CVE-2017-17718

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2017-17718
Import Source
https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2017-17718.json
JSON Data
https://api.test.osv.dev/v1/vulns/CVE-2017-17718
Aliases
Downstream
Published
2017-12-17T21:29:00.267Z
Modified
2026-05-28T04:03:47.395255886Z
Severity
  • 5.9 (Medium) CVSS_V3 - CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N CVSS Calculator
Summary
[none]
Details

The Net::LDAP (aka net-ldap) gem before 0.16.0 for Ruby has Missing SSL Certificate Validation.

Database specific 
{
    "unresolved_ranges": [
        {
            "extracted_events": [
                {
                    "last_affected": "0.0.5"
                },
                {
                    "last_affected": "0.1.0"
                },
                {
                    "last_affected": "0.1.1"
                },
                {
                    "last_affected": "0.3.0"
                },
                {
                    "last_affected": "0.3.1"
                }
            ],
            "cpes": [
                "cpe:2.3:a:net-ldap_project:net-ldap:0.0.5:*:*:*:*:ruby:*:*",
                "cpe:2.3:a:net-ldap_project:net-ldap:0.1.0:*:*:*:*:ruby:*:*",
                "cpe:2.3:a:net-ldap_project:net-ldap:0.1.1:*:*:*:*:ruby:*:*",
                "cpe:2.3:a:net-ldap_project:net-ldap:0.3.0:*:*:*:*:ruby:*:*",
                "cpe:2.3:a:net-ldap_project:net-ldap:0.3.1:*:*:*:*:ruby:*:*"
            ],
            "vendor_product": "net-ldap_project:net-ldap",
            "source": "CPE_STRING"
        }
    ]
}
References

Affected packages

Git / github.com/ruby-ldap/ruby-net-ldap

Affected ranges

Type
GIT
Repo
https://github.com/ruby-ldap/ruby-net-ldap
Events
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
a046753c9fdd622be3bdd25ed244eb7cc7f1543c
Last affected
d6ad919717a05b98b1c2f32f7292fe19381a9a82
Last affected
028cdeebbd5ff8262ddcaa12811253536a6edcd3
Last affected
51a7ea4f23432b808dec207d106173ba8d124233
Last affected
f765a75fd07f37363a4c9b80f5bb828956746f5f
Last affected
d4a73558ef847d6e0e19f5697f3e1003d1758d15
Last affected
02804d7c18050d7397beaa7c43d65b56bbf30521
Last affected
449370b5cfeae01a1d9a425fa0e649462ae83840
Last affected
e37ce91b6e4422bce3fd1092119ebe42a3c986ec
Last affected
77387bfc6a27b1b3b854942d16c09f5c568509ee
Last affected
fd2d1ed62df1e65a50627b429bce7a49cd623b04
Last affected
c326a4d7623974402979a3aa5ea13299bf4c4590
Last affected
2f053dd12264da42d90144341b4c0f0d8a372349
Last affected
9f29e158d310dc1c9a7084a87b7d57d4aa47683c
Last affected
67d8311aed6de49f4f2007e67b5e01ac7787c88e
Last affected
3bf849d415a691b5632f2e20cc637e377b15b2ad
Last affected
85e4b92c809fa96f3efb06b5b87c004f5390cc18
Database specific 
{
    "extracted_events": [
        {
            "introduced": "0"
        },
        {
            "last_affected": "0.2"
        },
        {
            "last_affected": "0.2.1"
        },
        {
            "last_affected": "0.2.2"
        },
        {
            "last_affected": "0.5.1"
        },
        {
            "last_affected": "0.6.0"
        },
        {
            "last_affected": "0.6.1"
        },
        {
            "last_affected": "0.7.0"
        },
        {
            "last_affected": "0.8.0"
        },
        {
            "last_affected": "0.9.0"
        },
        {
            "last_affected": "0.10.0"
        },
        {
            "last_affected": "0.10.1"
        },
        {
            "last_affected": "0.11"
        },
        {
            "last_affected": "0.12.0"
        },
        {
            "last_affected": "0.12.1"
        },
        {
            "last_affected": "0.13.0"
        },
        {
            "last_affected": "0.14.0"
        },
        {
            "last_affected": "0.15.0"
        }
    ],
    "cpe": [
        "cpe:2.3:a:net-ldap_project:net-ldap:0.2:*:*:*:*:ruby:*:*",
        "cpe:2.3:a:net-ldap_project:net-ldap:0.2.1:*:*:*:*:ruby:*:*",
        "cpe:2.3:a:net-ldap_project:net-ldap:0.2.2:*:*:*:*:ruby:*:*",
        "cpe:2.3:a:net-ldap_project:net-ldap:0.5.1:*:*:*:*:ruby:*:*",
        "cpe:2.3:a:net-ldap_project:net-ldap:0.6.0:*:*:*:*:ruby:*:*",
        "cpe:2.3:a:net-ldap_project:net-ldap:0.6.1:*:*:*:*:ruby:*:*",
        "cpe:2.3:a:net-ldap_project:net-ldap:0.7.0:*:*:*:*:ruby:*:*",
        "cpe:2.3:a:net-ldap_project:net-ldap:0.8.0:*:*:*:*:ruby:*:*",
        "cpe:2.3:a:net-ldap_project:net-ldap:0.9.0:*:*:*:*:ruby:*:*",
        "cpe:2.3:a:net-ldap_project:net-ldap:0.10.0:*:*:*:*:ruby:*:*",
        "cpe:2.3:a:net-ldap_project:net-ldap:0.10.1:*:*:*:*:ruby:*:*",
        "cpe:2.3:a:net-ldap_project:net-ldap:0.11:*:*:*:*:ruby:*:*",
        "cpe:2.3:a:net-ldap_project:net-ldap:0.12.0:*:*:*:*:ruby:*:*",
        "cpe:2.3:a:net-ldap_project:net-ldap:0.12.1:*:*:*:*:ruby:*:*",
        "cpe:2.3:a:net-ldap_project:net-ldap:0.13.0:*:*:*:*:ruby:*:*",
        "cpe:2.3:a:net-ldap_project:net-ldap:0.14.0:*:*:*:*:ruby:*:*",
        "cpe:2.3:a:net-ldap_project:net-ldap:0.15.0:*:*:*:*:ruby:*:*"
    ],
    "source": "CPE_STRING"
}

Affected versions

v0.*
v0.10.0
v0.10.1
v0.11
v0.12.0
v0.12.1
v0.13.0
v0.14.0
v0.15.0
v0.2
v0.2.1
v0.2.2
v0.5.0
v0.5.1
v0.6.0
v0.6.1
v0.7.0
v0.8.0
v0.9.0

Database specific

source 
"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2017-17718.json"