PT-2017-3268 · Ruby+5 · Rubygems+5

Mame · Published 2017-08-31 · Updated 2022-05-13 · CVE-2017-0901

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

Name of the Vulnerable Software and Affected Versions RubyGems versions 2.6.12 and earlier

Description The issue exists due to insufficient input validation in the package manager. Exploitation of this issue may allow a remote attacker to overwrite any file on the filesystem. A maliciously crafted gem can potentially be used to achieve this.

Recommendations For RubyGems versions 2.6.12 and earlier, consider updating to a version that fixes the specification name validation issue to prevent potential file overwrites. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

RCE

Path traversal

Weakness Enumeration

CWE-20

CWE-22

Related Identifiers

ALT-PU-2017-2195

BDU:2018-00026

CESA-2018_0378

CVE-2017-0901

DLA-1112-1

DLA-1114-1

DLA-1421-1

DSA-3966-1

GHSA-PM9X-4392-2C2P

MGASA-2017-0482

RHSA-2017:3485

RHSA-2018:0378

RHSA-2018:0583

RHSA-2018:0585

RHSA-2018_0378

SUSE-SU-2020:1570-1

SUSE-SU-2020_1570-1

USN-3439-1

USN-3553-1

USN-3685-1

Affected Products

Alt Linux

Centos

Red Hat

Rubygems

Suse

Ubuntu

References · 139

• 🔥 https://github.com/rails-lts/json_cve_2020_10663 · Exploit
• 🔥 https://exploit-db.com/exploits/42611 · Exploit
• 🔥 https://hackerone.com/reports/243156 · Exploit
• https://github.com/rubygems/rubygems/commit/ad5c0a53a86ca5b218c7976765c0365b91d22cb2 · Patch
• https://ubuntu.com/security/CVE-2017-0903 · Vendor Advisory
• https://ubuntu.com/security/CVE-2017-10784 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2017-0901 · Security Note
• https://osv.dev/vulnerability/DLA-1421-1 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2017-0901 · Security Note
• https://ubuntu.com/security/notices/USN-3685-1 · Vendor Advisory
• https://ubuntu.com/security/CVE-2017-0898 · Vendor Advisory
• https://advisories.mageia.org/MGASA-2017-0482.html · Security Note
• https://debian.org/security/2017/dsa-3966 · Vendor Advisory
• https://security.gentoo.org/glsa/201710-01 · Vendor Advisory
• https://ubuntu.com/security/notices/USN-3439-1 · Vendor Advisory