Wind River Support Network

HomeDefectsLIN7-8257
Fixed

LIN7-8257 : Security Advisory - ruby - CVE-2015-9096

Created: Jun 14, 2017    Updated: Sep 8, 2018
Resolved Date: Jul 3, 2017
Found In Version: 7.0.0.25
Fix Version: 7.0.0.26
Severity: Standard
Applicable for: Wind River Linux 7
Component/s: Userspace

Description

Net::SMTP in Ruby before 2.4.0 is vulnerable to SMTP command injection via CRLF sequences in a RCPT TO or MAIL FROM command, as demonstrated by CRLF sequences immediately before and after a DATA substring.

https://nvd.nist.gov/vuln/detail/CVE-2015-9096

Other Downloads


CVEs


Live chat
Online