CVE-2020-10933

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2020-10933
Import Source
https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2020-10933.json
JSON Data
https://api.test.osv.dev/v1/vulns/CVE-2020-10933
Aliases
Downstream
Related
Published
2020-05-04T15:15:13Z
Modified
2026-05-18T05:52:19Z
Severity
  • 5.3 (Medium) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N CVSS Calculator
Summary
[none]
Details

An issue was discovered in Ruby 2.5.x through 2.5.7, 2.6.x through 2.6.5, and 2.7.0. If a victim calls BasicSocket#read_nonblock(requested_size, buffer, exception: false), the method resizes the buffer to fit the requested size, but no data is copied. Thus, the buffer string provides the previous value of the heap. This may expose possibly sensitive data from the interpreter.

Database specific 
{
    "unresolved_ranges": [
        {
            "cpe": "cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*",
            "extracted_events": [
                {
                    "last_affected": "10.0"
                }
            ],
            "source": "CPE_FIELD"
        },
        {
            "cpe": "cpe:2.3:o:fedoraproject:fedora:31:*:*:*:*:*:*:*",
            "extracted_events": [
                {
                    "last_affected": "31"
                }
            ],
            "source": "CPE_FIELD"
        }
    ]
}
References

Affected packages

Git / github.com/ruby/ruby

Affected ranges

Type
GIT
Repo
https://github.com/ruby/ruby
Events
Introduced
4e0a512972cdcbfcd5279f1a2a81ba342ed75b6e
Last Affected
1c39daae0f9e1c6d34b53c6a214489fe76eaf38b
Introduced
c1af7b1e1d408f9796a5f46c9ed36bc5adea4aa2
Last Affected
37c2cd3fa47c709570e22ec4dac723ca211f423a
Introduced
0 Unknown introduced commit / All previous commits are affected
Last Affected
647ee6f091eafcce70ffb75ddf7e121e192ab217
Database specific
Show details 
{
    "cpe": [
        "cpe:2.3:a:ruby-lang:ruby:*:*:*:*:*:*:*:*",
        "cpe:2.3:a:ruby-lang:ruby:2.7.0:*:*:*:*:*:*:*"
    ],
    "extracted_events": [
        {
            "introduced": "2.5.0"
        },
        {
            "last_affected": "2.5.7"
        },
        {
            "introduced": "2.6.0"
        },
        {
            "last_affected": "2.6.5"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "2.7.0"
        }
    ],
    "source": "CPE_FIELD"
}

Affected versions

Other
v1_0_r2
v2_5_7
v2_6_5
v2_7_0
v2_7_0_preview1
v2_7_0_preview2
v2_7_0_preview3
v2_7_0_rc1
v2_7_0_rc2

Database specific

source 
"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2020-10933.json"