PT-2017-3268 · Ruby+5 · Rubygems+5

Mame · Publicado 2017-08-31 · Atualizado 2022-05-13 · CVE-2017-0901

Positive Technologies (AI Summary)

CVSS v3.1

7.5

Alta

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

Name of the Vulnerable Software and Affected Versions RubyGems versions 2.6.12 and earlier

Description The issue exists due to insufficient input validation in the package manager. Exploitation of this issue may allow a remote attacker to overwrite any file on the filesystem. A maliciously crafted gem can potentially be used to achieve this.

Recommendations For RubyGems versions 2.6.12 and earlier, consider updating to a version that fixes the specification name validation issue to prevent potential file overwrites. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

RCE

Path traversal

Enumeração de Fraquezas

CWE-20

CWE-22

Identificadores relacionados

ALT-PU-2017-2195

BDU:2018-00026

CESA-2018_0378

CVE-2017-0901

DLA-1112-1

DLA-1114-1

DLA-1421-1

DSA-3966-1

GHSA-PM9X-4392-2C2P

MGASA-2017-0482

RHSA-2017:3485

RHSA-2018:0378

RHSA-2018:0583

RHSA-2018:0585

RHSA-2018_0378

SUSE-SU-2020:1570-1

SUSE-SU-2020_1570-1

USN-3439-1

USN-3553-1

USN-3685-1

Produtos afetados

Alt Linux

Centos

Red Hat

Rubygems

Suse

Ubuntu

Referências · 139

• 🔥 https://github.com/rails-lts/json_cve_2020_10663 · Exploit
• 🔥 https://exploit-db.com/exploits/42611 · Exploit
• 🔥 https://hackerone.com/reports/243156 · Exploit
• https://github.com/rubygems/rubygems/commit/ad5c0a53a86ca5b218c7976765c0365b91d22cb2 · Correção
• https://github.com/rubygems/rubygems · Nota
• http://blog.rubygems.org/2017/10/09/unsafe-object-deserialization-vulnerability.html · Nota
• https://ubuntu.com/security/CVE-2017-0903 · Aviso do Fabricante
• https://ubuntu.com/security/CVE-2017-10784 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2017-0901 · Nota de Segurança
• https://bugzilla.suse.com/1056782 · Nota
• https://osv.dev/vulnerability/DLA-1421-1 · Aviso do Fabricante
• https://cve.org/CVERecord?id=CVE-2017-0901 · Nota de Segurança
• https://suse.com/security/cve/CVE-2017-0901 · Nota
• https://ubuntu.com/security/notices/USN-3685-1 · Aviso do Fabricante
• https://suse.com/security/cve/CVE-2017-10784 · Nota