancement update rubygem-bundler-doc-1.7.8-3.el7.noarch.rpm | Linux |
| (RHSA-2015:2180) Moderate: rubygem-bundler and rubygem-thor security, bug fix, and enhancement update rubygem-thor-0.19.1-1.el7.noarch.rpm | Linux |
| (RHSA-2015:2180) Moderate: rubygem-bundler and rubygem-thor security, bug fix, and enhancement update rubygem-thor-doc-0.19.1-1.el7.noarch.rpm | Linux |
| (CESA-2015:2180) Moderate: rubygem-bundler and rubygem-thor security, bug fix, and enhancement update rubygem-bundler-1.7.8-3.el7.noarch.rpm | Linux |
| (CESA-2015:2180) Moderate: rubygem-bundler and rubygem-thor security, bug fix, and enhancement update rubygem-bundler-doc-1.7.8-3.el7.noarch.rpm | Linux |
| (CESA-2015:2180) Moderate: rubygem-bundler and rubygem-thor security, bug fix, and enhancement update rubygem-thor-0.19.1-1.el7.noarch.rpm | Linux |
| (CESA-2015:2180) Moderate: rubygem-bundler and rubygem-thor security, bug fix, and enhancement update rubygem-thor-doc-0.19.1-1.el7.noarch.rpm | Linux |
| Vulnerabilities CVE-2013-0334 are fixed in Ruby-bundler for Linux 1.7.0 | Linux |
Patch Details
No records foundReferences
https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234