Type confusion exists in _cancel_eval Ruby's TclTkIp class method. Attacker passing different type of object than String as "retval" argument can cause arbitrary code execution.
CVSS Details
- CVSS 3.1 Base Score: 9.8
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade ruby | May 8, 2019 | Jan 6, 2017 |
| Debian | — | Upgrade ruby2.3 | Feb 20, 2019 | Jan 6, 2017 |
| Gentoo Linux | — | Upgrade dev-lang/ruby. | Oct 30, 2017 | Jan 6, 2017 |
| Huawei Euleros 2_0_sp1 | — | Upgrade rubygem-rdocUpgrade rubygem-io-consoleUpgrade rubygem-bigdecimalUpgrade ruby-irbUpgrade ruby-libsUpgrade rubygem-psychUpgrade rubygem-jsonUpgrade rubygemsUpgrade ruby | Nov 30, 2017 | Jan 6, 2017 |
| Huawei Euleros 2_0_sp2 | — | Upgrade ruby-irbUpgrade ruby-libsUpgrade ruby | Nov 30, 2017 | Jan 6, 2017 |
| Oracle Solaris | — | Upgrade entire/ to version 11.4-11.4.0.0.1.15.0 on Solaris 11.4 | Oct 19, 2018 | Jan 6, 2017 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Jun 14, 2016 |
| Ubuntu | — | Upgrade ruby1.9.1Upgrade libruby2.0Upgrade libruby1.9.1Upgrade ruby2.3Upgrade libruby2.3Upgrade ruby2.0 | Jul 26, 2017 | Jan 6, 2017 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub