Type confusion exists in _cancel_eval Ruby's TclTkIp class method. Attacker passing different type of object than String as "retval" argument can cause arbitrary code execution.
CVSS Details
- CVSS 3.1 Base Score: 9.8
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade ruby | May 8, 2019 | Jan 6, 2017 |
| Debian | — | Upgrade ruby2.3 | Feb 20, 2019 | Jan 6, 2017 |
| Gentoo Linux | — | Upgrade dev-lang/ruby. | Oct 30, 2017 | Jan 6, 2017 |
| Huawei Euleros 2_0_sp1 | — | Upgrade ruby-libsUpgrade rubyUpgrade rubygem-jsonUpgrade rubygem-psychUpgrade rubygemsUpgrade ruby-irbUpgrade rubygem-rdocUpgrade rubygem-io-consoleUpgrade rubygem-bigdecimal | Nov 30, 2017 | Jan 6, 2017 |
| Huawei Euleros 2_0_sp2 | — | Upgrade ruby-libsUpgrade ruby-irbUpgrade ruby | Nov 30, 2017 | Jan 6, 2017 |
| Oracle Solaris | — | Upgrade entire/ to version 11.4-11.4.0.0.1.15.0 on Solaris 11.4 | Oct 19, 2018 | Jan 6, 2017 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Jun 14, 2016 |
| Ubuntu | — | Upgrade libruby1.9.1Upgrade libruby2.3Upgrade ruby2.0Upgrade libruby2.0Upgrade ruby2.3Upgrade ruby1.9.1 | Jul 26, 2017 | Jan 6, 2017 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub