CVE:CVE-2019-16779
CNNVD:CNNVD-201912-732
RubyGem excon是一款适用于Ruby应用程序的HTTP服务器。
RubyGem excon 0.71.0之前版本中存在竞争条件问题漏洞。攻击者可利用该漏洞泄露信息。
solution:Upgrade excon_project excon to a higher version than 0.71.0,and avoid the version (,0.71.0); Upgrade opensuse backports_sle to a higher version than 15.0:sp1,and avoid the version 15.0:sp1; Upgrade opensuse leap to a higher version than 15.1,and avoid the version 15.1; Upgrade debian debian_linux to a higher version than 8.0,and avoid the version 8.0