CVE catalog

CVE-2021-31799

ALPINE-CVE-2021-31799

[CVE catalog]

Severity
High · CVSS 7.8CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Published
Updated
Source
[NVD] · [CVE record]
EPSS
1.48% · Oct 25, 2026

In RDoc 3.11 through 6.x before 6.3.1, as distributed with Ruby through 3.0.1, it is possible to execute arbitrary code via | and tags in a filename.

Vulnerable and fixed packages

Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.

DistributionPackageReleaseVersionStatus
Debianruby2.7112.7.4-1fixed
Alpineruby3.112.6.8-r0fixed
Alpineruby3.122.7.4-r0fixed
Alpineruby3.132.7.4-r0fixed
Alpineruby3.142.7.4-r0fixed
Alpineruby3.152.7.4-r0fixed
Alpineruby3.162.7.4-r0fixed
Alpineruby3.172.7.4-r0fixed
Alpineruby3.182.7.4-r0fixed
Alpineruby3.192.7.4-r0fixed
Alpineruby3.202.7.4-r0fixed
Alpineruby3.212.7.4-r0fixed
Alpineruby3.222.7.4-r0fixed
Alpineruby3.232.7.4-r0fixed
Alpineruby3.242.7.4-r0fixed
Ubunturuby2.3pro2.3.0-1vulnerable
Ubunturuby2.3pro2.3.0-2vulnerable
Ubunturuby2.3pro2.3.0-4ubuntu2vulnerable
Ubunturuby2.3pro2.3.0-4ubuntu3vulnerable
Ubunturuby2.3pro2.3.0-5ubuntu1vulnerable
Ubunturuby2.3pro2.3.1-2~16.04vulnerable
Ubunturuby2.3pro2.3.1-2~16.04.2vulnerable
Ubunturuby2.3pro2.3.1-2~16.04.4vulnerable
Ubunturuby2.3pro2.3.1-2~16.04.5vulnerable
Ubunturuby2.3pro2.3.1-2~16.04.6vulnerable
Ubunturuby2.3pro2.3.1-2~16.04.7vulnerable
Ubunturuby2.3pro2.3.1-2~16.04.9vulnerable
Ubunturuby2.3pro2.3.1-2~16.04.10vulnerable
Ubunturuby2.3pro2.3.1-2~16.04.11vulnerable
Ubunturuby2.3pro2.3.1-2~16.04.12vulnerable
Ubunturuby2.3pro2.3.1-2~ubuntu16.04.13vulnerable
Ubunturuby2.3pro2.3.1-2~ubuntu16.04.14vulnerable
Ubunturuby2.3pro2.3.1-2~ubuntu16.04.15vulnerable
Ubunturuby2.3pro2.3.1-2~ubuntu16.04.16vulnerable
Ubunturuby2.3pro2.3.1-2~ubuntu16.04.16+esm1fixed
Ubunturuby2.518.042.5.0~preview1-1ubuntu2vulnerable
Ubunturuby2.518.042.5.0-4ubuntu1vulnerable
Ubunturuby2.518.042.5.0-4ubuntu4vulnerable
Ubunturuby2.518.042.5.0-5ubuntu1vulnerable
Ubunturuby2.518.042.5.0-6ubuntu1vulnerable
Ubunturuby2.518.042.5.1-1ubuntu1vulnerable
Ubunturuby2.518.042.5.1-1ubuntu1.1vulnerable
Ubunturuby2.518.042.5.1-1ubuntu1.2vulnerable
Ubunturuby2.518.042.5.1-1ubuntu1.4vulnerable
Ubunturuby2.518.042.5.1-1ubuntu1.5vulnerable
Ubunturuby2.518.042.5.1-1ubuntu1.6vulnerable
Ubunturuby2.518.042.5.1-1ubuntu1.7vulnerable
Ubunturuby2.518.042.5.1-1ubuntu1.8vulnerable
Ubunturuby2.518.042.5.1-1ubuntu1.9vulnerable
Ubunturuby2.518.042.5.1-1ubuntu1.10fixed
Ubunturuby2.720.042.7.0-1vulnerable
Ubunturuby2.720.042.7.0-2vulnerable
Ubunturuby2.720.042.7.0-3vulnerable
Ubunturuby2.720.042.7.0-4vulnerable
Ubunturuby2.720.042.7.0-4ubuntu1vulnerable
Ubunturuby2.720.042.7.0-5ubuntu1vulnerable
Ubunturuby2.720.042.7.0-5ubuntu1.1vulnerable
