net-ldap Improper Certificate Validation vulnerability

MEDIUM 5.9CVE-2017-17718 · GHSA-m7p8-9w66-9frm · Published 17/12/2017 · updated 17/06/2026

In short

CVE-2017-17718 is a MEDIUM (CVSS 5.9) vulnerability affecting net-ldap, net-ldap (net-ldap project).
Chance of exploitation in the next 30 days (EPSS): 1.3%, higher than 71.6% of all vulnerabilities.
Fix: update to 0.16.0 or later.

Package	Affected versions	Patched versions
net-ldap RubyGems	`< 0.16.0`	`0.16.0`
net-ldap net-ldap_project	`= 0.0.5= 0.1.0= 0.1.1= 0.10.0= 0.10.1= 0.11= 0.12.0= 0.12.1= 0.13.0= 0.14.0= 0.15.0= 0.2= 0.2.1= 0.2.2= 0.3.0= 0.3.1= 0.5.1= 0.6.0= 0.6.1= 0.7.0= 0.8.0= 0.9.0`	No fix yet

The Net::LDAP (aka net-ldap) gem before 0.16.0 for Ruby has Missing SSL Certificate Validation.

NVD description

The Net::LDAP (aka net-ldap) gem before 0.16.0 for Ruby has Missing SSL Certificate Validation.

Running one of these products? Scan your site to see whether it exposes a vulnerable version.