View at Official ubuntu advisory, NVD, CVE.org · CVE detail
Freshness: upstream tracker timestamp is available; use API updated time as primary recency signal.
CVE-2015-7551 low priority: Ubuntu including 5 source packages (ruby1.9.1, ruby2.0, ruby2.1, ruby2.2, ruby2.3), 40 status rows across 8 suites (precise, trusty, upstream, vivid, wily, xenial, yakkety, zesty): DNE 26, ignored 5, needs-triage 3, not-affected 3, released 3.
The Fiddle::Handle implementation in ext/fiddle/handle.c in Ruby before 2.0.0-p648, 2.1 before 2.1.8, and 2.2 before 2.2.4, as distributed in Apple OS X before 10.11.4 and other products, mishandles tainting, which allows context-dependent attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted string, related to the DL module and the libffi library. NOTE: this vulnerability exists because of a CVE-2009-5147 regression.