Ubunturuby2.720.042.7.0-5ubuntu1.2vulnerable
Ubunturuby2.720.042.7.0-5ubuntu1.3vulnerable
Ubunturuby2.720.042.7.0-5ubuntu1.4vulnerable
Ubunturuby2.720.042.7.0-5ubuntu1.5fixed
Ubunturuby2.3pro2.3.0-1vulnerable
Ubunturuby2.3pro2.3.0-2vulnerable
Ubunturuby2.3pro2.3.0-4ubuntu2vulnerable
Ubunturuby2.3pro2.3.0-4ubuntu3vulnerable
Ubunturuby2.3pro2.3.0-5ubuntu1vulnerable
Ubunturuby2.3pro2.3.1-2~16.04vulnerable
Ubunturuby2.3pro2.3.1-2~16.04.2vulnerable
Ubunturuby2.3pro2.3.1-2~16.04.4vulnerable
Ubunturuby2.3pro2.3.1-2~16.04.5vulnerable
Ubunturuby2.3pro2.3.1-2~16.04.6vulnerable
Ubunturuby2.3pro2.3.1-2~16.04.7vulnerable
Ubunturuby2.3pro2.3.1-2~16.04.9vulnerable
Ubunturuby2.3pro2.3.1-2~16.04.10vulnerable
Ubunturuby2.3pro2.3.1-2~16.04.11vulnerable
Ubunturuby2.3pro2.3.1-2~16.04.12vulnerable
Ubunturuby2.3pro2.3.1-2~ubuntu16.04.13vulnerable
Ubunturuby2.3pro2.3.1-2~ubuntu16.04.14vulnerable
Ubunturuby2.3pro2.3.1-2~ubuntu16.04.15vulnerable
Ubunturuby2.3pro2.3.1-2~ubuntu16.04.16vulnerable
Ubunturuby2.3pro2.3.1-2~ubuntu16.04.16+esm1fixed
Ubunturuby2.518.042.5.0~preview1-1ubuntu2vulnerable
Ubunturuby2.518.042.5.0-4ubuntu1vulnerable
Ubunturuby2.518.042.5.0-4ubuntu4vulnerable
Ubunturuby2.518.042.5.0-5ubuntu1vulnerable
Ubunturuby2.518.042.5.0-6ubuntu1vulnerable
Ubunturuby2.518.042.5.1-1ubuntu1vulnerable
Ubunturuby2.518.042.5.1-1ubuntu1.1vulnerable
Ubunturuby2.518.042.5.1-1ubuntu1.2vulnerable
Ubunturuby2.518.042.5.1-1ubuntu1.4vulnerable
Ubunturuby2.518.042.5.1-1ubuntu1.5vulnerable
Ubunturuby2.518.042.5.1-1ubuntu1.6vulnerable
Ubunturuby2.518.042.5.1-1ubuntu1.7vulnerable
Ubunturuby2.518.042.5.1-1ubuntu1.8vulnerable
Ubunturuby2.518.042.5.1-1ubuntu1.9vulnerable
Ubunturuby2.518.042.5.1-1ubuntu1.10fixed
Ubunturuby2.720.042.7.0-1vulnerable
Ubunturuby2.720.042.7.0-2vulnerable
Ubunturuby2.720.042.7.0-3vulnerable
Ubunturuby2.720.042.7.0-4vulnerable
Ubunturuby2.720.042.7.0-4ubuntu1vulnerable
Ubunturuby2.720.042.7.0-5ubuntu1vulnerable
Ubunturuby2.720.042.7.0-5ubuntu1.1vulnerable
Ubunturuby2.720.042.7.0-5ubuntu1.2vulnerable
Ubunturuby2.720.042.7.0-5ubuntu1.3vulnerable
Ubunturuby2.720.042.7.0-5ubuntu1.4vulnerable
Ubunturuby2.720.042.7.0-5ubuntu1.5fixed
Debianruby2.392.3.3-1vulnerable
Debianruby2.392.3.3-1+deb9u1vulnerable
Debianruby2.392.3.3-1+deb9u2vulnerable
Debianruby2.392.3.3-1+deb9u3vulnerable
Debianruby2.392.3.3-1+deb9u4vulnerable
Debianruby2.392.3.3-1+deb9u5vulnerable
Debianruby2.392.3.3-1+deb9u6vulnerable
Debianruby2.392.3.3-1+deb9u7vulnerable
Debianruby2.392.3.3-1+deb9u8vulnerable
Debianruby2.392.3.3-1+deb9u9vulnerable
Debianruby2.392.3.3-1+deb9u10fixed
Suseruby2.5linux enterprise module for basesystem 15 sp32.5.9-150000.4.23.1fixed
Suseruby2.5linux enterprise high performance computing 15-espos2.5.9-150000.4.23.1fixed
