Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
The SecureRandom.random_bytes function in lib/securerandom.rb in Ruby before 1.8.7-p352 and 1.9.x before 1.9.2-p290 relies on PID values for initialization, which makes it easier for context-dependent attackers to predict the result string by leveraging knowledge of random strings obtained in an earlier process with the same PID.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Ruby-Lang Ruby lib/securerandom.rb SecureRandom.random_bytes函数输入验证漏洞
Vulnerability Description
Ruby是一种功能强大的面向对象的脚本语言。 Ruby 1.8.7-p352之前版本和1.9.2-p290之前的1.9.x版本的lib/securerandom.rb中的SecureRandom.random_bytes函数初始化时依赖于PID值。上下文相关的攻击者更易于利用从具有相同PID的进程中获取的随机字符串信息预测结果字符串。
CVSS Information
N/A
Vulnerability Type
N/A