CVE-2017-17718

RubyGems/net-ldap CVE-2017-17718: medium 5.9, EPSS 1.35%

net-ldap Improper Certificate Validation vulnerability

Action: Upgrade net-ldap to 0.16.0 or later.

bundle update net-ldap

Affected

Fixed versions

Sources

• osv: GHSA-m7p8-9w66-9frm
• https://nvd.nist.gov/vuln/detail/CVE-2017-17718
• https://github.com/ruby-ldap/ruby-net-ldap/issues/258
• https://github.com/ruby-ldap/ruby-net-ldap/pull/279
• https://github.com/ruby-ldap/ruby-net-ldap
• http://openwall.com/lists/oss-security/2017/12/17/10

CVE-2017-17718 · published 2018-01-06T01:11:34Z · modified 2023-11-08T03:59:14.647519Z · JSON