Suseruby2.5linux enterprise high performance computing 15-ltss2.5.9-150000.4.23.1fixed
Suseruby2.5linux enterprise high performance computing 15 sp1-espos2.5.9-150000.4.23.1fixed
Suseruby2.5linux enterprise high performance computing 15 sp1-ltss2.5.9-150000.4.23.1fixed
Suseruby2.5linux enterprise high performance computing 15 sp2-espos2.5.9-150000.4.23.1fixed
Suseruby2.5linux enterprise high performance computing 15 sp2-ltss2.5.9-150000.4.23.1fixed
Suseruby2.5linux enterprise real time 15 sp22.5.9-150000.4.23.1fixed
Suseruby2.5linux enterprise server 15-ltss2.5.9-150000.4.23.1fixed
Suseruby2.5linux enterprise server 15 sp1-bcl2.5.9-150000.4.23.1fixed
Suseruby2.5linux enterprise server 15 sp1-ltss2.5.9-150000.4.23.1fixed
Suseruby2.5linux enterprise server 15 sp2-bcl2.5.9-150000.4.23.1fixed
Suseruby2.5linux enterprise server 15 sp2-ltss2.5.9-150000.4.23.1fixed
Suseruby2.5linux enterprise server for sap applications 152.5.9-150000.4.23.1fixed
Suseruby2.5linux enterprise server for sap applications 15 sp12.5.9-150000.4.23.1fixed
Suseruby2.5linux enterprise server for sap applications 15 sp22.5.9-150000.4.23.1fixed
Suseruby2.5manager proxy 4.12.5.9-150000.4.23.1fixed
Suseruby2.5manager retail branch server 4.12.5.9-150000.4.23.1fixed
Suseruby2.5manager server 4.12.5.9-150000.4.23.1fixed
Suseruby2.5linux enterprise micro 5.02.5.9-150000.4.23.1fixed
Suseruby2.5enterprise storage 62.5.9-150000.4.23.1fixed
Suseruby2.5enterprise storage 72.5.9-150000.4.23.1fixed
Opensuseruby2.5leap 15.32.5.9-150000.4.23.1fixed
Opensuseruby2.5leap 15.42.5.9-150000.4.23.1fixed
Opensuseruby3.0tumbleweed3.0.2-1.1fixed
Opensuseruby2.5leap 15.32.5.9-4.20.1fixed
Opensuseruby2.5leap 15.22.5.9-lp152.2.9.1fixed
Opensuseruby2.7tumbleweed2.7.4-1.1fixed
Suseruby2.5linux enterprise module for basesystem 15 sp22.5.9-4.20.1fixed
Suseruby2.5linux enterprise module for basesystem 15 sp32.5.9-4.20.1fixed
Suseruby2.5linux enterprise high performance computing 15-espos2.5.9-4.20.1fixed
Suseruby2.5linux enterprise high performance computing 15-ltss2.5.9-4.20.1fixed
Suseruby2.5linux enterprise high performance computing 15 sp1-espos2.5.9-4.20.1fixed
Suseruby2.5linux enterprise high performance computing 15 sp1-ltss2.5.9-4.20.1fixed
Suseruby2.5linux enterprise server 15-ltss2.5.9-4.20.1fixed
Suseruby2.5linux enterprise server 15 sp1-bcl2.5.9-4.20.1fixed
Suseruby2.5linux enterprise server 15 sp1-ltss2.5.9-4.20.1fixed
Suseruby2.5linux enterprise server for sap applications 152.5.9-4.20.1fixed
Suseruby2.5linux enterprise server for sap applications 15 sp12.5.9-4.20.1fixed
Suseruby2.5linux enterprise micro 5.02.5.9-4.20.1fixed
Suseruby2.5enterprise storage 62.5.9-4.20.1fixed

