CVE-2018-1000201

RubyGems/ffi CVE-2018-1000201: high 7.8

Ruby-ffi has a DLL loading issue

Action: Upgrade ffi to 1.9.24 or later.

bundle update ffi

Affected

Fixed versions

Sources

• osv: GHSA-2gw2-8q9w-cw8p
• https://nvd.nist.gov/vuln/detail/CVE-2018-1000201
• https://github.com/ffi/ffi/commit/09e0c6076466b4383da7fa4e13f714311109945a
• https://github.com/ffi/ffi/commit/e0fe486df0e117ed67b0282b6ada04b7214ca05c
• https://github.com/ffi/ffi
• https://github.com/ffi/ffi/releases/tag/1.9.24
• https://github.com/rubysec/ruby-advisory-db/blob/master/gems/ffi/CVE-2018-1000201.yml

CVE-2018-1000201 · published 2018-08-31T14:55:43Z · modified 2024-02-16T08:15:21.317366Z · JSON