CVE-2010-3299: Debian Linux

Medium severity, CVSS 6.5. EPSS: 1.1% chance of exploitation in the next 30 days.

The encrypt/decrypt functions in Ruby on Rails 2.3 are vulnerable to padding oracle attacks.

Affected products

• Debian Debian Linux: version 8.0 only; version 9.0 only; version 10.0 only
• Rubyonrails Rails: version 2.3 only

Published 2019-11-12. Last modified 2026-06-16.