vulnerability

Alpine Linux: CVE-2017-0899: Improper Neutralization of Escape, Meta, or Control Sequences

Severity
7
CVSS
(AV:N/AC:L/Au:N/C:P/I:P/A:P)
Published
Aug 31, 2017
Added
Aug 22, 2024
Modified
Mar 25, 2026

Description

RubyGems version 2.6.12 and earlier is vulnerable to maliciously crafted gem specifications that include terminal escape characters. Printing the gem specification would execute terminal escape sequences.

Solutions

alpine-linux-upgrade-rubyalpine-linux-upgrade-ruby2-2
Title
Rapid7 Labs

2026 Global Threat Landscape Report

The predictive window has collapsed. Exploitation follows disclosure in days. See how attackers are accelerating and how to stay ahead.