sonatype-2022-4124 Security Details

CVE ID

sonatype-2022-4124

CWE

N/A

CVE Description

jruby-openssl - Buffer Overflow

Published

Jul 21, 2022

CVSS Score & Severity

7.3High

CVSS Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L

EPSS Score

0%

Malware

malware

KEV Status

Not in KEV Catalog: No known exploits

Vulnerable Methods

org/jruby/ext/openssl/SSLSocket.doHandshake(ZZ)Lorg/jruby/runtime/builtin/IRubyObject;

JVM

org/jruby/ext/openssl/SSLSocket.write(Ljava/nio/ByteBuffer;Z)I

JVMVulnerable params: 0

Affected Ecosystems

affected

Source

Sonatype

References

GitHub · PR #263PROJECT