Lucene search

RubySecRUBY:RUBY-2013-2065-93414

HistoryMay 13, 2013 - 8:00 p.m.

CVE-2013-2065 Ruby: Object taint bypassing in DL and Fiddle

2013-05-1320:00:00

RubySec

rubysec.com

6.4 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:P/A:N

0.005 Low

EPSS

Percentile

75.5%

JSON

(1) DL and (2) Fiddle in Ruby 1.9 before 1.9.3 patchlevel 426, and
2.0 before 2.0.0 patchlevel 195, do not perform taint checking for
native functions, which allows context-dependent attackers to bypass
intended $SAFE level restrictions.

CPENameOperatorVersion
rubyle1.8.-1
rubyge1.9.0
rubyle1.9.3.425
rubyge1.9.4.0
rubylt2.0.0.195

Name	Operator	Version
ruby	le	1.8.-1
ruby	ge	1.9.0
ruby	le	1.9.3.425
ruby	ge	1.9.4.0
ruby	lt	2.0.0.195

References

www.ruby-lang.org/en/news/2013/05/14/taint-bypass-dl-fiddle-cve-2013-2065

6.4 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:P/A:N

0.005 Low

EPSS

Percentile

75.5%

JSON

Related for RUBY:RUBY-2013-2065-93414