CVE-2011-4121: Ruby-Lang Ruby

Critical severity, CVSS 9.8. EPSS: 2.5% chance of exploitation in the next 30 days.

The OpenSSL extension of Ruby (Git trunk) versions after 2011-09-01 up to 2011-11-03 always generated an exponent value of '1' to be used for private RSA key generation. A remote attacker could use this flaw to bypass or corrupt integrity of services, depending on strong private RSA keys generation mechanism.

Affected products

• Ruby-Lang Ruby: from 1.8.7.334, before 1.9.3 (fixed in 1.9.3)

Published 2019-11-26. Last modified 2026-06-16.