Vulnerability in ruby1.8 - security update
Summary
DLA-1359-1: ruby1.8 - security update. Affects ruby1.8 versions < 1.8.7.358-7.1+deb7u6. Fixed in 1.8.7.358-7.1+deb7u6. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
Ruby is an interpreted, high-level, general-purpose programming language. It is known for its simplicity and productivity. Ruby1.8 is a specific version of Ruby that is vulnerable to multiple security issues.
Vulnerability Detail
The vulnerabilities in ruby1.8 include:
-
HTTP response splitting vulnerability in WEBrick: This vulnerability allows an attacker to inject fake HTTP responses if a script accepts external input and outputs it without modifications.
-
Directory traversal vulnerability in Dir.mktmpdir: Attackers can create arbitrary directories or files by using a '..' (dot dot) in the prefix argument.
-
Out-of-memory DoS vulnerability in WEBrick: A large request can cause a denial-of-service (DoS) attack by consuming excessive memory.
-
Buffer under-read vulnerability in String#unpack: If a big number is passed with the specifier '@', it is treated as a negative value, leading to an out-of-buffer read. Attackers can read data on heaps if a script accepts external input as the argument of String#unpack.
-
Unintentional socket creation and access in UNIXServer.open and UNIXSocket.open: The methods of the socket library bundled with Ruby do not check for NUL bytes in the path argument, making them vulnerable to unintentional socket creation and access.
-
Unintentional directory traversal in some methods in Dir: The lack of checking for NUL bytes in the parameter of certain methods in Dir allows for unintentional directory traversal.
How To Fix
Minimum fixed version
1.8.7.358-7.1+deb7u6
This is the first release that contains the fix.
sudo apt-get install --only-upgrade ruby1.8Tip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Conclusion
Upgrading to the fixed version of ruby1.8 is crucial to mitigate these vulnerabilities. For further support on vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for ruby1.8 →
FAQ
The HTTP response splitting vulnerability allows an attacker to inject fake HTTP responses, potentially leading to various attacks such as cross-site scripting (XSS) or session hijacking.
By using the '..' (dot dot) in the prefix argument, an attacker can create arbitrary directories or files outside of the intended directory structure, potentially leading to unauthorized access or code execution.
An attacker can send a large request to consume excessive memory, causing the server to become unresponsive and potentially impacting the availability of the system.
By passing a big number with the specifier '@', an attacker can read data on heaps, potentially exposing sensitive information or causing memory corruption.
These vulnerabilities can lead to unintended socket creation, which may allow an attacker to establish unauthorized network connections or manipulate existing connections.
Related vulnerabilities
Recent vulnerabilities recorded for ruby1.8.
