PT-2015-1107 · Openssl+4 · Openssl+4

Jeffrey Walton + 2 · Publicado 2015-04-09 · Atualizado 2024-06-15 · CVE-2015-1855

Positive Technologies (AI Summary)

CVSS v3.1

5.9

Média

Vetor base

AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N

Name of the Vulnerable Software and Affected Versions Ruby versions prior to 2.0.0 patchlevel 645 Ruby versions 2.1.x prior to 2.1.6 Ruby versions 2.2.x prior to 2.2.2

Description The issue concerns the improper validation of hostnames in the OpenSSL extension in Ruby, allowing remote attackers to spoof servers. This can be achieved through various vectors, including multiple wildcards, wildcards in IDNA names, case sensitivity, and non-ASCII characters. The vulnerability enables an attacker to substitute an SSL server using a specially crafted certificate.

Recommendations For Ruby versions prior to 2.0.0 patchlevel 645, update to a version that includes the necessary patches. For Ruby versions 2.1.x prior to 2.1.6, update to version 2.1.6 or later. For Ruby versions 2.2.x prior to 2.2.2, update to version 2.2.2 or later. As a temporary workaround, consider restricting the use of wildcard certificates in the OpenSSL extension until a patch is applied.

Correção

RCE

Improper Certificate Validation

Enumeração de Fraquezas

CWE-20

CWE-295

Identificadores relacionados

ALT-PU-2016-2061

BDU:2015-09978

CVE-2015-1855

DLA-224-1

DLA-235-1

DSA-3245-1

DSA-3246-1

DSA-3247-1

MGASA-2015-0178

OPENSUSE-SU-2017_1128-1

OPENSUSE-SU-2024:10090-1

OPENSUSE-SU-2024:10481-1

SUSE-SU-2015:1889-1

SUSE-SU-2017:0948-1

SUSE-SU-2017:1067-1

SUSE-SU-2017_0948-1

USN-3365-1

Produtos afetados

Alt Linux

Openssl

Ruby

Suse

Ubuntu

Referências · 111

• https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/dos/http/rails_json_float_dos.rb · Nota
• https://github.com/ruby/openssl/issues/49 · Nota
• https://security-tracker.debian.org/tracker/DSA-3245-1 · Aviso do Fabricante
• http://packetstormsecurity.com/files/126218/Ruby-OpenSSL-Private-Key-Spoofing.html · Nota
• https://lists.opensuse.org/archives/list/[e-mail]/thread/IKBQ5YAMGLRNEEVLWJI5N2R3Q6Y32KQN · Nota
• https://suse.com/security/cve/CVE-2016-2339.html · Nota
• https://suse.com/security/cve/CVE-2015-3900 · Nota
• https://puppetlabs.com/security/cve/cve-2015-1855 · Nota
• https://security-tracker.debian.org/tracker/DSA-3247-1 · Aviso do Fabricante
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2337 · Nota de Segurança
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1855 · Nota de Segurança
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-16254 · Nota de Segurança
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4363 · Nota de Segurança
• https://ubuntu.com/security/CVE-2015-1855 · Aviso do Fabricante
• https://osv.dev/vulnerability/SUSE-SU-2017:1067-1 · Aviso do Fabricante