In Ruby before 2.2.10, 2.3.x before 2.3.7, 2.4.x before 2.4.4, 2.5.x before 2.5.1, and 2.6.0-preview1, the UNIXServer.open and UNIXSocket.open methods are not checked for null characters. It may be connected to an unintended socket.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade ruby | Apr 5, 2018 | Apr 3, 2018 |
| Amazon Linux Ami 2 | — | Upgrade rubygem-bigdecimalUpgrade rubygems-develUpgrade ruby-tcltkUpgrade rubygem-psychUpgrade ruby-irbUpgrade rubygem-rakeUpgrade ruby-libsUpgrade rubygem-io-consoleUpgrade rubygem-jsonUpgrade rubygem-rdocUpgrade ruby-debuginfoUpgrade ruby-develUpgrade rubyUpgrade ruby-docUpgrade rubygem-minitestUpgrade rubygems | Apr 27, 2020 | Apr 3, 2018 |
| Amazon_linux | — | Upgrade ruby20Upgrade ruby22Upgrade ruby24Upgrade ruby23 | May 11, 2018 | Apr 3, 2018 |
| Apple Osx Ruby | — | Upgrade macOS to the latest versionApply Apple macOS Security Update 2018-002 High Sierra | Oct 31, 2018 | Apr 3, 2018 |
| Centos_linux | — | Upgrade ruby-tcltkUpgrade rubygem-psychUpgrade ruby-develUpgrade rubygem-minitestUpgrade rubyUpgrade rubygemsUpgrade rubygem-rdocUpgrade rubygem-jsonUpgrade ruby-libsUpgrade rubygem-io-consoleUpgrade ruby-irbUpgrade rubygems-develUpgrade ruby-docUpgrade rubygem-bigdecimalUpgrade rubygem-rakeUpgrade ruby-debuginfo | Aug 28, 2019 | Apr 3, 2018 |
| Debian | — | Upgrade ruby2.5Upgrade ruby1.8Upgrade ruby1.9.1 | Aug 2, 2018 | Apr 3, 2018 |
| Freebsd | — | Upgrade ruby | Dec 10, 2025 | Mar 29, 2018 |
| Huawei Euleros 2_0_sp2 | — | Upgrade ruby-irbUpgrade rubyUpgrade ruby-libs | Jul 3, 2018 | Apr 3, 2018 |
| Huawei Euleros 2_0_sp3 | — | Upgrade rubyUpgrade ruby-irbUpgrade ruby-libs | Jul 3, 2018 | Apr 3, 2018 |
| Oracle Solaris | — | Upgrade runtime/ruby-23/ruby-tk to version 2.3.8-11.4.6.0.1.1.0 on Solaris 11.4Upgrade runtime/ruby-23 to version 2.3.8-11.4.6.0.1.1.0 on Solaris 11.4 | Feb 20, 2019 | Apr 3, 2018 |
| Oracle_linux | — | Upgrade rubygem-minitestUpgrade rubygem-psychUpgrade rubygem-jsonUpgrade rubygem-rdocUpgrade ruby-libsUpgrade rubygemsUpgrade rubygem-bigdecimalUpgrade rubygem-io-consoleUpgrade rubygem-rakeUpgrade rubyUpgrade rubygems-develUpgrade ruby-tcltkUpgrade ruby-docUpgrade ruby-irbUpgrade ruby-devel | Jul 21, 2020 | Mar 28, 2018 |
| Redhat_linux | — | Upgrade rubyUpgrade ruby-irbUpgrade ruby-debuginfoUpgrade rubygem-io-consoleUpgrade rubygem-rakeUpgrade rubygem-jsonUpgrade ruby-docUpgrade rubygem-bigdecimalUpgrade ruby-develUpgrade rubygemsUpgrade rubygem-rdocUpgrade ruby-libsUpgrade rubygem-psychUpgrade rubygems-develUpgrade rubygem-minitestUpgrade ruby-tcltk | Aug 7, 2019 | Apr 3, 2018 |
| Suse | — | Upgrade ruby2.5-develUpgrade ruby-bundled-gems-rpmhelperUpgrade ruby2.5-stdlibUpgrade ruby2.5-docUpgrade libruby2_5-2_5Upgrade ruby2.5-devel-extraUpgrade ruby2.1-develUpgrade yast2-ruby-bindingsUpgrade ruby2.5Upgrade libruby2_1-2_1Upgrade ruby2.1Upgrade ruby2.1-stdlibUpgrade ruby2.5-doc-ri | Jul 22, 2019 | Apr 3, 2018 |
| Ubuntu | — | Upgrade libruby2.3Upgrade ruby1.9.3Upgrade ruby2.3Upgrade libruby2.0Upgrade ruby2.0Upgrade libruby1.9.1Upgrade ruby1.9.1 | Apr 25, 2018 | Apr 3, 2018 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub