REDHAT-BUG-1528218: Command Injection
First published: Thu Dec 21 2017(Updated: )
The lazy_initialize function in lib/resolv.rb in Ruby through 2.4.3 uses Kernel#open, which might allow Command Injection attacks, as demonstrated by a Resolv::Hosts::new argument beginning with a '|' character, a different vulnerability than <a href="https://access.redhat.com/security/cve/CVE-2017-17405">CVE-2017-17405</a>. NOTE: situations with untrusted input may be highly unlikely. Upstream bug: <a href="https://github.com/ruby/ruby/pull/1777">https://github.com/ruby/ruby/pull/1777</a> Upstream patch: <a href="https://github.com/ruby/ruby/commit/e7464561b5151501beb356fc750d5dd1a88014f7">https://github.com/ruby/ruby/commit/e7464561b5151501beb356fc750d5dd1a88014f7</a>
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Ruby | <=2.4.3 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- https://access.redhat.com/security/cve/CVE-2017-17405
- https://github.com/ruby/ruby/pull/1777
- https://github.com/ruby/ruby/commit/e7464561b5151501beb356fc750d5dd1a88014f7
- https://bugzilla.redhat.com/show_bug.cgi/show_bug.cgi?id=1528226
- https://bugzilla.redhat.com/show_bug.cgi/show_bug.cgi?id=1528227
- https://access.redhat.com/security/updates/classification/
- https://access.redhat.com/errata/RHSA-2018:0378
- https://access.redhat.com/errata/RHSA-2018:0583
- https://access.redhat.com/errata/RHSA-2018:0584
- https://access.redhat.com/errata/RHSA-2018:0585
- https://bugzilla.redhat.com/show_bug.cgi?id=1528218
Frequently Asked Questions
What is the severity of REDHAT-BUG-1528218?
The severity of REDHAT-BUG-1528218 is considered critical due to the potential for command injection attacks.
How do I fix REDHAT-BUG-1528218?
To fix REDHAT-BUG-1528218, upgrade Ruby to version 2.5 or later where this vulnerability has been addressed.
What systems are affected by REDHAT-BUG-1528218?
REDHAT-BUG-1528218 affects Ruby versions up to and including 2.4.3.
What is the nature of the attack associated with REDHAT-BUG-1528218?
The nature of the attack associated with REDHAT-BUG-1528218 involves command injection through the use of Kernel#open in the lazy_initialize function.
Is there a workaround for REDHAT-BUG-1528218?
A possible workaround for REDHAT-BUG-1528218 is to avoid the use of the Resolv::Hosts::new method with arguments starting with a '|' character.
- agent/type
- agent/last-modified-date
- agent/first-publish-date
- collector/redhat-bugzilla
- source/Red Hat
- alias/CVE-2017-17790
- agent/severity
- agent/weakness
- agent/references
- agent/description
- agent/event
- agent/source
- agent/tags
- agent/softwarecombine
- agent/guess-ai
- agent/software-canonical-lookup
- agent/software-canonical-lookup-request
- vendor/ruby
- canonical/ruby