← All advisories

Medium severity5.5NVD Advisory· Published Nov 21, 2019· Updated Jun 17, 2026

CVE-2014-0083

CVE-2014-0083

Description

The Ruby net-ldap gem before 0.11 uses a weak salt when generating SSHA passwords.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected packages

Versions sourced from the GitHub Security Advisory.

Package	Affected versions	Patched versions
net-ldapRubyGems	< 0.16.2	0.16.2

Affected products

6

Net LDAP Project/Net LDAP
cpe:2.3:a:net-ldap_project:net-ldap:*:*:*:*:*:ruby:*:*
Range: <0.16.2
Debian/linux3 versions
cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*+ 2 more
- cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*
- cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*
- cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*
ruby-net-ldap/ruby-net-ldapv5
Range: 0.16.2
ghsa-coords
pkg:gem/net-ldap
Range: < 0.16.2

Patches

Vulnerability mechanics

References

6

bugzilla.redhat.com/show_bug.cginvdIssue TrackingPatchThird Party AdvisoryWEB
github.com/ruby-ldap/ruby-net-ldap/commit/b412ca05f6b430eaa1ce97ac95885b4cf187b04anvdPatchWEB
bugzilla.suse.com/show_bug.cginvdIssue TrackingThird Party AdvisoryWEB
github.com/advisories/GHSA-qwgm-mxm4-3q2cghsaADVISORY
nvd.nist.gov/vuln/detail/CVE-2014-0083ghsaADVISORY
security-tracker.debian.org/tracker/CVE-2014-0083nvdThird Party AdvisoryWEB

News mentions

0

No linked articles in our index yet.