Vulnerability in ruby1.9.1 - security update
Summary
DLA-1358-1: ruby1.9.1 - security update. Affects ruby1.9.1 versions < 1.9.3.194-8.1+deb7u8. Fixed in 1.9.3.194-8.1+deb7u8. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Habilume
Habit tracker with a companion that grows with you
Complete habits, earn Lume Points, and watch your Lume grow as you stay consistent.
Background
Ruby is an interpreted, high-level, general-purpose programming language. It is known for its simplicity and productivity. Ruby1.9.1 is a specific version of Ruby that is vulnerable to multiple security issues.
Vulnerability Detail
The vulnerabilities in ruby1.9.1 include:
- HTTP response splitting vulnerability in WEBrick: An attacker can inject fake HTTP responses if a script accepts external input and outputs it without modifications.
- Directory traversal vulnerability in Dir.mktmpdir method: Attackers can create arbitrary directories or files using '..' in the prefix argument.
- Out-of-memory DoS vulnerability in WEBrick: A large request can cause a denial of service attack.
- Buffer under-read vulnerability in String#unpack method: A big negative number passed as an argument can lead to reading data on heaps.
- Lack of NUL byte check in UNIXServer.open and UNIXSocket.open methods: Allows unintentional socket creation and access.
- Unintentional directory traversal in some methods in Dir: Lack of NUL byte check in parameters.
- Negative size vulnerability in ruby gem package tar header: Can cause an infinite loop.
- Improper verification of cryptographic signatures in Ruby gems package: Allows installation of mis-signed gems.
- Improper input validation vulnerability in ruby gems specification homepage attribute: Allows setting an invalid homepage URL.
- Cross-Site Scripting (XSS) vulnerability in gem server display of homepage attribute.
How To Fix
Minimum fixed version
1.9.3.194-8.1+deb7u8
This is the first release that contains the fix.
sudo apt-get install --only-upgrade ruby1.9.1Tip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
There are no specific workarounds mentioned for these vulnerabilities.
Conclusion
Upgrading to the fixed version of ruby1.9.1 is crucial to address these vulnerabilities. For further support on vulnerability remediation, you can contact DevNack.com.
See every vulnerability recorded for ruby1.9.1 →
FAQ
The HTTP response splitting vulnerability allows an attacker to inject fake HTTP responses, potentially leading to various attacks such as cross-site scripting (XSS) or session hijacking.
By using '..' in the prefix argument of the Dir.mktmpdir method, an attacker can create arbitrary directories or files outside of the intended directory structure.
An attacker can send a large request to the WEBrick server, causing it to consume excessive memory and potentially leading to a denial of service condition.
By passing a big negative number as an argument, an attacker can read data on heaps, potentially exposing sensitive information.
The lack of NUL byte check allows unintentional socket creation and access, which can be exploited by an attacker to gain unauthorized network access.
Related vulnerabilities
Recent vulnerabilities recorded for ruby1.9.1.
Habilume
Habit tracker with a companion that grows with you
Complete habits, earn Lume Points, and watch your Lume grow as you stay consistent.
