REDHAT-BUG-1643089
First published: Thu Oct 25 2018(Updated: )
Array#pack method converts the receiver’s contents into a string with specified format. If the receiver contains some tainted objects, the returned string also should be tainted. String#unpack method which converts the receiver into an array also should propagate its tainted flag to the objects contained in the returned array. But, with B, b, H and h directives, the tainted flags are not propagated. So, if a script processes unreliable inputs by Array#pack and/or String#unpack with these directives and checks the reliability with tainted flags, the check might be wrong. External References: <a href="https://www.ruby-lang.org/en/news/2018/10/17/not-propagated-taint-flag-in-some-formats-of-pack-cve-2018-16396/">https://www.ruby-lang.org/en/news/2018/10/17/not-propagated-taint-flag-in-some-formats-of-pack-cve-2018-16396/</a>
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Ruby |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- https://www.ruby-lang.org/en/news/2018/10/17/not-propagated-taint-flag-in-some-formats-of-pack-cve-2018-16396/
- https://bugzilla.redhat.com/show_bug.cgi/show_bug.cgi?id=1643091
- https://github.com/ruby/ruby/commit/a2958f6743664006d21fc0bafd4ca6214df1d429
- https://access.redhat.com/errata/RHSA-2018:3729
- https://access.redhat.com/errata/RHSA-2018:3730
- https://access.redhat.com/errata/RHSA-2018:3731
- https://access.redhat.com/errata/RHSA-2019:2028
- https://access.redhat.com/errata/RHSA-2020:2769
- https://access.redhat.com/errata/RHSA-2020:2839
- https://bugzilla.redhat.com/show_bug.cgi?id=1643089
Frequently Asked Questions
What is the severity of REDHAT-BUG-1643089?
The severity of REDHAT-BUG-1643089 is classified as a moderate security vulnerability.
How do I fix REDHAT-BUG-1643089?
To fix REDHAT-BUG-1643089, you should update to a patched version of Ruby that addresses this vulnerability.
What are the potential consequences of REDHAT-BUG-1643089?
The potential consequences of REDHAT-BUG-1643089 include the risk of unintentionally exposing sensitive information through untainted strings.
In which versions of Ruby is REDHAT-BUG-1643089 present?
REDHAT-BUG-1643089 is present in affected versions of Ruby before the patch was applied.
Who is affected by REDHAT-BUG-1643089?
Developers using vulnerable versions of Ruby that utilize the Array#pack and String#unpack methods may be affected by REDHAT-BUG-1643089.
- agent/references
- agent/type
- agent/last-modified-date
- collector/redhat-bugzilla
- source/Red Hat
- alias/CVE-2018-16396
- agent/first-publish-date
- agent/source
- agent/severity
- agent/description
- agent/event
- agent/softwarecombine
- agent/tags
- agent/guess-ai
- agent/software-canonical-lookup
- agent/software-canonical-lookup-request
- vendor/ruby
- canonical/ruby