CVE catalog

CVE-2017-1000248

ruby-redis-store: CVE-2017-1000248

[CVE catalog]

Severity
Medium
Published
Source
[NVD] · [CVE record]
EPSS
1.98% · Oct 25, 2026

Redis-store <=v1.3.0 allows unsafe objects to be loaded from redis

Vulnerable and fixed packages

Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.

DistributionPackageReleaseVersionStatus
Debianruby-redis-storesid1.12.0-1fixed
Debianruby-redis-storeforky1.12.0-1fixed
Debianruby-redis-storetrixie1.10.0-1fixed
Debianruby-redis-storebookworm1.9.0-2fixed
Ubunturuby-redis-store16.041.1.6-1vulnerable
Ubunturuby-redis-store16.041.1.6-1+deb9u1build0.16.04.1fixed

Fixed-version evidence

DistributionPackageTypeReleaseFixed versionUrgencyOriginBugs
Debianruby-redis-storesourcesid1.1.6-2not yet assignedNot reported[882034]
Debianruby-redis-storesourceforky1.1.6-2not yet assignedNot reported[882034]
Debianruby-redis-storesourcetrixie1.1.6-2not yet assignedNot reported[882034]
Debianruby-redis-storesourcebookworm1.1.6-2not yet assignedNot reported[882034]
Ubunturuby-redis-storedeb16.041.1.6-1+deb9u1build0.16.04.1Not reportedUBUNTU-CVE-2017-1000248Not reported

[Debian bug #882034]

OpenFactory catalog packages

[Debian 12 (Bookworm)]

  • [ruby-redis-store]Fixed
    Details (2)

    • 1.9.0-2 · all · bookworm

      Fixed · Fixed: 1.1.6-2

      dsa · ruby-redis-store · debian · bookworm; dsa · ruby-redis-store · debian · 12

    • 1.9.0-2 · all · bookworm

      Fixed · Fixed: 1.1.6-2

      dsa · ruby-redis-store · debian · bookworm; dsa · ruby-redis-store · debian · 12

[Debian 13 (Trixie)]

  • [ruby-redis-store]Fixed
    Details (2)

    • 1.10.0-1 · all · trixie

      Fixed · Fixed: 1.1.6-2

      dsa · ruby-redis-store · debian · 13

    • 1.10.0-1 · all · trixie

      Fixed · Fixed: 1.1.6-2

      dsa · ruby-redis-store · debian · 13

Observed:

References

[Debian Security Tracker] · [FIRST EPSS] · [OSV Package Vulnerability Database]