Ecosyste.ms: Advisories

Security Advisories: GSA_kwCzR0hTQS0zNjltLTJndjYtbXcyOM4AAU7q

WEBrick RCE Vulnerability

The Basic authentication code in WEBrick library in Ruby before 2.2.8, 2.3.x before 2.3.5, and 2.4.x through 2.4.1 allows remote attackers to inject terminal emulator escape sequences into its log and possibly execute arbitrary commands via a crafted user name.

Permalink: https://github.com/advisories/GHSA-369m-2gv6-mw28
JSON: https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS0zNjltLTJndjYtbXcyOM4AAU7q
Source: GitHub Advisory Database
Origin: Unspecified
Severity: High
Classification: General
Published: over 2 years ago
Updated: over 1 year ago

CVSS Score: 8.8
CVSS vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Identifiers: GHSA-369m-2gv6-mw28, CVE-2017-10784
References:

• https://nvd.nist.gov/vuln/detail/CVE-2017-10784
• https://access.redhat.com/errata/RHSA-2017:3485
• https://access.redhat.com/errata/RHSA-2018:0378
• https://access.redhat.com/errata/RHSA-2018:0583
• https://access.redhat.com/errata/RHSA-2018:0585
• https://lists.debian.org/debian-lts-announce/2018/07/msg00012.html
• https://security.gentoo.org/glsa/201710-18
• https://usn.ubuntu.com/3528-1/
• https://usn.ubuntu.com/3685-1/
• https://www.debian.org/security/2017/dsa-4031
• https://www.ruby-lang.org/en/news/2017/09/14/ruby-2-2-8-released/
• https://www.ruby-lang.org/en/news/2017/09/14/ruby-2-3-5-released/
• https://www.ruby-lang.org/en/news/2017/09/14/webrick-basic-auth-escape-sequence-injection-cve-2017-10784/
• https://web.archive.org/web/20210621131814/http://www.securityfocus.com/bid/100853
• https://web.archive.org/web/20210919031115/http://www.securitytracker.com/id/1042004
• https://web.archive.org/web/20211025092552/http://www.securitytracker.com/id/1039363
• https://github.com/ruby/ruby/commit/6617c41292
• https://github.com/ruby/webrick/commit/4ac0f3843ab82d1c31e1cfc719409208adef7813
• https://hackerone.com/reports/223363
• https://github.com/rubysec/ruby-advisory-db/blob/master/gems/webrick/CVE-2017-10784.yml
• https://github.com/advisories/GHSA-369m-2gv6-mw28

Repository: https://github.com/ruby/ruby
Blast Radius: 41.1

Affected Packages