Fixed-version evidence

DistributionPackageTypeReleaseFixed versionUrgencyOriginBugs
Debianruby2.7deb112.7.4-1Not reportedDEBIAN-CVE-2021-31799Not reported
Alpinerubyapk3.112.6.8-r0Not reportedALPINE-CVE-2021-31799Not reported
Alpinerubyapk3.122.7.4-r0Not reportedALPINE-CVE-2021-31799Not reported
Alpinerubyapk3.132.7.4-r0Not reportedALPINE-CVE-2021-31799Not reported
Alpinerubyapk3.142.7.4-r0Not reportedALPINE-CVE-2021-31799Not reported
Alpinerubyapk3.152.7.4-r0Not reportedALPINE-CVE-2021-31799Not reported
Alpinerubyapk3.162.7.4-r0Not reportedALPINE-CVE-2021-31799Not reported
Alpinerubyapk3.172.7.4-r0Not reportedALPINE-CVE-2021-31799Not reported
Alpinerubyapk3.182.7.4-r0Not reportedALPINE-CVE-2021-31799Not reported
Alpinerubyapk3.192.7.4-r0Not reportedALPINE-CVE-2021-31799Not reported
Alpinerubyapk3.202.7.4-r0Not reportedALPINE-CVE-2021-31799Not reported
Alpinerubyapk3.212.7.4-r0Not reportedALPINE-CVE-2021-31799Not reported
Alpinerubyapk3.222.7.4-r0Not reportedALPINE-CVE-2021-31799Not reported
Alpinerubyapk3.232.7.4-r0Not reportedALPINE-CVE-2021-31799Not reported
Alpinerubyapk3.242.7.4-r0Not reportedALPINE-CVE-2021-31799Not reported
Ubunturuby2.3debpro2.3.1-2~ubuntu16.04.16+esm1Not reportedUSN-5020-1Not reported
Ubunturuby2.5deb18.042.5.1-1ubuntu1.10Not reportedUSN-5020-1Not reported
Ubunturuby2.7deb20.042.7.0-5ubuntu1.5Not reportedUSN-5020-1Not reported
Ubunturuby2.3debpro2.3.1-2~ubuntu16.04.16+esm1Not reportedUBUNTU-CVE-2021-31799Not reported
Ubunturuby2.5deb18.042.5.1-1ubuntu1.10Not reportedUBUNTU-CVE-2021-31799Not reported
Ubunturuby2.7deb20.042.7.0-5ubuntu1.5Not reportedUBUNTU-CVE-2021-31799Not reported
Debianruby2.3deb92.3.3-1+deb9u10Not reportedDLA-2780-1Not reported
Suseruby2.5rpmlinux enterprise module for basesystem 15 sp32.5.9-150000.4.23.1Not reportedSUSE-SU-2022:1512-1Not reported
Suseruby2.5rpmlinux enterprise high performance computing 15-espos2.5.9-150000.4.23.1Not reportedSUSE-SU-2022:1512-1Not reported
Suseruby2.5rpmlinux enterprise high performance computing 15-ltss2.5.9-150000.4.23.1Not reportedSUSE-SU-2022:1512-1Not reported
Suseruby2.5rpmlinux enterprise high performance computing 15 sp1-espos2.5.9-150000.4.23.1Not reportedSUSE-SU-2022:1512-1Not reported
Suseruby2.5rpmlinux enterprise high performance computing 15 sp1-ltss2.5.9-150000.4.23.1Not reportedSUSE-SU-2022:1512-1Not reported
Suseruby2.5rpmlinux enterprise high performance computing 15 sp2-espos2.5.9-150000.4.23.1Not reportedSUSE-SU-2022:1512-1Not reported
Suseruby2.5rpmlinux enterprise high performance computing 15 sp2-ltss2.5.9-150000.4.23.1Not reportedSUSE-SU-2022:1512-1Not reported
Suseruby2.5rpmlinux enterprise real time 15 sp22.5.9-150000.4.23.1Not reportedSUSE-SU-2022:1512-1Not reported
Suseruby2.5rpmlinux enterprise server 15-ltss2.5.9-150000.4.23.1Not reportedSUSE-SU-2022:1512-1Not reported
Suseruby2.5rpmlinux enterprise server 15 sp1-bcl2.5.9-150000.4.23.1Not reportedSUSE-SU-2022:1512-1Not reported
Suseruby2.5rpmlinux enterprise server 15 sp1-ltss2.5.9-150000.4.23.1Not reportedSUSE-SU-2022:1512-1Not reported
Suseruby2.5rpmlinux enterprise server 15 sp2-bcl2.5.9-150000.4.23.1Not reportedSUSE-SU-2022:1512-1Not reported
