CVE-2016-10193

RubyGems/espeak-ruby CVE-2016-10193: critical 9.8, EPSS 2.45%

espeak-ruby allows arbitrary command execution

Action: Upgrade espeak-ruby to 1.0.3 or later.

bundle update espeak-ruby

Affected

Fixed versions

Sources

• osv: GHSA-4jm3-pfpf-h54p
• https://nvd.nist.gov/vuln/detail/CVE-2016-10193
• https://github.com/dejan/espeak-ruby/issues/7
• https://github.com/dejan/espeak-ruby/commit/5251744b13bdd9fb0c72c612226e72d330bac143
• https://github.com/dejan/espeak-ruby
• https://github.com/rubysec/ruby-advisory-db/blob/master/gems/espeak-ruby/CVE-2016-10193.yml
• http://www.openwall.com/lists/oss-security/2017/01/31/14
• http://www.openwall.com/lists/oss-security/2017/02/02/5

CVE-2016-10193 · published 2017-10-24T18:33:35Z · modified 2024-02-16T08:24:31.339878Z · JSON