PT-2018-3135 · Ruby+4 · Rubygems+4

David Fifield

+1

·

Publicado

2018-02-15

·

Atualizado

2022-05-14

·

CVE-2018-1000074

CVSS v3.1

7.8

Alta

VetorAV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions RubyGems versions 2.2.9 and earlier RubyGems versions 2.3.6 and earlier RubyGems versions 2.4.3 and earlier RubyGems versions 2.5.0 and earlier RubyGems prior to trunk revision 62422
Description The issue is related to the deserialization of untrusted data in the owner command of the RubyGems package management system. This can be exploited by an attacker to execute arbitrary code using a specially crafted YAML file. The attack requires the victim to run the gem owner command on a gem with the malicious YAML file.
Recommendations For RubyGems versions 2.2.9 and earlier, update to a version later than 2.7.6. For RubyGems versions 2.3.6 and earlier, update to a version later than 2.7.6. For RubyGems versions 2.4.3 and earlier, update to a version later than 2.7.6. For RubyGems versions 2.5.0 and earlier, update to a version later than 2.7.6. For RubyGems prior to trunk revision 62422, update to a version later than 2.7.6. As a temporary workaround, consider avoiding the use of the gem owner command on untrusted gems until the issue is resolved.

Exploit

Correção

Deserialization of Untrusted Data

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾

Enumeração de Fraquezas

Identificadores relacionados

BDU:2019-04230
CESA-2019_2028
CVE-2018-1000074
DLA-1352-1
DLA-1480-1
DLA-1796-1
DSA-4219-1
DSA-4259-1
GHSA-QJ2W-MW2R-PV39
MGASA-2019-0062
MGASA-2020-0243
OPENSUSE-SU-2019:1771-1
OPENSUSE-SU-2019_1771-1
RHSA-2018:3729
RHSA-2018:3730
RHSA-2018:3731
RHSA-2019:2028
RHSA-2019_2028
RHSA-2020:0542
RHSA-2020:0591
RHSA-2020:0663
SUSE-SU-2019:1804-1
SUSE-SU-2020:1570-1
SUSE-SU-2020_1570-1
USN-3621-1
USN-3621-2
USN-3685-1

Produtos afetados

Centos
Red Hat
Rubygems
Suse
Ubuntu