SB2017101816 - Gentoo update for Ruby
Published: October 18, 2017 Updated: October 18, 2017
Breakdown by Severity
- Low
- Medium
- High
- Critical
Description
This security bulletin contains information about 5 secuirty vulnerabilities.
1) Input validation error (CVE-ID: CVE-2016-2337)
The vulnerability allows a remote non-authenticated attacker to execute arbitrary code.
Type confusion exists in _cancel_eval Ruby's TclTkIp class method. Attacker passing different type of object than String as "retval" argument can cause arbitrary code execution. <a href="http://cwe.mitre.org/data/definitions/843.html">CWE-843: Access of Resource Using Incompatible Type ('Type Confusion')</a>
2) Improper input validation (CVE-ID: CVE-2017-0898)
The vulnerability allows a remote attacker to cause DoS condition or obtain potentially sensitive information on the target system.The weakness exists due to buffer underrun in the Kernel.sprintf() method. A remote attacker can provide a specially crafted format string value to cause the target interpreter to crash or potentially access data from the heap.
Successful exploitation of the vulnerability results in information disclosure or denial of service.
3) Information disclosure (CVE-ID: CVE-2017-10784)
The vulnerability allows a remote attacker to cause DoS condition or obtain potentially sensitive information on the target system.The weakness exists due to escape sequence injection vulnerability in the Basic authentication of WEBrick. A remote attacker can supply a specially crafted user name value to the WEBrick Basic authentication function, inject escape sequence into the log file and view log contents.
Successful exploitation of the vulnerability results in information disclosure or denial of service.
4) Improper input validation (CVE-ID: CVE-2017-14033)
The vulnerability allows a remote attacker to cause DoS condition on the target system.The weakness exists due to buffer underrun. A remote attacker can provide a specially crafted string to the OpenSSL::ASN1 decode function to cause the target interpreter to crash.
Successful exploitation of the vulnerability results in denial of service.
5) Information disclosure (CVE-ID: CVE-2017-14064)
The vulnerability allows a remote attacker to obtain potentially sensitive information on the target system.The weakness exists due to an issue with using strdup in ext/json/ext/generator/generator.c during a JSON generate call. A remote attacker can send a specially crafted request, stop strdup after encountering a '' byte, returning a pointer to a string of length zero, which is not the length stored in space_len and expose arbitrary memory.
Successful exploitation of the vulnerability results in information disclosure.
Remediation
Install update from vendor's website.