Red Hat Security Advisory: rh-ruby24-ruby security, bug fix, and enhancement update

Fixed packages 42

Vulnerabilities 8

• Critical 9.8
  CVE-2017-0899 EPSS 11%

  RubyGems Code Injection vulnerability

  RubyGems version 2.6.12 and earlier is vulnerable to maliciously crafted gem specifications that include terminal escape characters. Printing the gem specification would execute terminal escape sequences.

  HackerOne RubyGems ruby2.3 ruby Debian Ubuntu Alpine RubyGems
  Aug 31, 2017
• Critical 9.8
  CVE-2017-0903 EPSS 16%

  RubyGems vulnerable to Deserialization of Untrusted Data

  RubyGems versions between 2.0.0 and 2.6.13 are vulnerable to a possible remote code execution vulnerability. YAML deserialization of gem specifications can bypass class white lists. Specially crafted serialized objects can possibly be used to escalate to remo…

  HackerOne RubyGems ruby2.3 jruby Debian Ubuntu RubyGems
  Oct 11, 2017
• High 8.8
  CVE-2017-10784 EPSS 16%

  WEBrick RCE Vulnerability

  The Basic authentication code in WEBrick library in Ruby before 2.2.8, 2.3.x before 2.3.5, and 2.4.x through 2.4.1 allows remote attackers to inject terminal emulator escape sequences into its log and possibly execute arbitrary commands via a crafted user nam…

  ruby2.3 ruby ruby2.0 ruby1.9.1 Ubuntu Alpine RubyGems
  Sep 19, 2017
• High 8.1
  CVE-2017-0902

  RubyGems has Origin Validation Error vulnerability

  RubyGems version 2.6.12 and earlier is vulnerable to a DNS hijacking vulnerability that allows a MITM attacker to force the RubyGems client to download and install gems from a server that the attacker controls.

  HackerOne RubyGems ruby2.3 ruby Debian Ubuntu Alpine RubyGems
  Aug 31, 2017
• High 7.5
  CVE-2017-0900

  RubyGems Improper Input Validation vulnerability

  RubyGems version 2.6.12 and earlier is vulnerable to maliciously crafted gem specifications to cause a denial of service attack against RubyGems clients who have issued a `query` command.

  ruby2.3 ruby jruby ruby1.9.1 Debian Ubuntu Alpine RubyGems
  Aug 31, 2017
• High 7.5
  CVE-2017-0901 Public exploit EPSS 29%

  RubyGems may allow a maliciously crafted gem to overwrite files

  RubyGems version 2.6.12 and earlier fails to validate specification names, allowing a maliciously crafted gem to potentially overwrite any file on the filesystem.

  HackerOne RubyGems ruby2.3 ruby Debian Ubuntu Alpine RubyGems
  Aug 31, 2017
• Unscored —
  CVE-2017-0898

  Ruby before 2.4.2, 2.3.5, and 2.2.8 is vulnerable to a malicious format string which contains a precious specifier (*) …

  HackerOne Ruby ruby2.3 ruby Ubuntu Alpine
  Sep 15, 2017
• Unscored —
  CVE-2017-14064

  Ruby through 2.2.7, 2.3.x through 2.3.4, and 2.4.x through 2.4.1 can expose arbitrary memory during a JSON.generate cal…

  ruby2.3 ruby ruby2.0 ruby1.9.1 Ubuntu Alpine
  Aug 31, 2017

References

• article
  https://access.redhat.com/security/updates/classification/#moderate
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1487552
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1487587
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1487588
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1487589
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1487590
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1492012
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1492015
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1500488
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1506785
• advisory
  https://security.access.redhat.com/data/csaf/v2/advisories/2017/rhsa-2017_3485.json
• report
  https://access.redhat.com/security/cve/CVE-2017-0898
• advisory
  https://www.cve.org/CVERecord?id=CVE-2017-0898
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2017-0898
• article
  https://www.ruby-lang.org/en/news/2017/09/14/sprintf-buffer-underrun-cve-2017-0898/
• report
  https://access.redhat.com/security/cve/CVE-2017-0899
• advisory
  https://www.cve.org/CVERecord?id=CVE-2017-0899
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2017-0899
• article
  http://blog.rubygems.org/2017/08/27/2.6.13-released.html
• report
  https://access.redhat.com/security/cve/CVE-2017-0900
• advisory
  https://www.cve.org/CVERecord?id=CVE-2017-0900
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2017-0900
• report
  https://access.redhat.com/security/cve/CVE-2017-0901
• advisory
  https://www.cve.org/CVERecord?id=CVE-2017-0901
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2017-0901
• report
  https://access.redhat.com/security/cve/CVE-2017-0902
• advisory
  https://www.cve.org/CVERecord?id=CVE-2017-0902
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2017-0902
• report
  https://access.redhat.com/security/cve/CVE-2017-0903
• advisory
  https://www.cve.org/CVERecord?id=CVE-2017-0903
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2017-0903
• article
  http://blog.rubygems.org/2017/10/09/2.6.14-released.html
• report
  https://access.redhat.com/security/cve/CVE-2017-10784
• advisory
  https://www.cve.org/CVERecord?id=CVE-2017-10784
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2017-10784
• article
  https://www.ruby-lang.org/en/news/2017/09/14/webrick-basic-auth-escape-sequence-injection-cve-2017-10784/
• report
  https://access.redhat.com/security/cve/CVE-2017-14064
• advisory
  https://www.cve.org/CVERecord?id=CVE-2017-14064
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2017-14064