Read the docs
TI-2013-03753 Aliases CVE-2013-4287GHSA-9j7m-rjqx-48vh

Algorithmic complexity vulnerability in Gem::Version::VERSION_PATTERN in…

Priority LOW 26CWE-310Published · Updated

Key facts

Attack vector
Network
Privileges required
None
User interaction
— Not recorded in CVSS 2.0
Attack complexity
Medium
Impact type
Denial of service
Confidentiality · integrity · availability
None · None · Partial
Fix status
Partial Red Hat: 13 fixed, 5 without a fix

Attack profile from CVSS 2.0 · NVD. Fix status from CNA, GitHub and Red Hat. Impact type from CWE-400.

Summary

Algorithmic complexity vulnerability in Gem::Version::VERSION_PATTERN in lib/rubygems/version.rb in RubyGems before 1.8.23.1, 1.8.24 through 1.8.25, 2.0.x before 2.0.8, and 2.1.x before 2.1.0, as used in Ruby 1.9.0 through 2.0.0p247, allows remote attackers to cause a denial of service (CPU consumption) via a crafted gem version that triggers a large amount of backtracking in a regular expression.

Why it matters now

EPSS 0.03331 88th percentileScored 2026-11-07
Fix Partial rubygems-update (RubyGems): 1.8.23.1, 1.8.26, 2.0.8 +1Red Hat: 5 advisoriesRed Hat: 13 fixed, 5 without a fix

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

VendorProductAffected versionsFixed inStatusSource
——all versions—No fix listedCNA
—rubygems-update (RubyGems)before 1.8.23.11.8.23.1Patch availableGHSA-9j7m-rjqx-48vh
—rubygems-update (RubyGems)1.8.24 to before 1.8.261.8.26Patch availableGHSA-9j7m-rjqx-48vh
—rubygems-update (RubyGems)2.0.0 to before 2.0.82.0.8Patch availableGHSA-9j7m-rjqx-48vh
—rubygems-update (RubyGems)2.1.0.rc.1 to before 2.1.02.1.0Patch availableGHSA-9j7m-rjqx-48vh
  • — Vendor— Affected all versions Fixed in — No fix listed CNA
  • rubygems-update (RubyGems) Vendor— Affected before 1.8.23.1 Fixed in 1.8.23.1 Patch available GHSA-9j7m-rjqx-48vh
  • rubygems-update (RubyGems) Vendor— Affected 1.8.24 to before 1.8.26 Fixed in 1.8.26 Patch available GHSA-9j7m-rjqx-48vh
  • rubygems-update (RubyGems) Vendor— Affected 2.0.0 to before 2.0.8 Fixed in 2.0.8 Patch available GHSA-9j7m-rjqx-48vh
  • rubygems-update (RubyGems) Vendor— Affected 2.1.0.rc.1 to before 2.1.0 Fixed in 2.1.0 Patch available GHSA-9j7m-rjqx-48vh

