CVE-2019-15845

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2019-15845
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2019-15845.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2019-15845
Downstream
ALPINE (1)
BELL (1)
CLEANSTART (1)
DLA (1)
DSA (2)
MGASA (1)
openSUSE (1)
RHSA (6)
RLSA (2)
SUSE (2)
UBUNTU (1)
Related
ALSA (2)
openSUSE (1)
SUSE (2)
Published
2019-11-26T17:15:11Z
Modified
2026-07-08T05:54:54Z
Severity
  • 6.5 (Medium) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N CVSS Calculator
Summary
[none]
Details

Ruby through 2.4.7, 2.5.x through 2.5.6, and 2.6.x through 2.6.4 mishandles path checking within File.fnmatch functions.

Database specific 
{
    "unresolved_ranges":  [
        {
            "cpes":  [
                "cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:lts:*:*:*",
                "cpe:2.3:o:canonical:ubuntu_linux:18.04:*:*:*:lts:*:*:*",
                "cpe:2.3:o:canonical:ubuntu_linux:19.04:*:*:*:*:*:*:*",
                "cpe:2.3:o:canonical:ubuntu_linux:19.10:*:*:*:*:*:*:*"
            ],
            "extracted_events":  [
                {
                    "introduced":  "16.04"
                },
                {
                    "last_affected":  "16.04"
                },
                {
                    "introduced":  "18.04"
                },
                {
                    "last_affected":  "18.04"
                },
                {
                    "introduced":  "19.04"
                },
                {
                    "last_affected":  "19.04"
                },
                {
                    "introduced":  "19.10"
                },
                {
                    "last_affected":  "19.10"
                }
            ],
            "source":  "CPE_STRING",
            "vendor_product":  "canonical:ubuntu_linux"
        }
    ]
}
References

Affected packages

Git / github.com/ruby/ruby

Affected ranges

Type
GIT
Repo
https://github.com/ruby/ruby
Events
Introduced
d4bb726b713658f56e630b6cf817a0155b6f390e
Last Affected
c91478058505cd8cae5160c1056bcde65af5a78b
Introduced
4e0a512972cdcbfcd5279f1a2a81ba342ed75b6e
Last Affected
189a36cfabfc30e785cece0692c802be87ebd9cf
Introduced
c1af7b1e1d408f9796a5f46c9ed36bc5adea4aa2
Last Affected
6315e42c222d5484004494950c7524a85acadb20
Database specific
Show details 
{
    "cpe":  "cpe:2.3:a:ruby-lang:ruby:*:*:*:*:*:*:*:*",
    "extracted_events":  [
        {
            "introduced":  "2.4.0"
        },
        {
            "last_affected":  "2.4.7"
        },
        {
            "introduced":  "2.5.0"
        },
        {
            "last_affected":  "2.5.6"
        },
        {
            "introduced":  "2.6.0"
        },
        {
            "last_affected":  "2.6.4"
        }
    ],
    "source":  "CPE_RANGE"
}

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2019-15845.json"