USN-9060-1: ruby-kramdown vulnerability
It was discovered that kramdown processed the template option in documents by default. An attacker could possibly use this issue to read arbitrary files or execute arbitrary code.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
ubuntu/ruby-kramdownto a version that resolves this vulnerability.Fixed in 1.10.0-1ubuntu0.1~esm1 - Upgrade
Upgrade
ubuntu/ruby-kramdownto a version that resolves this vulnerability.Fixed in 1.15.0-1ubuntu0.1~esm1 - Upgrade
Upgrade
ubuntu/ruby-kramdownto a version that resolves this vulnerability.Fixed in Ubuntu Pro
Event History
Frequently Asked Questions
What attacker-controlled input is relevant to exploitation?
The issue is triggered when kramdown processes documents containing the template option. An attacker would need to be able to supply or influence a document processed by the affected software.
Are default document-processing configurations affected?
Yes. The template option was processed by default, so deployments that process untrusted documents may be exposed without explicitly enabling template processing.
What could successful exploitation allow?
An attacker could potentially read arbitrary files or execute arbitrary code through the affected kramdown processing behavior.