PT-2015-6338 · Ruby+2 · Rubygems+2

Jonathan Claudius · Publicado 2015-06-24 · Atualizado 2025-09-29 · CVE-2015-3900

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions RubyGems versions 2.0.x through 2.0.16 RubyGems versions 2.2.x through 2.2.4 RubyGems versions 2.4.x through 2.4.7

Description The issue allows remote attackers to redirect requests to arbitrary domains via a crafted DNS SRV record, which is referred to as a "DNS hijack attack." This occurs because the hostname is not validated when fetching gems or making API requests.

Recommendations For RubyGems versions 2.0.x through 2.0.16, update to version 2.0.16 or later. For RubyGems versions 2.2.x through 2.2.4, update to version 2.2.4 or later. For RubyGems versions 2.4.x through 2.4.7, update to version 2.4.7 or later.

Exploit

Correção

RCE

Enumeração de Fraquezas

CWE-350

CWE-254

CWE-20

Identificadores relacionados

ALSA-2025_16880

ALT-PU-2016-2061

CVE-2015-3900

GHSA-QV62-XFJ6-32XM

GHSA-WP3J-RVFP-624H

MGASA-2015-0345

OPENSUSE-SU-2017_1128-1

OPENSUSE-SU-2024:10090-1

OPENSUSE-SU-2024:10481-1

RHSA-2015:1657

SUSE-SU-2017:1067-1

Produtos afetados

Alt Linux

Rubygems

Suse

Referências · 51

• 🔥 https://github.com/rubysec/ruby-advisory-db/blob/master/gems/rubygems-update/CVE-2015-3900.yml · Exploit
• 🔥 https://github.com/rubysec/ruby-advisory-db/blob/master/gems/rubygems-update/CVE-2015-4020.yml · Exploit
• https://github.com/rubygems/rubygems · Nota
• https://github.com/rubygems/rubygems/commit/5c7bfb5 · Nota
• https://suse.com/security/cve/CVE-2015-1855 · Nota
• https://suse.com/security/cve/CVE-2015-3900 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2015-3900 · Nota de Segurança
• http://lists.fedoraproject.org/pipermail/package-announce/2015-August/164236.html · Aviso do Fabricante
• https://advisories.mageia.org/MGASA-2015-0345.html · Nota de Segurança
• https://osv.dev/vulnerability/openSUSE-SU-2024:10090-1 · Aviso do Fabricante
• http://lists.fedoraproject.org/pipermail/package-announce/2015-August/163502.html · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2015-4020 · Nota de Segurança
• https://bugzilla.suse.com/909695 · Nota
• http://blog.rubygems.org/2015/06/08/2.2.5-released.html · Nota
• https://bugzilla.suse.com/1014863 · Nota