CPE configurations NVD · 59

CPEVersionsRoleVendor
cpe:2.3:o:redhat:enterprise_linux:6.0:*:*:*:*:*:*:*6.0VulnerableRed Hat
cpe:2.3:a:rubygems:rubygems:*:*:*:*:*:*:*:*up to 1.8.23Vulnerablerubygems
cpe:2.3:a:rubygems:rubygems:1.8.0:*:*:*:*:*:*:*1.8.0Vulnerablerubygems
cpe:2.3:a:rubygems:rubygems:1.8.1:*:*:*:*:*:*:*1.8.1Vulnerablerubygems
cpe:2.3:a:rubygems:rubygems:1.8.2:*:*:*:*:*:*:*1.8.2Vulnerablerubygems
cpe:2.3:a:rubygems:rubygems:1.8.3:*:*:*:*:*:*:*1.8.3Vulnerablerubygems
cpe:2.3:a:rubygems:rubygems:1.8.4:*:*:*:*:*:*:*1.8.4Vulnerablerubygems
cpe:2.3:a:rubygems:rubygems:1.8.5:*:*:*:*:*:*:*1.8.5Vulnerablerubygems
cpe:2.3:a:rubygems:rubygems:1.8.6:*:*:*:*:*:*:*1.8.6Vulnerablerubygems
cpe:2.3:a:rubygems:rubygems:1.8.7:*:*:*:*:*:*:*1.8.7Vulnerablerubygems
  • cpe:2.3:o:redhat:enterprise_linux:6.0:*:*:*:*:*:*:* Versions 6.0 Vulnerable ·Red Hat
  • cpe:2.3:a:rubygems:rubygems:*:*:*:*:*:*:*:* Versions up to 1.8.23 Vulnerable ·rubygems
  • cpe:2.3:a:rubygems:rubygems:1.8.0:*:*:*:*:*:*:* Versions 1.8.0 Vulnerable ·rubygems
  • cpe:2.3:a:rubygems:rubygems:1.8.1:*:*:*:*:*:*:* Versions 1.8.1 Vulnerable ·rubygems
  • cpe:2.3:a:rubygems:rubygems:1.8.2:*:*:*:*:*:*:* Versions 1.8.2 Vulnerable ·rubygems
  • cpe:2.3:a:rubygems:rubygems:1.8.3:*:*:*:*:*:*:* Versions 1.8.3 Vulnerable ·rubygems
  • cpe:2.3:a:rubygems:rubygems:1.8.4:*:*:*:*:*:*:* Versions 1.8.4 Vulnerable ·rubygems
  • cpe:2.3:a:rubygems:rubygems:1.8.5:*:*:*:*:*:*:* Versions 1.8.5 Vulnerable ·rubygems
  • cpe:2.3:a:rubygems:rubygems:1.8.6:*:*:*:*:*:*:* Versions 1.8.6 Vulnerable ·rubygems
  • cpe:2.3:a:rubygems:rubygems:1.8.7:*:*:*:*:*:*:* Versions 1.8.7 Vulnerable ·rubygems
Show 49 more CPE
CPEVersionsRoleVendor
cpe:2.3:a:rubygems:rubygems:1.8.8:*:*:*:*:*:*:*1.8.8Vulnerablerubygems
cpe:2.3:a:rubygems:rubygems:1.8.9:*:*:*:*:*:*:*1.8.9Vulnerablerubygems
cpe:2.3:a:rubygems:rubygems:1.8.10:*:*:*:*:*:*:*1.8.10Vulnerablerubygems
cpe:2.3:a:rubygems:rubygems:1.8.11:*:*:*:*:*:*:*1.8.11Vulnerablerubygems
cpe:2.3:a:rubygems:rubygems:1.8.12:*:*:*:*:*:*:*1.8.12Vulnerablerubygems
cpe:2.3:a:rubygems:rubygems:1.8.13:*:*:*:*:*:*:*1.8.13Vulnerablerubygems
cpe:2.3:a:rubygems:rubygems:1.8.14:*:*:*:*:*:*:*1.8.14Vulnerablerubygems
cpe:2.3:a:rubygems:rubygems:1.8.15:*:*:*:*:*:*:*1.8.15Vulnerablerubygems
cpe:2.3:a:rubygems:rubygems:1.8.16:*:*:*:*:*:*:*1.8.16Vulnerablerubygems
