CVE-2011-0995: Low severity vulnerability that affects sqlite3-ruby

October 24, 2017 (updated September 2, 2021)

The sqlite3-ruby gem in the rubygem-sqlite3 package in SUSE Linux Enterprise (SLE) SP1 uses weak permissions for unspecified files, which allows local users to gain privileges via unknown vectors.

References

secunia.com/advisories/44418
support.novell.com/security/cve/CVE-2011-0995.html
www.osvdb.org/72180
www.securityfocus.com/bid/47694
bugzilla.novell.com/show_bug.cgi?id=685928
exchange.xforce.ibmcloud.com/vulnerabilities/67263
github.com/advisories/GHSA-6x46-7rrv-m4h8
nvd.nist.gov/vuln/detail/CVE-2011-0995

Code Behaviors & Features

Detect and mitigate CVE-2011-0995 with GitLab Dependency Scanning

Secure your software supply chain by verifying that all open source dependencies used in your projects contain no disclosed vulnerabilities. Dependency Scanning using SBOM also detects vulnerabilities from proprietary advisories that this site does not include. Learn more about Dependency Scanning using SBOM →