CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2015-9097

The mail gem before 2.5.5 for Ruby (aka A Really Ruby Mail Library) is vulnerable to SMTP command injection via CRLF sequences in a RCPT TO or MAIL FROM command, as demonstrated by CRLF sequences immediately before and after a DATA substring.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.01

EPSS Ranking 76.3%

CVSS Severity

CVSS v3 Score 6.1

CVSS v2 Score 4.3

References

Products affected by CVE-2015-9097

Mail Project » Mail » Version: 2.0.3

cpe:2.3:a:mail_project:mail:2.0.3
Mail Project » Mail » Version: 2.0.5

cpe:2.3:a:mail_project:mail:2.0.5
Mail Project » Mail » Version: 2.1.1

cpe:2.3:a:mail_project:mail:2.1.1
Mail Project » Mail » Version: 2.1.2

cpe:2.3:a:mail_project:mail:2.1.2
Mail Project » Mail » Version: 2.1.3

cpe:2.3:a:mail_project:mail:2.1.3
Mail Project » Mail » Version: 2.1.4

cpe:2.3:a:mail_project:mail:2.1.4
Mail Project » Mail » Version: 2.1.5

cpe:2.3:a:mail_project:mail:2.1.5
Mail Project » Mail » Version: 2.1.5.1

cpe:2.3:a:mail_project:mail:2.1.5.1
Mail Project » Mail » Version: 2.1.5.2

cpe:2.3:a:mail_project:mail:2.1.5.2
Mail Project » Mail » Version: 2.1.5.3

cpe:2.3:a:mail_project:mail:2.1.5.3
Mail Project » Mail » Version: 2.2.0

cpe:2.3:a:mail_project:mail:2.2.0
Mail Project » Mail » Version: 2.2.1

cpe:2.3:a:mail_project:mail:2.2.1
Mail Project » Mail » Version: 2.2.10

cpe:2.3:a:mail_project:mail:2.2.10
Mail Project » Mail » Version: 2.2.11

cpe:2.3:a:mail_project:mail:2.2.11
Mail Project » Mail » Version: 2.2.12

cpe:2.3:a:mail_project:mail:2.2.12
Mail Project » Mail » Version: 2.2.13

cpe:2.3:a:mail_project:mail:2.2.13
Mail Project » Mail » Version: 2.2.14

cpe:2.3:a:mail_project:mail:2.2.14
Mail Project » Mail » Version: 2.2.15

cpe:2.3:a:mail_project:mail:2.2.15
Mail Project » Mail » Version: 2.2.16

cpe:2.3:a:mail_project:mail:2.2.16
Mail Project » Mail » Version: 2.2.17

cpe:2.3:a:mail_project:mail:2.2.17
Mail Project » Mail » Version: 2.2.18

cpe:2.3:a:mail_project:mail:2.2.18
Mail Project » Mail » Version: 2.2.19

cpe:2.3:a:mail_project:mail:2.2.19
Mail Project » Mail » Version: 2.2.2

cpe:2.3:a:mail_project:mail:2.2.2
Mail Project » Mail » Version: 2.2.20

cpe:2.3:a:mail_project:mail:2.2.20
Mail Project » Mail » Version: 2.2.3

cpe:2.3:a:mail_project:mail:2.2.3
Mail Project » Mail » Version: 2.2.4

cpe:2.3:a:mail_project:mail:2.2.4
Mail Project » Mail » Version: 2.2.5

cpe:2.3:a:mail_project:mail:2.2.5
Mail Project » Mail » Version: 2.2.5.1

cpe:2.3:a:mail_project:mail:2.2.5.1
Mail Project » Mail » Version: 2.2.5.2

cpe:2.3:a:mail_project:mail:2.2.5.2
Mail Project » Mail » Version: 2.2.6

cpe:2.3:a:mail_project:mail:2.2.6
Mail Project » Mail » Version: 2.2.7

cpe:2.3:a:mail_project:mail:2.2.7
Mail Project » Mail » Version: 2.2.8

cpe:2.3:a:mail_project:mail:2.2.8
Mail Project » Mail » Version: 2.2.9

cpe:2.3:a:mail_project:mail:2.2.9
Mail Project » Mail » Version: 2.3.0

cpe:2.3:a:mail_project:mail:2.3.0
Mail Project » Mail » Version: 2.3.1

cpe:2.3:a:mail_project:mail:2.3.1
Mail Project » Mail » Version: 2.3.2

cpe:2.3:a:mail_project:mail:2.3.2
Mail Project » Mail » Version: 2.3.3

cpe:2.3:a:mail_project:mail:2.3.3
Mail Project » Mail » Version: 2.4.0

cpe:2.3:a:mail_project:mail:2.4.0
Mail Project » Mail » Version: 2.4.1

cpe:2.3:a:mail_project:mail:2.4.1
Mail Project » Mail » Version: 2.4.2

cpe:2.3:a:mail_project:mail:2.4.2
Mail Project » Mail » Version: 2.4.3

cpe:2.3:a:mail_project:mail:2.4.3
Mail Project » Mail » Version: 2.4.4

cpe:2.3:a:mail_project:mail:2.4.4
Mail Project » Mail » Version: 2.5.0

cpe:2.3:a:mail_project:mail:2.5.0
Mail Project » Mail » Version: 2.5.1

cpe:2.3:a:mail_project:mail:2.5.1
Mail Project » Mail » Version: 2.5.2

cpe:2.3:a:mail_project:mail:2.5.2
Mail Project » Mail » Version: 2.5.3

cpe:2.3:a:mail_project:mail:2.5.3
Mail Project » Mail » Version: 2.5.4

cpe:2.3:a:mail_project:mail:2.5.4

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2015-9097

Products

Pricing

Contact Us