cpe:2.3:a:rubygems:rubygems:1.8.17:*:*:*:*:*:*:*1.8.17Vulnerablerubygems
cpe:2.3:a:rubygems:rubygems:1.8.18:*:*:*:*:*:*:*1.8.18Vulnerablerubygems
cpe:2.3:a:rubygems:rubygems:1.8.19:*:*:*:*:*:*:*1.8.19Vulnerablerubygems
cpe:2.3:a:rubygems:rubygems:1.8.20:*:*:*:*:*:*:*1.8.20Vulnerablerubygems
cpe:2.3:a:rubygems:rubygems:1.8.21:*:*:*:*:*:*:*1.8.21Vulnerablerubygems
cpe:2.3:a:rubygems:rubygems:1.8.22:*:*:*:*:*:*:*1.8.22Vulnerablerubygems
cpe:2.3:a:rubygems:rubygems:1.8.24:*:*:*:*:*:*:*1.8.24Vulnerablerubygems
cpe:2.3:a:rubygems:rubygems:1.8.25:*:*:*:*:*:*:*1.8.25Vulnerablerubygems
cpe:2.3:a:rubygems:rubygems:2.0.0:*:*:*:*:*:*:*2.0.0Vulnerablerubygems
cpe:2.3:a:rubygems:rubygems:2.0.1:*:*:*:*:*:*:*2.0.1Vulnerablerubygems
cpe:2.3:a:rubygems:rubygems:2.0.2:*:*:*:*:*:*:*2.0.2Vulnerablerubygems
cpe:2.3:a:rubygems:rubygems:2.0.3:*:*:*:*:*:*:*2.0.3Vulnerablerubygems
cpe:2.3:a:rubygems:rubygems:2.0.4:*:*:*:*:*:*:*2.0.4Vulnerablerubygems
cpe:2.3:a:rubygems:rubygems:2.0.5:*:*:*:*:*:*:*2.0.5Vulnerablerubygems
cpe:2.3:a:rubygems:rubygems:2.0.6:*:*:*:*:*:*:*2.0.6Vulnerablerubygems
cpe:2.3:a:rubygems:rubygems:2.0.7:*:*:*:*:*:*:*2.0.7Vulnerablerubygems
cpe:2.3:a:rubygems:rubygems:2.1.0:rc1:*:*:*:*:*:*2.1.0 rc1Vulnerablerubygems
cpe:2.3:a:rubygems:rubygems:2.1.0:rc2:*:*:*:*:*:*2.1.0 rc2Vulnerablerubygems
cpe:2.3:a:ruby-lang:ruby:1.9:*:*:*:*:*:*:*1.9Vulnerableruby
cpe:2.3:a:ruby-lang:ruby:1.9.1:*:*:*:*:*:*:*1.9.1Vulnerableruby
cpe:2.3:a:ruby-lang:ruby:1.9.2:*:*:*:*:*:*:*1.9.2Vulnerableruby
cpe:2.3:a:ruby-lang:ruby:1.9.3:*:*:*:*:*:*:*1.9.3Vulnerableruby
cpe:2.3:a:ruby-lang:ruby:1.9.3:p0:*:*:*:*:*:*1.9.3 p0Vulnerableruby
cpe:2.3:a:ruby-lang:ruby:1.9.3:p125:*:*:*:*:*:*1.9.3 p125Vulnerableruby
cpe:2.3:a:ruby-lang:ruby:1.9.3:p194:*:*:*:*:*:*1.9.3 p194Vulnerableruby
cpe:2.3:a:ruby-lang:ruby:1.9.3:p286:*:*:*:*:*:*1.9.3 p286Vulnerableruby
cpe:2.3:a:ruby-lang:ruby:1.9.3:p383:*:*:*:*:*:*1.9.3 p383Vulnerableruby
cpe:2.3:a:ruby-lang:ruby:1.9.3:p385:*:*:*:*:*:*1.9.3 p385Vulnerableruby
cpe:2.3:a:ruby-lang:ruby:1.9.3:p392:*:*:*:*:*:*1.9.3 p392Vulnerableruby
cpe:2.3:a:ruby-lang:ruby:1.9.3:p426:*:*:*:*:*:*1.9.3 p426Vulnerableruby
cpe:2.3:a:ruby-lang:ruby:1.9.3:p429:*:*:*:*:*:*1.9.3 p429Vulnerableruby
cpe:2.3:a:ruby-lang:ruby:2.0:*:*:*:*:*:*:*2.0Vulnerableruby
cpe:2.3:a:ruby-lang:ruby:2.0.0:*:*:*:*:*:*:*2.0.0Vulnerableruby
cpe:2.3:a:ruby-lang:ruby:2.0.0:p0:*:*:*:*:*:*2.0.0 p0Vulnerableruby
