UpHeron
All vulnerabilities

Servers and applications

CVE-2009-5147

DL::dlopen in Ruby 1.8, 1.9.0, 1.9.2, 1.9.3, 2.0.0 before patchlevel 648, and 2.1 before 2.1.8 opens libraries with tainted names.

Severity
High 7.3
Published
29 Mar 2017
Last changed
16 Jun 2026
Added to UpHeron
21 Oct 2026
Sources
NVD

Affected software

SoftwareAffected versions
RubyServers and applications · cpe:a:ruby-lang:ruby
  • Version 2.1.7
  • Version 2.1.6
  • Version 2.1.5
  • Version 2.1.4
All 23 release lines
  • Version 1.8.0
  • Version 1.9.0
  • Version 1.9.2
  • Version 1.9.3
  • Version 2.0.0
  • Version 2.0.0-p195
  • Version 2.0.0-p247
  • Version 2.0.0-p353
  • Version 2.0.0-p481
  • Version 2.0.0-p576
  • Version 2.0.0-p594
  • Version 2.0.0-p598
  • Version 2.0.0-p643
  • Version 2.0.0-p645
  • Version 2.0.0-p647
  • Version 2.1.0
  • Version 2.1.1
  • Version 2.1.2
  • Version 2.1.3
  • Version 2.1.4
  • Version 2.1.5
  • Version 2.1.6
  • Version 2.1.7

References

  • NVD https://nvd.nist.gov/vuln/detail/CVE-2009-5147
  • CVE.org https://www.cve.org/CVERecord?id=CVE-2009-5147