Suseruby2.5rpmlinux enterprise server 15 sp2-ltss2.5.9-150000.4.23.1Not reportedSUSE-SU-2022:1512-1Not reported
Suseruby2.5rpmlinux enterprise server for sap applications 152.5.9-150000.4.23.1Not reportedSUSE-SU-2022:1512-1Not reported
Suseruby2.5rpmlinux enterprise server for sap applications 15 sp12.5.9-150000.4.23.1Not reportedSUSE-SU-2022:1512-1Not reported
Suseruby2.5rpmlinux enterprise server for sap applications 15 sp22.5.9-150000.4.23.1Not reportedSUSE-SU-2022:1512-1Not reported
Suseruby2.5rpmmanager proxy 4.12.5.9-150000.4.23.1Not reportedSUSE-SU-2022:1512-1Not reported
Suseruby2.5rpmmanager retail branch server 4.12.5.9-150000.4.23.1Not reportedSUSE-SU-2022:1512-1Not reported
Suseruby2.5rpmmanager server 4.12.5.9-150000.4.23.1Not reportedSUSE-SU-2022:1512-1Not reported
Suseruby2.5rpmlinux enterprise micro 5.02.5.9-150000.4.23.1Not reportedSUSE-SU-2022:1512-1Not reported
Suseruby2.5rpmenterprise storage 62.5.9-150000.4.23.1Not reportedSUSE-SU-2022:1512-1Not reported
Suseruby2.5rpmenterprise storage 72.5.9-150000.4.23.1Not reportedSUSE-SU-2022:1512-1Not reported
Opensuseruby2.5rpmleap 15.32.5.9-150000.4.23.1Not reportedSUSE-SU-2022:1512-1Not reported
Opensuseruby2.5rpmleap 15.42.5.9-150000.4.23.1Not reportedSUSE-SU-2022:1512-1Not reported
Opensuseruby3.0rpmtumbleweed3.0.2-1.1Not reportedOPENSUSE-SU-2024:11623-1Not reported
Opensuseruby2.5rpmleap 15.32.5.9-4.20.1Not reportedOPENSUSE-SU-2021:3838-1Not reported
Opensuseruby2.5rpmleap 15.22.5.9-lp152.2.9.1Not reportedOPENSUSE-SU-2021:1535-1Not reported
Opensuseruby2.7rpmtumbleweed2.7.4-1.1Not reportedOPENSUSE-SU-2024:11622-1Not reported
Suseruby2.5rpmlinux enterprise module for basesystem 15 sp22.5.9-4.20.1Not reportedSUSE-SU-2021:3838-1Not reported
Suseruby2.5rpmlinux enterprise module for basesystem 15 sp32.5.9-4.20.1Not reportedSUSE-SU-2021:3838-1Not reported
Suseruby2.5rpmlinux enterprise high performance computing 15-espos2.5.9-4.20.1Not reportedSUSE-SU-2021:3838-1Not reported
Suseruby2.5rpmlinux enterprise high performance computing 15-ltss2.5.9-4.20.1Not reportedSUSE-SU-2021:3838-1Not reported
Suseruby2.5rpmlinux enterprise high performance computing 15 sp1-espos2.5.9-4.20.1Not reportedSUSE-SU-2021:3838-1Not reported
Suseruby2.5rpmlinux enterprise high performance computing 15 sp1-ltss2.5.9-4.20.1Not reportedSUSE-SU-2021:3838-1Not reported
Suseruby2.5rpmlinux enterprise server 15-ltss2.5.9-4.20.1Not reportedSUSE-SU-2021:3838-1Not reported
Suseruby2.5rpmlinux enterprise server 15 sp1-bcl2.5.9-4.20.1Not reportedSUSE-SU-2021:3838-1Not reported
Suseruby2.5rpmlinux enterprise server 15 sp1-ltss2.5.9-4.20.1Not reportedSUSE-SU-2021:3838-1Not reported
Suseruby2.5rpmlinux enterprise server for sap applications 152.5.9-4.20.1Not reportedSUSE-SU-2021:3838-1Not reported
Suseruby2.5rpmlinux enterprise server for sap applications 15 sp12.5.9-4.20.1Not reportedSUSE-SU-2021:3838-1Not reported
Suseruby2.5rpmlinux enterprise micro 5.02.5.9-4.20.1Not reportedSUSE-SU-2021:3838-1Not reported
Suseruby2.5rpmenterprise storage 62.5.9-4.20.1Not reportedSUSE-SU-2021:3838-1Not reported

OpenFactory catalog packages

No matching packages in this catalog.

Observed:

References