MidnightBSD

Advisories for bundler

CVE-2013-0334 MEDIUM

Bundler before 1.7, when multiple top-level source lines are used, allows remote attackers to install arbitrary gems by creating a gem with the same name as another gem in a different source.

CVSS 2.0

Severity: MEDIUM

Problem Type: CWE-20,

Products Affected

Vendor Product Version
opensuse opensuse 13.1
opensuse opensuse 13.2
bundler bundler *
fedoraproject fedora 19
fedoraproject fedora 20
fedoraproject fedora 21
CVE-2016-7954 HIGH

Bundler 1.x might allow remote attackers to inject arbitrary Ruby code into an application by leveraging a gem name collision on a secondary source. NOTE: this might overlap CVE-2013-0334.

CVSS 2.0

Severity: HIGH

Problem Type: CWE-94,

Products Affected

Vendor Product Version
bundler bundler 1.3.0
bundler bundler 1.6.5
bundler bundler 1.7.11
bundler bundler 1.0.9
bundler bundler 1.8.6
bundler bundler 1.6.2
bundler bundler 1.9.5
bundler bundler 1.3.5
bundler bundler 1.12.4
bundler bundler 1.8.9
bundler bundler 1.9.8
bundler bundler 1.2.0
bundler bundler 1.7.1
bundler bundler 1.9.4
bundler bundler 1.7.9
bundler bundler 1.3.2
bundler bundler 1.7.6
bundler bundler 1.0.8
bundler bundler 1.7.4
bundler bundler 1.8.2
bundler bundler 1.11.0
bundler bundler 1.11.1
bundler bundler 1.13.4
bundler bundler 1.7.5
bundler bundler 1.13.6
bundler bundler 1.0.5
bundler bundler 1.7.10
bundler bundler 1.10.1
bundler bundler 1.2.1
bundler bundler 1.8.1
bundler bundler 1.10.4
bundler bundler 1.8.3
bundler bundler 1.0.2
bundler bundler 1.1.2
bundler bundler 1.10.6
bundler bundler 1.0.13
bundler bundler 1.9.6
bundler bundler 1.0.16
bundler bundler 1.0.4
bundler bundler 1.8.4
bundler bundler 1.9.1
bundler bundler 1.3.6
bundler bundler 1.2.3
bundler bundler 1.9.0
bundler bundler 1.8.0
bundler bundler 1.9.3
bundler bundler 1.0.14
bundler bundler 1.10.2
bundler bundler 1.9.2
bundler bundler 1.11.2
bundler bundler 1.9.9
bundler bundler 1.0.17
bundler bundler 1.0.20
bundler bundler 1.12.1
bundler bundler 1.13.0
bundler bundler 1.1.4
bundler bundler 1.12.6
bundler bundler 1.8.7
bundler bundler 1.6.4
bundler bundler 1.4.0
bundler bundler 1.3.4
bundler bundler 1.0.1
bundler bundler 1.6.3
bundler bundler 1.0.18
bundler bundler 1.6.0
bundler bundler 1.12.5
bundler bundler 1.1
bundler bundler 1.1.5
bundler bundler 1.13.5
bundler bundler 1.12.2
bundler bundler 1.13.3
bundler bundler 1.7.13
bundler bundler 1.5.1
bundler bundler 1.3.3
bundler bundler 1.2.5
bundler bundler 1.6.6
bundler bundler 1.0.7
bundler bundler 1.1.1
bundler bundler 1.0.11
bundler bundler 1.7.12
bundler bundler 1.7.14
bundler bundler 1.5.0
bundler bundler 1.0.0
bundler bundler 1.13.1
bundler bundler 1.10.5
bundler bundler 1.9.10
bundler bundler 1.2.2
bundler bundler 1.7.8
bundler bundler 1.7.15
bundler bundler 1.8.5
bundler bundler 1.1.3
bundler bundler 1.12.3
bundler bundler 1.6.1
bundler bundler 1.10.0
bundler bundler 1.7.0
bundler bundler 1.3.1
bundler bundler 1.7.7
bundler bundler 1.0.19
bundler bundler 1.13.2
bundler bundler 1.0.10
bundler bundler 1.2.4
bundler bundler 1.0.15
bundler bundler 1.7.2
bundler bundler 1.5.2
bundler bundler 1.0.6
bundler bundler 1.0.3
bundler bundler 1.9.7
bundler bundler 1.0.21
bundler bundler 1.5.3
bundler bundler 1.8.8
bundler bundler 1.7.3
bundler bundler 1.1.0
bundler bundler 1.6.7
bundler bundler 1.0.12
bundler bundler 1.12.0
bundler bundler 1.10.3