CVE-2015-7551: Input Validation
DL::dlopen could open a library with tainted library name even if $SAFE > 0. This vulnerability affects Ruby versions 1.8, 1.9, 2.1, 2.2.
Upstream patch: https://github.com/ruby/ruby/commit/4600cf725a86ce31266153647ae5aa1197b1215b
Additional information and CVE assignment:
http://seclists.org/oss-sec/2015/q3/222
Other sources
The Fiddle::Handle implementation in ext/fiddle/handle.c in Ruby before 2.0.0-p648, 2.1 before 2.1.8, and 2.2 before 2.2.4, as distributed in Apple OS X before 10.11.4 and other products, mishandles tainting, which allows context-dependent attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted string, related to the DL module and the libffi library. NOTE: this vulnerability exists because of a CVE-2009-5147 regression.
— Launchpad
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2015-7551?
CVE-2015-7551 is classified as a high severity vulnerability due to its potential to allow arbitrary code execution by attackers.
What versions of Ruby are affected by CVE-2015-7551?
CVE-2015-7551 affects Ruby versions before 2.0.0-p648, 2.1 before 2.1.8, and 2.2 before 2.2.4.
How do I fix CVE-2015-7551?
To fix CVE-2015-7551, update Ruby to a version that is 2.0.0-p648 or later, 2.1.8 or later, or 2.2.4 or later.
Are macOS versions vulnerable to CVE-2015-7551?
Yes, macOS versions prior to 10.11.4 are susceptible to CVE-2015-7551.
Who can exploit CVE-2015-7551?
CVE-2015-7551 can be exploited by context-dependent attackers who can leverage the mishandling of tainting in the Fiddle::Handle implementation.