USN-3439-1: Ruby vulnerabilities
It was discovered that Ruby incorrectly handled certain inputs. An attacker could use this to cause a buffer overrun. (CVE-2017-0898) Yusuke Endoh discovered that Ruby incorrectly handled certain files. An attacker could use this to execute terminal escape sequences. (CVE-2017-0899) Yusuke Endoh discovered that Ruby incorrectly handled certain inputs. An attacker could use this to cause a denial of service. (CVE-2017-0900) It was discovered that Ruby incorrectly handled certain files. An attacker could use this to overwrite any file on the filesystem. (CVE-2017-0901) It was discovered that Ruby incorrectly handled certain inputs. An attacker could use this to execute arbitrary code. (CVE-2017-10784) It was discovered that Ruby incorrectly handled certain inputs. An attacker could use this to cause a denial of service. (CVE-2017-14033) It was discovered that Ruby incorrectly handled certain files. An attacker could use this to expose sensitive information. (CVE-2017-14064)
Affected Software
Event History
Child vulnerabilities
Contains the following vulnerabilities.
Frequently Asked Questions
What is the severity of CVE-2017-0898?
The severity of CVE-2017-0898 is high.
What is the severity of CVE-2017-0899?
The severity of CVE-2017-0899 is high.
How do I fix the Ruby vulnerability (CVE-2017-0898)?
To fix the Ruby vulnerability (CVE-2017-0898), you should update to version 1.9.3.484-2ubuntu1.5 of libruby1.9.1.
How do I fix the Ruby vulnerability (CVE-2017-0899)?
To fix the Ruby vulnerability (CVE-2017-0899), you should update to version 1.9.3.484-2ubuntu1.5 of ruby1.9.1.
Where can I find more information about the Ruby vulnerabilities?
You can find more information about the Ruby vulnerabilities at the following links: [CVE-2017-0898](https://ubuntu.com/security/CVE-2017-0898), [CVE-2017-0899](https://ubuntu.com/security/CVE-2017-0899), [CVE-2017-0900](https://ubuntu.com/security/CVE-2017-0900).