PT-2018-2985 · Ruby+6 · Ruby+6

Published 2018-10-17 · Updated 2022-09-06 · CVE-2018-16395

Positive Technologies (AI Summary)

CVSS v2.0

10

Critical

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Ruby versions prior to 2.3.8 Ruby versions 2.4.x prior to 2.4.5 Ruby versions 2.5.x prior to 2.5.2 Ruby versions 2.6.x prior to 2.6.0-preview3

Description The issue is related to the comparison of two OpenSSL::X509::Name objects using the == operator, which may return true for non-equal objects depending on the ordering. This could be leveraged to create an illegitimate certificate that may be accepted as legitimate and then used in signing or encryption operations. The vulnerability is associated with errors in data processing and could allow a remote attacker to forge an X509 certificate.

Recommendations For Ruby versions prior to 2.3.8, update to version 2.3.8 or later. For Ruby versions 2.4.x prior to 2.4.5, update to version 2.4.5 or later. For Ruby versions 2.5.x prior to 2.5.2, update to version 2.5.2 or later. For Ruby versions 2.6.x prior to 2.6.0-preview3, update to version 2.6.0-preview3 or later.

Exploit

Fix

Weakness Enumeration

CWE-19

Related Identifiers

ALT-PU-2019-1050

BDU:2019-03218

CESA-2018_3738

CVE-2018-16395

DLA-1558-1

DSA-4332-1

GHSA-MMRQ-6999-72V8

MGASA-2018-0411

OPENSUSE-SU-2019:1771-1

OPENSUSE-SU-2019_1771-1

RHSA-2018:3729

RHSA-2018:3730

RHSA-2018:3731

RHSA-2018:3738

RHSA-2018_3738

RHSA-2019:1948

RHSA-2019:2565

SUSE-SU-2019:1804-1

SUSE-SU-2020:1570-1

SUSE-SU-2020_1570-1

SUSE-SU-2022:15034-1

USN-3808-1

Affected Products

Alt Linux

Centos

Openssl

Red Hat

Ruby

Suse

Ubuntu

References · 149

• 🔥 https://github.com/rubysec/ruby-advisory-db/blob/master/gems/openssl/CVE-2018-16395.yml · Exploit
• 🔥 https://github.com/rails-lts/json_cve_2020_10663 · Exploit
• https://access.redhat.com/errata/RHSA-2018:3730 · Vendor Advisory
• https://ubuntu.com/security/notices/USN-3808-1 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2018-16395 · Vendor Advisory
• https://bdu.fstec.ru/vul/2019-03218 · Security Note
• https://ubuntu.com/security/CVE-2018-16396 · Vendor Advisory
• https://access.redhat.com/errata/RHSA-2019:2565 · Vendor Advisory
• https://osv.dev/vulnerability/MGASA-2018-0411 · Vendor Advisory
• https://access.redhat.com/errata/RHSA-2019:1948 · Vendor Advisory
• https://ruby-lang.org/en/news/2018/10/17/ruby-2-3-8-released · Vendor Advisory
• https://ruby-lang.org/en/news/2018/10/17/openssl-x509-name-equality-check-does-not-work-correctly-cve-2018-16395 · Vendor Advisory
• https://usn.ubuntu.com/3808-1 · Vendor Advisory
• https://osv.dev/vulnerability/ALPINE-CVE-2018-16395 · Vendor Advisory
• https://access.redhat.com/errata/RHSA-2018:3729 · Vendor Advisory