The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2024-1431 advisory.

    ruby     [3.1.4-142]
    - Upgrade to Ruby 3.1.4.
      Resolves: RHEL-28565
    - Fix HTTP response splitting in CGI.
      Resolves: RHEL-28564
    - Fix ReDos vulnerability in URI.
      Resolves: RHEL-28567       Resolves: RHEL-28576
    - Fix ReDos vulnerability in Time.
      Resolves: RHEL-28566
    - Make RDoc soft dependency in IRB.
      Resolves: RHEL-28569

    rubygem-abrt     [0.4.0-1]
    - Update to abrt 0.4.0.
      Resolves: rhbz#1842476

    rubygem-mysql2     [0.5.3-3]
    - Fix SSL related test failure by backporting Fedora commit <c33b1cf>.
      Related: RHEL-28565

    rubygem-pg     [1.3.2-1]
    - Update to pg 1.3.2 by merging Fedora rawhide branch (commit: 39bbd1b)       Resolves: rhbz#2063772

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Detections

Analytics

Oracle Linux 8 : ruby:3.1 (ELSA-2024-1431)

high Nessus Plugin ID 192389

Version 1.2

Version 1.1

Version 1.0

Version 1.2 Nov 2, 2024, 5:10 AM CVSS metrics ("Cvssv4 score" set to 0.0) CVSSv2 severity (based on None, severity decreased from "High" to "Low") Detection (updated detection logic) Plugin Feed: 202411020510
Version 1.1 Sep 22, 2024, 3:24 AM CVSS metrics ("Cvssv4 score" set to 0.0) CVSSv2 severity (based on None, severity decreased from "High" to "Low") Plugin metadata Plugin Feed: 202409220324
Version 1.0 Mar 21, 2024, 2:00 PM New Plugin Feed: 202403211400