Moole Vulnerability Database

Find real vulnerabilities before they ship

Critical

CVE-2017-0899

RubyGems version 2.6.12 and earlier is vulnerable to maliciously crafted gem specifications that include terminal escape characters. Printing the gem specification would execute terminal escape sequences.

VectorNETWORK

PublishedAug 31, 2017, 20:29

Published Bysupport@hackerone.com

Base Score

Score9.8

Affected Versions

Package (Ecosystem)IntroducedFixedLimit

rubygems-update(RubyGems)02.6.13N/A

References

http://blog.rubygems.org/2017/08/27/2.6.13-released.html
http://www.securityfocus.com/bid/100576
http://www.securitytracker.com/id/1039249
https://access.redhat.com/errata/RHSA-2017:3485
https://access.redhat.com/errata/RHSA-2018:0378
https://access.redhat.com/errata/RHSA-2018:0583
https://access.redhat.com/errata/RHSA-2018:0585
https://github.com/rubygems/rubygems/commit/1bcbc7fe637b03145401ec9c094066285934a7f1
https://github.com/rubygems/rubygems/commit/ef0aa611effb5f54d40c7fba6e8235eb43c5a491
https://hackerone.com/reports/226335
https://lists.debian.org/debian-lts-announce/2018/07/msg00012.html
https://security.gentoo.org/glsa/201710-01
https://www.debian.org/security/2017/dsa-3966

Weakness Type

CWE-94

CVSS Metrics

Base Score

9.8

Vector String

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Base SeverityCritical

Version

3.0

Attack Vector (AV)

NETWORK