CVE-2017-17718

EUVD-2018-0161
The Net::LDAP (aka net-ldap) gem before 0.16.0 for Ruby has Missing SSL Certificate Validation.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
5.9 MEDIUM
NETWORK
HIGH
NONE
CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N
Base Score
CVSS 3.x
EPSS Score
Percentile: 38%
Affected Products (NVD)
VendorProductVersion
net-ldap_projectnet-ldap
0.0.5
net-ldap_projectnet-ldap
0.1.0
net-ldap_projectnet-ldap
0.1.1
net-ldap_projectnet-ldap
0.2
net-ldap_projectnet-ldap
0.2.1
net-ldap_projectnet-ldap
0.2.2
net-ldap_projectnet-ldap
0.3.0
net-ldap_projectnet-ldap
0.3.1
net-ldap_projectnet-ldap
0.5.1
net-ldap_projectnet-ldap
0.6.0
net-ldap_projectnet-ldap
0.6.1
net-ldap_projectnet-ldap
0.7.0
net-ldap_projectnet-ldap
0.8.0
net-ldap_projectnet-ldap
0.9.0
net-ldap_projectnet-ldap
0.10.0
net-ldap_projectnet-ldap
0.10.1
net-ldap_projectnet-ldap
0.11
net-ldap_projectnet-ldap
0.12.0
net-ldap_projectnet-ldap
0.12.1
net-ldap_projectnet-ldap
0.13.0
net-ldap_projectnet-ldap
0.14.0
net-ldap_projectnet-ldap
0.15.0
𝑥
= Vulnerable software versions
Debian logo
Debian Releases
Debian Product
Codename
ruby-net-ldap
bookworm
0.17.0-1
fixed
bullseye
0.16.1-1
fixed
jessie
not-affected
sid
0.17.1-2
fixed
stretch
no-dsa
trixie
0.17.1-2
fixed
wheezy
ignored
Ubuntu logo
Ubuntu Releases
Ubuntu Product
Codename
ruby-net-ldap
artful
ignored
bionic
not-affected
cosmic
not-affected
trusty
dne
xenial
not-affected
zesty
ignored