Total vulnerabilities in the database
ext/openssl/ossl_ocsp.c in Ruby 1.8 and 1.9 does not properly check the return value from the OCSP_basic_verify function, which might allow remote attackers to successfully present an invalid X.509 certificate, possibly involving a revoked certificate.
| Software | From | Fixed in |
|---|---|---|
| ruby-lang / ruby | 1.9 | 1.9.x |
| ruby-lang / ruby | 1.8 | 1.8.x |