PT-2019-5544 · Ruby+6 · Bundler+6

Published 2019-07-30 · Updated 2025-09-29 · CVE-2019-3881

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Bundler versions prior to 2.1.0

Description The issue is related to the use of predictable paths in /tmp/ with insecure permissions as a storage location for gems when locations under the user's home directory are not available. If Bundler is used in a scenario where the user does not have a writable home directory, an attacker could place malicious code in this directory that would be later loaded and executed.

Recommendations For Bundler versions prior to 2.1.0, update to version 2.1.0 or later to resolve the issue. As a temporary workaround, consider restricting access to the /tmp/ directory to minimize the risk of exploitation. Additionally, ensure that users have writable home directories to prevent the use of predictable paths in /tmp/.

Exploit

Fix

Files Accessible to External Parties

Uncontrolled Search Path Element

Weakness Enumeration

CWE-552

CWE-427

Related Identifiers

ALSA-2021:2588

ALSA-2025_16880

BDU:2020-04070

CESA-2021_2588

CVE-2019-3881

GHSA-G98M-96G9-WFJQ

OESA-2021-1419

OPENSUSE-SU-2020:0803-1

OPENSUSE-SU-2020:0861-1

OPENSUSE-SU-2020_0803-1

OPENSUSE-SU-2020_0861-1

RHSA-2021:2230

RHSA-2021:2588

RHSA-2021_2588

RLSA-2021:2588

SUSE-SU-2020:1582-1

SUSE-SU-2020:1582-2

SUSE-SU-2020_1582-1

SUSE-SU-2020_1582-2

USN-4870-1

Affected Products

Almalinux

Bundler

Centos

Red Hat

Rocky Linux

Suse

Ubuntu

References · 56

• 🔥 https://github.com/rubysec/ruby-advisory-db/blob/master/gems/bundler/CVE-2019-3881.yml · Exploit
• https://osv.dev/vulnerability/openSUSE-SU-2020:0803-1 · Vendor Advisory
• https://errata.almalinux.org/8/ALSA-2021-2588.html · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2019-3881 · Security Note
• https://osv.dev/vulnerability/GHSA-g98m-96g9-wfjq · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2019-3881 · Vendor Advisory
• https://osv.dev/vulnerability/USN-4870-1 · Vendor Advisory
• https://linux.oracle.com/errata/ELSA-2021-2588.html · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2019-3881 · Vendor Advisory
• https://errata.rockylinux.org/RLSA-2021:2588 · Vendor Advisory
• https://bdu.fstec.ru/vul/2020-04070 · Security Note
• https://osv.dev/vulnerability/SUSE-SU-2020:1582-1 · Vendor Advisory
• https://osv.dev/vulnerability/OESA-2021-1419 · Vendor Advisory
• https://bugzilla.redhat.com/show_bug.cgi?id=1651826 · Patch
• https://ubuntu.com/security/CVE-2019-3881 · Vendor Advisory