kritik
CVE-2017-14064
ruby: Arbitrary heap exposure during a JSON.generate call
En geç 24 Eki 2026, 07:11 UTC tarihinden beri Trivy database'indeO derlemeden önce ne zaman girdiği kayıtlı değil.
Kaynağa göre önem derecesi
NVD9.8CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Red Hat5.9CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N
Trivy'nin kendi etiketi CRITICAL. Kritik diyenler: NVD. Daha düşük diyenler: Oracle (yüksek), Photon OS (yüksek), Amazon (orta), Red Hat (düşük), Ubuntu (düşük).
Açıklama
Ruby through 2.2.7, 2.3.x through 2.3.4, and 2.4.x through 2.4.1 can expose arbitrary memory during a JSON.generate call. The issues lies in using strdup in ext/json/ext/generator/generator.c, which will stop after encountering a '\0' byte, returning a pointer to a string of length zero, which is not the length stored in space_len.
Etkilenen paketler ve düzeltilmiş sürümler
| Kaynak | Paket | Düzeltildiği sürüm |
|---|---|---|
| alpine 3.10 | ruby | 2.4.2-r0 |
| alpine 3.11 | ruby | 2.4.2-r0 |
| alpine 3.12 | ruby | 2.4.2-r0 |
| alpine 3.13 | ruby | 2.4.2-r0 |
| alpine 3.14 | ruby | 2.4.2-r0 |
| alpine 3.15 | ruby | 2.4.2-r0 |
| alpine 3.16 | ruby | 2.4.2-r0 |
| alpine 3.17 | ruby | 2.4.2-r0 |
| alpine 3.18 | ruby | 2.4.2-r0 |
| alpine 3.19 | ruby | 2.4.2-r0 |
| alpine 3.20 | ruby | 2.4.2-r0 |
| alpine 3.21 | ruby | 2.4.2-r0 |
34 kaynaktaki 88 kaydın hepsini göster
| Kaynak | Paket | Düzeltildiği sürüm |
|---|---|---|
| alpine 3.10 | ruby | 2.4.2-r0 |
| alpine 3.11 | ruby | 2.4.2-r0 |
| alpine 3.12 | ruby | 2.4.2-r0 |
| alpine 3.13 | ruby | 2.4.2-r0 |
| alpine 3.14 | ruby | 2.4.2-r0 |
| alpine 3.15 | ruby | 2.4.2-r0 |
| alpine 3.16 | ruby | 2.4.2-r0 |
| alpine 3.17 | ruby | 2.4.2-r0 |
| alpine 3.18 | ruby | 2.4.2-r0 |
| alpine 3.19 | ruby | 2.4.2-r0 |
| alpine 3.20 | ruby | 2.4.2-r0 |
| alpine 3.21 | ruby | 2.4.2-r0 |
| alpine 3.22 | ruby | 2.4.2-r0 |
| alpine 3.23 | ruby | 2.4.2-r0 |
| alpine 3.24 | ruby | 2.4.2-r0 |
| alpine 3.3 | ruby | 2.2.8-r0 |
| alpine 3.4 | ruby | 2.3.5-r0 |
| alpine 3.5 | ruby | 2.3.5-r0 |
| alpine 3.5 | ruby2.2 | 2.2.8-r0 |
| alpine 3.6 | ruby | 2.4.2-r0 |
| alpine 3.6 | ruby2.2 | 2.2.8-r0 |
| alpine 3.7 | ruby | 2.4.2-r0 |
| alpine 3.8 | ruby | 2.4.2-r0 |
| alpine 3.9 | ruby | 2.4.2-r0 |
| alpine edge | ruby | 2.4.2-r0 |
| amazon linux 1 | ruby22 | 2.2.8-1.9.amzn1 |
| amazon linux 1 | ruby22-debuginfo | 2.2.8-1.9.amzn1 |
| amazon linux 1 | ruby22-devel | 2.2.8-1.9.amzn1 |
| amazon linux 1 | ruby22-doc | 2.2.8-1.9.amzn1 |
| amazon linux 1 | ruby22-irb | 2.2.8-1.9.amzn1 |
| amazon linux 1 | ruby22-libs | 2.2.8-1.9.amzn1 |
| amazon linux 1 | ruby23 | 2.3.5-1.17.amzn1 |
| amazon linux 1 | ruby23-debuginfo | 2.3.5-1.17.amzn1 |
| amazon linux 1 | ruby23-devel | 2.3.5-1.17.amzn1 |
| amazon linux 1 | ruby23-doc | 2.3.5-1.17.amzn1 |
| amazon linux 1 | ruby23-irb | 2.3.5-1.17.amzn1 |
| amazon linux 1 | ruby23-libs | 2.3.5-1.17.amzn1 |
| amazon linux 1 | ruby24 | 2.4.2-1.30.4.amzn1 |
| amazon linux 1 | ruby24-debuginfo | 2.4.2-1.30.4.amzn1 |
| amazon linux 1 | ruby24-devel | 2.4.2-1.30.4.amzn1 |
| amazon linux 1 | ruby24-doc | 2.4.2-1.30.4.amzn1 |
| amazon linux 1 | ruby24-irb | 2.4.2-1.30.4.amzn1 |
| amazon linux 1 | ruby24-libs | 2.4.2-1.30.4.amzn1 |
| amazon linux 1 | rubygem22-bigdecimal | 1.2.6-1.9.amzn1 |
| amazon linux 1 | rubygem22-io-console | 0.4.3-1.9.amzn1 |
| amazon linux 1 | rubygem22-psych | 2.0.8.1-1.9.amzn1 |
| amazon linux 1 | rubygem23-bigdecimal | 1.2.8-1.17.amzn1 |