cpe:2.3:a:ruby-lang:ruby:2.0.0:p195:*:*:*:*:*:*2.0.0 p195Vulnerableruby
cpe:2.3:a:ruby-lang:ruby:2.0.0:p247:*:*:*:*:*:*2.0.0 p247Vulnerableruby
cpe:2.3:a:ruby-lang:ruby:2.0.0:preview1:*:*:*:*:*:*2.0.0 preview1Vulnerableruby
cpe:2.3:a:ruby-lang:ruby:2.0.0:preview2:*:*:*:*:*:*2.0.0 preview2Vulnerableruby
cpe:2.3:a:ruby-lang:ruby:2.0.0:rc1:*:*:*:*:*:*2.0.0 rc1Vulnerableruby
cpe:2.3:a:ruby-lang:ruby:2.0.0:rc2:*:*:*:*:*:*2.0.0 rc2Vulnerableruby
  • cpe:2.3:a:rubygems:rubygems:1.8.8:*:*:*:*:*:*:* Versions 1.8.8 Vulnerable ·rubygems
  • cpe:2.3:a:rubygems:rubygems:1.8.9:*:*:*:*:*:*:* Versions 1.8.9 Vulnerable ·rubygems
  • cpe:2.3:a:rubygems:rubygems:1.8.10:*:*:*:*:*:*:* Versions 1.8.10 Vulnerable ·rubygems
  • cpe:2.3:a:rubygems:rubygems:1.8.11:*:*:*:*:*:*:* Versions 1.8.11 Vulnerable ·rubygems
  • cpe:2.3:a:rubygems:rubygems:1.8.12:*:*:*:*:*:*:* Versions 1.8.12 Vulnerable ·rubygems
  • cpe:2.3:a:rubygems:rubygems:1.8.13:*:*:*:*:*:*:* Versions 1.8.13 Vulnerable ·rubygems
  • cpe:2.3:a:rubygems:rubygems:1.8.14:*:*:*:*:*:*:* Versions 1.8.14 Vulnerable ·rubygems
  • cpe:2.3:a:rubygems:rubygems:1.8.15:*:*:*:*:*:*:* Versions 1.8.15 Vulnerable ·rubygems
  • cpe:2.3:a:rubygems:rubygems:1.8.16:*:*:*:*:*:*:* Versions 1.8.16 Vulnerable ·rubygems
  • cpe:2.3:a:rubygems:rubygems:1.8.17:*:*:*:*:*:*:* Versions 1.8.17 Vulnerable ·rubygems
  • cpe:2.3:a:rubygems:rubygems:1.8.18:*:*:*:*:*:*:* Versions 1.8.18 Vulnerable ·rubygems
  • cpe:2.3:a:rubygems:rubygems:1.8.19:*:*:*:*:*:*:* Versions 1.8.19 Vulnerable ·rubygems
  • cpe:2.3:a:rubygems:rubygems:1.8.20:*:*:*:*:*:*:* Versions 1.8.20 Vulnerable ·rubygems
  • cpe:2.3:a:rubygems:rubygems:1.8.21:*:*:*:*:*:*:* Versions 1.8.21 Vulnerable ·rubygems
  • cpe:2.3:a:rubygems:rubygems:1.8.22:*:*:*:*:*:*:* Versions 1.8.22 Vulnerable ·rubygems
  • cpe:2.3:a:rubygems:rubygems:1.8.24:*:*:*:*:*:*:* Versions 1.8.24 Vulnerable ·rubygems
  • cpe:2.3:a:rubygems:rubygems:1.8.25:*:*:*:*:*:*:* Versions 1.8.25 Vulnerable ·rubygems
  • cpe:2.3:a:rubygems:rubygems:2.0.0:*:*:*:*:*:*:* Versions 2.0.0 Vulnerable ·rubygems
  • cpe:2.3:a:rubygems:rubygems:2.0.1:*:*:*:*:*:*:* Versions 2.0.1 Vulnerable ·rubygems
  • cpe:2.3:a:rubygems:rubygems:2.0.2:*:*:*:*:*:*:* Versions 2.0.2 Vulnerable ·rubygems
  • cpe:2.3:a:rubygems:rubygems:2.0.3:*:*:*:*:*:*:* Versions 2.0.3 Vulnerable ·rubygems
  • cpe:2.3:a:rubygems:rubygems:2.0.4:*:*:*:*:*:*:* Versions 2.0.4 Vulnerable ·rubygems
