Vulnerability Description
RubyGems version 2.6.12 and earlier is vulnerable to maliciously crafted gem specifications that include terminal escape characters. Printing the gem specification would execute terminal escape sequences.
CVSS Score
CRITICAL
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Rubygems | Rubygems | <= 2.6.12 |
| Debian | Debian Linux | 8.0 |
| Redhat | Enterprise Linux Desktop | 7.0 |
| Redhat | Enterprise Linux Server | 7.0 |
| Redhat | Enterprise Linux Server Aus | 7.4 |
| Redhat | Enterprise Linux Server Eus | 7.4 |
| Redhat | Enterprise Linux Server Tus | 7.4 |
| Redhat | Enterprise Linux Workstation | 7.0 |
Related Weaknesses (CWE)
References
- http://blog.rubygems.org/2017/08/27/2.6.13-released.htmlPatchVendor Advisory
- http://www.securityfocus.com/bid/100576Third Party AdvisoryVDB Entry
- http://www.securitytracker.com/id/1039249Third Party AdvisoryVDB Entry
- https://access.redhat.com/errata/RHSA-2017:3485Third Party Advisory
- https://access.redhat.com/errata/RHSA-2018:0378Third Party Advisory
- https://access.redhat.com/errata/RHSA-2018:0583Third Party Advisory
- https://access.redhat.com/errata/RHSA-2018:0585Third Party Advisory
- https://github.com/rubygems/rubygems/commit/1bcbc7fe637b03145401ec9c094066285934PatchThird Party Advisory
- https://github.com/rubygems/rubygems/commit/ef0aa611effb5f54d40c7fba6e8235eb43c5PatchThird Party Advisory
- https://hackerone.com/reports/226335ExploitPatchThird Party Advisory
- https://lists.debian.org/debian-lts-announce/2018/07/msg00012.htmlMailing ListThird Party Advisory
- https://security.gentoo.org/glsa/201710-01Third Party Advisory
- https://www.debian.org/security/2017/dsa-3966Third Party Advisory
- http://blog.rubygems.org/2017/08/27/2.6.13-released.htmlPatchVendor Advisory
- http://www.securityfocus.com/bid/100576Third Party AdvisoryVDB Entry
FAQ
What is CVE-2017-0899?
CVE-2017-0899 is a vulnerability with a CVSS score of 9.8 (CRITICAL). RubyGems version 2.6.12 and earlier is vulnerable to maliciously crafted gem specifications that include terminal escape characters. Printing the gem specification would execute terminal escape sequen...
How severe is CVE-2017-0899?
CVE-2017-0899 has been rated CRITICAL with a CVSS base score of 9.8/10. This is considered a critical vulnerability requiring immediate attention.
Is there a patch for CVE-2017-0899?
Check the references section above for vendor advisories and patch information. Affected products include: Rubygems Rubygems, Debian Debian Linux, Redhat Enterprise Linux Desktop, Redhat Enterprise Linux Server, Redhat Enterprise Linux Server Aus.