Unscored USN-3515-1 1 CVE

ruby1.9.1, ruby2.0, ruby2.3 vulnerability

Published Jan 4, 2018 · Updated Apr 22, 2026

Ecosystem: Ubuntu

Summary

It was discovered that Ruby allows FTP command injection.
An attacker could use this to cause arbitrary command execution.

Fixed packages 3

Release	Package	Fixed in
Ubuntu · 14.04 LTS 14.04:LTS	ruby1.9.1	1.9.3.484-2ubuntu1.6
Ubuntu · 14.04 LTS 14.04:LTS	ruby2.0	2.0.0.484-1ubuntu2.5
Ubuntu · 16.04 LTS 16.04:LTS	ruby2.3	2.3.1-2~16.04.4

Vulnerabilities 1

Unscored —

CVE-2017-17405 Public exploit EPSS 74%

Ruby before 2.4.3 allows Net::FTP command injection. Net::FTP#get, getbinaryfile, gettextfile, put, putbinaryfile, and …

ruby2.3 ruby ruby2.0 ruby1.9.1 Ubuntu Alpine

Dec 15, 2017

References

report
https://ubuntu.com/security/CVE-2017-17405