  • cpe:2.3:a:rubygems:rubygems:2.0.5:*:*:*:*:*:*:* Versions 2.0.5 Vulnerable ·rubygems
  • cpe:2.3:a:rubygems:rubygems:2.0.6:*:*:*:*:*:*:* Versions 2.0.6 Vulnerable ·rubygems
  • cpe:2.3:a:rubygems:rubygems:2.0.7:*:*:*:*:*:*:* Versions 2.0.7 Vulnerable ·rubygems
  • cpe:2.3:a:rubygems:rubygems:2.1.0:rc1:*:*:*:*:*:* Versions 2.1.0 rc1 Vulnerable ·rubygems
  • cpe:2.3:a:rubygems:rubygems:2.1.0:rc2:*:*:*:*:*:* Versions 2.1.0 rc2 Vulnerable ·rubygems
  • cpe:2.3:a:ruby-lang:ruby:1.9:*:*:*:*:*:*:* Versions 1.9 Vulnerable ·ruby
  • cpe:2.3:a:ruby-lang:ruby:1.9.1:*:*:*:*:*:*:* Versions 1.9.1 Vulnerable ·ruby
  • cpe:2.3:a:ruby-lang:ruby:1.9.2:*:*:*:*:*:*:* Versions 1.9.2 Vulnerable ·ruby
  • cpe:2.3:a:ruby-lang:ruby:1.9.3:*:*:*:*:*:*:* Versions 1.9.3 Vulnerable ·ruby
  • cpe:2.3:a:ruby-lang:ruby:1.9.3:p0:*:*:*:*:*:* Versions 1.9.3 p0 Vulnerable ·ruby
  • cpe:2.3:a:ruby-lang:ruby:1.9.3:p125:*:*:*:*:*:* Versions 1.9.3 p125 Vulnerable ·ruby
  • cpe:2.3:a:ruby-lang:ruby:1.9.3:p194:*:*:*:*:*:* Versions 1.9.3 p194 Vulnerable ·ruby
  • cpe:2.3:a:ruby-lang:ruby:1.9.3:p286:*:*:*:*:*:* Versions 1.9.3 p286 Vulnerable ·ruby
  • cpe:2.3:a:ruby-lang:ruby:1.9.3:p383:*:*:*:*:*:* Versions 1.9.3 p383 Vulnerable ·ruby
  • cpe:2.3:a:ruby-lang:ruby:1.9.3:p385:*:*:*:*:*:* Versions 1.9.3 p385 Vulnerable ·ruby
  • cpe:2.3:a:ruby-lang:ruby:1.9.3:p392:*:*:*:*:*:* Versions 1.9.3 p392 Vulnerable ·ruby
  • cpe:2.3:a:ruby-lang:ruby:1.9.3:p426:*:*:*:*:*:* Versions 1.9.3 p426 Vulnerable ·ruby
  • cpe:2.3:a:ruby-lang:ruby:1.9.3:p429:*:*:*:*:*:* Versions 1.9.3 p429 Vulnerable ·ruby
  • cpe:2.3:a:ruby-lang:ruby:2.0:*:*:*:*:*:*:* Versions 2.0 Vulnerable ·ruby
  • cpe:2.3:a:ruby-lang:ruby:2.0.0:*:*:*:*:*:*:* Versions 2.0.0 Vulnerable ·ruby
  • cpe:2.3:a:ruby-lang:ruby:2.0.0:p0:*:*:*:*:*:* Versions 2.0.0 p0 Vulnerable ·ruby
  • cpe:2.3:a:ruby-lang:ruby:2.0.0:p195:*:*:*:*:*:* Versions 2.0.0 p195 Vulnerable ·ruby
  • cpe:2.3:a:ruby-lang:ruby:2.0.0:p247:*:*:*:*:*:* Versions 2.0.0 p247 Vulnerable ·ruby
  • cpe:2.3:a:ruby-lang:ruby:2.0.0:preview1:*:*:*:*:*:* Versions 2.0.0 preview1 Vulnerable ·ruby
  • cpe:2.3:a:ruby-lang:ruby:2.0.0:preview2:*:*:*:*:*:* Versions 2.0.0 preview2 Vulnerable ·ruby
  • cpe:2.3:a:ruby-lang:ruby:2.0.0:rc1:*:*:*:*:*:* Versions 2.0.0 rc1 Vulnerable ·ruby
  • cpe:2.3:a:ruby-lang:ruby:2.0.0:rc2:*:*:*:*:*:* Versions 2.0.0 rc2 Vulnerable ·ruby

