In Ruby before 2.2.10, 2.3.x before 2.3.7, 2.4.x before 2.4.4, 2.5.x before 2.5.1, and 2.6.0-preview1, the UNIXServer.open and UNIXSocket.open methods are not checked for null characters. It may be connected to an unintended socket.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade ruby | Apr 5, 2018 | Apr 3, 2018 |
| Amazon Linux Ami 2 | — | Upgrade rubygems-develUpgrade rubygem-io-consoleUpgrade rubygem-jsonUpgrade rubygem-rakeUpgrade ruby-irbUpgrade ruby-libsUpgrade rubygem-bigdecimalUpgrade ruby-tcltkUpgrade rubygem-psychUpgrade ruby-debuginfoUpgrade rubygemsUpgrade ruby-develUpgrade rubygem-rdocUpgrade ruby-docUpgrade rubyUpgrade rubygem-minitest | Apr 27, 2020 | Apr 3, 2018 |
| Amazon_linux | — | Upgrade ruby20Upgrade ruby22Upgrade ruby23Upgrade ruby24 | May 11, 2018 | Apr 3, 2018 |
| Apple Osx Ruby | — | Upgrade macOS to the latest versionApply Apple macOS Security Update 2018-002 High Sierra | Oct 31, 2018 | Apr 3, 2018 |
| Centos_linux | — | Upgrade rubygem-minitestUpgrade ruby-develUpgrade rubyUpgrade ruby-tcltkUpgrade rubygem-psychUpgrade rubygemsUpgrade rubygem-rdocUpgrade rubygem-io-consoleUpgrade rubygem-jsonUpgrade rubygem-bigdecimalUpgrade rubygems-develUpgrade rubygem-rakeUpgrade ruby-irbUpgrade ruby-docUpgrade ruby-libsUpgrade ruby-debuginfo | Aug 28, 2019 | Apr 3, 2018 |
| Debian | — | Upgrade ruby1.9.1Upgrade ruby1.8Upgrade ruby2.5 | Aug 2, 2018 | Apr 3, 2018 |
| Freebsd | — | Upgrade ruby | Dec 10, 2025 | Mar 29, 2018 |
| Huawei Euleros 2_0_sp2 | — | Upgrade ruby-irbUpgrade ruby-libsUpgrade ruby | Jul 3, 2018 | Apr 3, 2018 |
| Huawei Euleros 2_0_sp3 | — | Upgrade ruby-libsUpgrade rubyUpgrade ruby-irb | Jul 3, 2018 | Apr 3, 2018 |
| Oracle Solaris | — | Upgrade runtime/ruby-23/ruby-tk to version 2.3.8-11.4.6.0.1.1.0 on Solaris 11.4Upgrade runtime/ruby-23 to version 2.3.8-11.4.6.0.1.1.0 on Solaris 11.4 | Feb 20, 2019 | Apr 3, 2018 |
| Oracle_linux | — | Upgrade rubygem-psychUpgrade rubygem-rdocUpgrade rubygem-minitestUpgrade ruby-libsUpgrade rubygemsUpgrade rubygem-jsonUpgrade rubyUpgrade ruby-develUpgrade rubygem-io-consoleUpgrade rubygem-rakeUpgrade rubygem-bigdecimalUpgrade ruby-docUpgrade rubygems-develUpgrade ruby-irbUpgrade ruby-tcltk | Jul 21, 2020 | Mar 28, 2018 |
| Redhat_linux | — | Upgrade rubygem-minitestUpgrade rubygemsUpgrade ruby-libsUpgrade rubygems-develUpgrade rubygem-rdocUpgrade ruby-tcltkUpgrade rubygem-psychUpgrade ruby-irbUpgrade rubygem-jsonUpgrade rubygem-bigdecimalUpgrade rubygem-rakeUpgrade rubygem-io-consoleUpgrade ruby-debuginfoUpgrade rubyUpgrade ruby-docUpgrade ruby-devel | Aug 7, 2019 | Apr 3, 2018 |
| Suse | — | Upgrade ruby2.5Upgrade ruby2.5-devel-extraUpgrade ruby2.1Upgrade libruby2_1-2_1Upgrade ruby2.1-stdlibUpgrade libruby2_5-2_5Upgrade ruby2.5-docUpgrade yast2-ruby-bindingsUpgrade ruby2.1-develUpgrade ruby2.5-doc-riUpgrade ruby-bundled-gems-rpmhelperUpgrade ruby2.5-stdlibUpgrade ruby2.5-devel | Jul 22, 2019 | Apr 3, 2018 |
| Ubuntu | — | Upgrade ruby1.9.1Upgrade libruby2.0Upgrade ruby2.0Upgrade libruby1.9.1Upgrade ruby2.3Upgrade ruby1.9.3Upgrade libruby2.3 | Apr 25, 2018 | Apr 3, 2018 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub