USN-3621-1: Ruby vulnerabilities

Published Apr 5, 2018

Updated

It was discovered that Ruby incorrectly handled certain inputs. An attacker could possibly use this to access sensitive information. (CVE-2018-1000073) It was discovered that Ruby incorrectly handled certain files. An attacker could possibly use this to execute arbitrary code. (CVE-2018-1000074) It was discovered that Ruby incorrectly handled certain files. An attacker could possibly use this to cause a denial of service. (CVE-2018-1000075) It was discovered that Ruby incorrectly handled certain crypto signatures. An attacker could possibly use this to execute arbitrary code. (CVE-2018-1000076) It was discovered that Ruby incorrectly handled certain inputs. An attacker could possibly use this to execute arbitrary code. (CVE-2018-1000077, CVE-2018-1000078, CVE-2018-1000079)

Affected Software

1 affected component

Ruby Ruby

Child vulnerabilities

Contains the following vulnerabilities.

Frequently Asked Questions

What is the vulnerability ID of this advisory?

The vulnerability ID of this advisory is USN-3621-1.

What is the severity of USN-3621-1?

The severity of USN-3621-1 is not mentioned in the provided information.

How does the vulnerability CVE-2018-1000073 impact affected systems?

CVE-2018-1000073 vulnerability in Ruby may allow an attacker to access sensitive information.

How does the vulnerability CVE-2018-1000074 impact affected systems?

CVE-2018-1000074 vulnerability in Ruby may allow an attacker to execute arbitrary code.

Where can I find more information about the vulnerabilities?

More information about the vulnerabilities can be found at the following references: - CVE-2018-1000073: https://ubuntu.com/security/CVE-2018-1000073 - CVE-2018-1000074: https://ubuntu.com/security/CVE-2018-1000074