CVE-2016-6317: Null Pointer Dereference

Published Sep 7, 2016

Updated

Action Record in Ruby on Rails 4.2.x before 4.2.7.1 does not properly consider differences in parameter handling between the Active Record component and the JSON implementation, which allows remote attackers to bypass intended database-query restrictions and perform NULL checks or trigger missing WHERE clauses via a crafted request, as demonstrated by certain "[nil]" values, a related issue to CVE-2012-2660, CVE-2012-2694, and CVE-2013-0155.

Affected Software

27 affected components

rubyonrails Rails=4.2.0

rubyonrails Rails=4.2.0-beta1

rubyonrails Rails=4.2.0-beta2

rubyonrails Rails=4.2.0-beta3

rubyonrails Rails=4.2.0-beta4

rubyonrails Rails=4.2.0-rc1

rubyonrails Rails=4.2.0-rc2

rubyonrails Rails=4.2.0-rc3

rubyonrails Rails=4.2.1

rubyonrails Rails=4.2.1-rc1

rubyonrails Rails=4.2.1-rc2

rubyonrails Rails=4.2.1-rc3

rubyonrails Rails=4.2.1-rc4

rubyonrails Rails=4.2.2

rubyonrails Rails=4.2.3

rubyonrails Rails=4.2.3-rc1

rubyonrails Rails=4.2.4

rubyonrails Rails=4.2.4-rc1

rubyonrails Rails=4.2.5

rubyonrails Rails=4.2.5-rc1

rubyonrails Rails=4.2.5-rc2

rubyonrails Rails=4.2.5.1

rubyonrails Rails=4.2.5.2

rubyonrails Rails=4.2.6

rubyonrails Rails=4.2.6-rc1

rubyonrails Rails=4.2.7

rubyonrails Rails=4.2.7-rc1

Event History

Sep 7, 2016

CVE Published

via MITRE·07:00 PM

Data Sourced

via MITRE·07:00 PM

Description

Frequently Asked Questions

What is the severity of CVE-2016-6317?

CVE-2016-6317 is classified as a medium severity vulnerability.

How do I fix CVE-2016-6317?

To fix CVE-2016-6317, upgrade Ruby on Rails to version 4.2.7.1 or later.

Who is affected by CVE-2016-6317?

CVE-2016-6317 affects Ruby on Rails versions 4.2.0 through 4.2.7.

What type of vulnerability is CVE-2016-6317?

CVE-2016-6317 is a SQL injection vulnerability due to improper parameter handling.

Can CVE-2016-6317 allow unauthorized access?

Yes, CVE-2016-6317 can allow remote attackers to bypass database-query restrictions.