CVE-2016-10194 — CRITICAL (9.8)

Vulnerability Description

The festivaltts4r gem for Ruby allows remote attackers to execute arbitrary commands via shell metacharacters in a string to the (1) to_speech or (2) to_mp3 method in lib/festivaltts4r/festival4r.rb.

CVSS Score

9.8

CRITICAL

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality

HIGH

Integrity

HIGH

Availability

HIGH

Affected Products

Vendor	Product	Versions
Festivaltts4R Project	Festivaltts4R	All versions

Related Weaknesses (CWE)

CWE-77

References

http://www.openwall.com/lists/oss-security/2017/01/31/14Mailing ListPatchThird Party Advisory
http://www.openwall.com/lists/oss-security/2017/02/02/5Mailing ListPatchThird Party Advisory
https://github.com/spejman/festivaltts4r/issues/1Issue TrackingPatchThird Party Advisory
http://www.openwall.com/lists/oss-security/2017/01/31/14Mailing ListPatchThird Party Advisory
http://www.openwall.com/lists/oss-security/2017/02/02/5Mailing ListPatchThird Party Advisory
https://github.com/spejman/festivaltts4r/issues/1Issue TrackingPatchThird Party Advisory

FAQ

What is CVE-2016-10194?

CVE-2016-10194 is a vulnerability with a CVSS score of 9.8 (CRITICAL). The festivaltts4r gem for Ruby allows remote attackers to execute arbitrary commands via shell metacharacters in a string to the (1) to_speech or (2) to_mp3 method in lib/festivaltts4r/festival4r.rb.

How severe is CVE-2016-10194?

CVE-2016-10194 has been rated CRITICAL with a CVSS base score of 9.8/10. This is considered a critical vulnerability requiring immediate attention.

Is there a patch for CVE-2016-10194?

Check the references section above for vendor advisories and patch information. Affected products include: Festivaltts4R Project Festivaltts4R.