UpHeron
All vulnerabilities

Servers and applications

CVE-2015-7551

The Fiddle::Handle implementation in ext/fiddle/handle.c in Ruby before 2.0.0-p648, 2.1 before 2.1.8, and 2.2 before 2.2.4, as distributed in Apple OS X before 10.11.4 and other products, mishandles tainting, which allows context-dependent attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted string, related to the DL module and the libffi library.…

Severity
High 8.4
Published
24 Mar 2016
Last changed
17 Jun 2026
Added to UpHeron
21 Oct 2026
Sources
NVD

Affected software

SoftwareAffected versions
RubyServers and applications · cpe:a:ruby-lang:ruby
  • Version 2.2.3
  • Version 2.2.2
  • Version 2.2.1
  • Version 2.2.0
All 13 release lines
  • Every version up to 2.0.0-p647
  • Version 2.1.0
  • Version 2.1.1
  • Version 2.1.2
  • Version 2.1.3
  • Version 2.1.4
  • Version 2.1.5
  • Version 2.1.6
  • Version 2.1.7
  • Version 2.2.0
  • Version 2.2.1
  • Version 2.2.2
  • Version 2.2.3

References

  • NVD https://nvd.nist.gov/vuln/detail/CVE-2015-7551
  • CVE.org https://www.cve.org/CVERecord?id=CVE-2015-7551