ISOMAN

CVE

CVE-2017-0903

RubyGems versions between 2.0.0 and 2.6.13 are vulnerable to a possible remote code execution vulnerability. YAML deserialization of gem specifications can bypass class white lists. Specially crafted serialized objects can possibly be used to escalate to remote code execution.

Severity
CRITICAL
CVSS
9.8
Published
Modified
NVD detailAll CVEs

Linked Releases

DistributionReleaseStatusEvidence
Ubuntu16.04.7 amd64 desktopunknownsource
Ubuntu16.04.6 i386 desktopunknownsource
Ubuntu16.04.7 amd64 serverunknownsource
Ubuntu16.04.6 i386 serverunknownsource
Ubuntu14.04.6 amd64 desktopunknownsource
Ubuntu14.04.6 i386 desktopunknownsource
Ubuntu14.04.6 amd64 serverunknownsource
Ubuntu14.04.6 i386 serverunknownsource

References

  1. http://blog.rubygems.org/2017/10/09/2.6.14-released.html
  2. http://blog.rubygems.org/2017/10/09/unsafe-object-deserialization-vulnerability.html
  3. http://www.securityfocus.com/bid/101275
  4. https://access.redhat.com/errata/RHSA-2017:3485
  5. https://access.redhat.com/errata/RHSA-2018:0378
  6. https://access.redhat.com/errata/RHSA-2018:0583
  7. https://access.redhat.com/errata/RHSA-2018:0585
  8. https://github.com/rubygems/rubygems/commit/510b1638ac9bba3ceb7a5d73135dafff9e5bab49
  9. https://hackerone.com/reports/274990
  10. https://lists.debian.org/debian-lts-announce/2018/07/msg00012.html
  11. https://usn.ubuntu.com/3553-1/
  12. https://usn.ubuntu.com/3685-1/
  13. https://www.debian.org/security/2017/dsa-4031
  14. http://blog.rubygems.org/2017/10/09/2.6.14-released.html
  15. http://blog.rubygems.org/2017/10/09/unsafe-object-deserialization-vulnerability.html
  16. http://www.securityfocus.com/bid/101275
  17. https://access.redhat.com/errata/RHSA-2017:3485
  18. https://access.redhat.com/errata/RHSA-2018:0378
  19. https://access.redhat.com/errata/RHSA-2018:0583
  20. https://access.redhat.com/errata/RHSA-2018:0585