| amazon linux 1 | rubygem23-did_you_mean | 1.0.0-1.17.amzn1 |
| amazon linux 1 | rubygem23-io-console | 0.4.5-1.17.amzn1 |
| amazon linux 1 | rubygem23-json | 1.8.3.1-1.17.amzn1 |
| amazon linux 1 | rubygem23-psych | 2.1.0.1-1.17.amzn1 |
| amazon linux 1 | rubygem24-bigdecimal | 1.3.0-1.30.4.amzn1 |
| amazon linux 1 | rubygem24-did_you_mean | 1.1.0-1.30.4.amzn1 |
| amazon linux 1 | rubygem24-io-console | 0.4.6-1.30.4.amzn1 |
| amazon linux 1 | rubygem24-json | 2.0.4-1.30.4.amzn1 |
| amazon linux 1 | rubygem24-psych | 2.2.2-1.30.4.amzn1 |
| amazon linux 1 | rubygem24-xmlrpc | 0.2.1-1.30.4.amzn1 |
| amazon linux 1 | rubygems22 | 2.4.5.2-1.9.amzn1 |
| amazon linux 1 | rubygems22-devel | 2.4.5.2-1.9.amzn1 |
| amazon linux 1 | rubygems23 | 2.5.2.1-1.17.amzn1 |
| amazon linux 1 | rubygems23-devel | 2.5.2.1-1.17.amzn1 |
| amazon linux 1 | rubygems24 | 2.6.13-1.30.4.amzn1 |
| amazon linux 1 | rubygems24-devel | 2.6.13-1.30.4.amzn1 |
| debian 7 | ruby1.9.1 | 1.9.3.194-8.1+deb7u6 |
| debian 8 | ruby2.1 | 2.1.5-2+deb8u4 |
| debian 9 | ruby2.3 | 2.3.3-1+deb9u1 |
| Oracle Linux 7 | ruby | 2.0.0.648-33.el7_4 |
| Oracle Linux 7 | ruby-devel | 2.0.0.648-33.el7_4 |
| Oracle Linux 7 | ruby-doc | 2.0.0.648-33.el7_4 |
| Oracle Linux 7 | ruby-irb | 2.0.0.648-33.el7_4 |
| Oracle Linux 7 | ruby-libs | 2.0.0.648-33.el7_4 |
| Oracle Linux 7 | ruby-tcltk | 2.0.0.648-33.el7_4 |
| Oracle Linux 7 | rubygem-bigdecimal | 1.2.0-33.el7_4 |
| Oracle Linux 7 | rubygem-io-console | 0.4.2-33.el7_4 |
| Oracle Linux 7 | rubygem-json | 1.7.7-33.el7_4 |
| Oracle Linux 7 | rubygem-minitest | 4.3.2-33.el7_4 |
| Oracle Linux 7 | rubygem-psych | 2.0.0-33.el7_4 |
| Oracle Linux 7 | rubygem-rake | 0.9.6-33.el7_4 |
| Oracle Linux 7 | rubygem-rdoc | 4.0.0-33.el7_4 |
| Oracle Linux 7 | rubygems | 2.0.14.1-33.el7_4 |
| Oracle Linux 7 | rubygems-devel | 2.0.14.1-33.el7_4 |
| Photon OS 1.0 | ruby | 2.4.0-6.ph1 |
| Photon OS 2.0 | ruby | 2.4.2-1.ph2 |
| ubuntu 14.04 | ruby1.9.1 | 1.9.3.484-2ubuntu1.5 |
| ubuntu 14.04 | ruby2.0 | 2.0.0.484-1ubuntu2.10 |
| ubuntu 16.04 | ruby2.3 | 2.3.1-2~16.04.5 |
| ubuntu 16.04-ESM | ruby2.3 | 2.3.1-2~16.04.5 |
| ubuntu 17.10 | ruby2.3 | 2.3.3-1ubuntu1.2 |
Referanslar
- http://www.securityfocus.com/bid/100890
- http://www.securitytracker.com/id/1039363
- http://www.securitytracker.com/id/1042004
- https://access.redhat.com/errata/RHSA-2017:3485
- https://access.redhat.com/errata/RHSA-2018:0378
- https://access.redhat.com/errata/RHSA-2018:0583
- https://access.redhat.com/errata/RHSA-2018:0585
- https://access.redhat.com/security/cve/CVE-2017-14064
25 referansın hepsi
- https://bugs.ruby-lang.org/issues/13853
- https://github.com/flori/json/commit/8f782fd8e181d9cfe9387ded43a5ca9692266b85
- https://hackerone.com/reports/209949
- https://linux.oracle.com/cve/CVE-2017-14064.html
- https://linux.oracle.com/errata/ELSA-2018-0378.html
- https://lists.debian.org/debian-lts-announce/2018/07/msg00012.html
- https://nvd.nist.gov/vuln/detail/CVE-2017-14064
- https://security.gentoo.org/glsa/201710-18
- https://ubuntu.com/security/notices/USN-3439-1
- https://ubuntu.com/security/notices/USN-3528-1
- https://ubuntu.com/security/notices/USN-3685-1
- https://usn.ubuntu.com/3685-1/
- https://www.cve.org/CVERecord?id=CVE-2017-14064
- https://www.debian.org/security/2017/dsa-3966
- https://www.ruby-lang.org/en/news/2017/09/14/json-heap-exposure-cve-2017-14064/
- https://www.ruby-lang.org/en/news/2017/09/14/ruby-2-2-8-released/
- https://www.ruby-lang.org/en/news/2017/09/14/ruby-2-3-5-released/