Remediation

  • Fix · GHSA-9j7m-rjqx-48vh rubygems-update (RubyGems) Fixed in 1.8.23.1 Advisory →
  • Fix · GHSA-9j7m-rjqx-48vh rubygems-update (RubyGems) Fixed in 1.8.26 Advisory →
  • Fix · GHSA-9j7m-rjqx-48vh rubygems-update (RubyGems) Fixed in 2.0.8 Advisory →
  • Fix · GHSA-9j7m-rjqx-48vh rubygems-update (RubyGems) Fixed in 2.1.0 Advisory →

Red Hat 5 advisories

  • RHSA-2014:0207 Released 2014-02-24 · Red Hat rating Moderate
    rubygems security update
    • RHOSE Client 2.0 rubygems-1.8.24-5.el6op, rubygems-devel-1.8.24-5.el6op
    • RHOSE Infrastructure 2.0 rubygems-1.8.24-5.el6op, rubygems-devel-1.8.24-5.el6op
    • RHOSE Node 2.0 rubygems-1.8.24-5.el6op, rubygems-devel-1.8.24-5.el6op
  • RHSA-2013:1852 Released 2013-12-17 · Red Hat rating Moderate
    Red Hat Enterprise MRG Grid 2.4 security update
    • Red Hat MRG Grid Execute Node for RHEL 6 ComputeNode v.2 rubygems-1.8.23.2-1.el6
    • Red Hat MRG Grid for RHEL 6 Server v.2 cumin-0.1.5787-4.el6, rubygems-1.8.23.2-1.el6
    • Red Hat MRG Management for RHEL 6 Server v.2 cumin-0.1.5787-4.el6
  • RHSA-2013:1523 Released 2013-11-14 · Red Hat rating Moderate
    ruby193-ruby security update
    • Red Hat Enterprise Linux OpenStack Platform 3.0 ruby193-ruby-1.9.3.448-40.el6, ruby193-ruby-devel-1.9.3.448-40.el6, ruby193-ruby-doc-1.9.3.448-40.el6 +12
Show 2 more Red Hat advisories
  • RHSA-2013:1441 Released 2013-10-17 · Red Hat rating Moderate
    rubygems security update
    • Red Hat Enterprise Linux Desktop Optional (v. 6) rubygems-1.3.7-4.el6_4
    • Red Hat Enterprise Linux HPC Node Optional (v. 6) rubygems-1.3.7-4.el6_4
    • Red Hat Enterprise Linux Server Optional (v. 6) rubygems-1.3.7-4.el6_4
    • Red Hat Enterprise Linux Workstation Optional (v. 6) rubygems-1.3.7-4.el6_4
  • RHSA-2013:1427 Released 2013-10-15 · Red Hat rating Moderate
    ruby193-ruby security update
    • Red Hat Software Collections 1 for Red Hat Enterprise Linux Server (v. 6) ruby193-ruby-1.9.3.448-40.el6, ruby193-ruby-devel-1.9.3.448-40.el6, ruby193-ruby-doc-1.9.3.448-40.el6 +11
    • Red Hat Software Collections 1 for Red Hat Enterprise Linux Workstation (v. 6) ruby193-ruby-1.9.3.448-40.el6, ruby193-ruby-devel-1.9.3.448-40.el6, ruby193-ruby-doc-1.9.3.448-40.el6 +11

Vendor assessments

Red Hat

Red Hat rating: Moderate. Red Hat's page for this CVE →

ProductStatusPlan or fix
CloudForms Management Engine 5AffectedNo fix yet
OpenShift Enterprise 1AffectedNo fix planned: Will not fix
Red Hat OpenStack Platform 4AffectedNo fix yet
Red Hat Satellite 6AffectedNo fix planned: Will not fix
Red Hat Subscription Asset ManagerAffectedNo fix yet
RHOSE Client 2.0Fixed RHSA-2014:0207
RHOSE Infrastructure 2.0Fixed RHSA-2014:0207
RHOSE Node 2.0Fixed RHSA-2014:0207
Red Hat Enterprise Linux Desktop Optional (v. 6)Fixed RHSA-2013:1441
Red Hat Enterprise Linux HPC Node Optional (v. 6)Fixed RHSA-2013:1441
Red Hat Enterprise Linux OpenStack Platform 3.0Fixed RHSA-2013:1523
Red Hat Enterprise Linux Server Optional (v. 6)Fixed RHSA-2013:1441
Red Hat Enterprise Linux Workstation Optional (v. 6)Fixed RHSA-2013:1441
Red Hat MRG Grid Execute Node for RHEL 6 ComputeNode v.2Fixed RHSA-2013:1852
Red Hat MRG Grid for RHEL 6 Server v.2Fixed RHSA-2013:1852
Red Hat MRG Management for RHEL 6 Server v.2Fixed RHSA-2013:1852
Red Hat Software Collections 1 for Red Hat Enterprise Linux Server (v. 6)Fixed RHSA-2013:1427
Red Hat Software Collections 1 for Red Hat Enterprise Linux Workstation (v. 6)Fixed RHSA-2013:1427
Not affected: 1 product
  • Red Hat Enterprise Linux 7

Timeline

  1. 2026-10-02 Threatist record created from CVE-2013-4287
  2. 2026-10-03 Alias added: GHSA-9j7m-rjqx-48vh

References

Patch 2

Advisory 6

Other 8

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences