In Ruby before 2.2.10, 2.3.x before 2.3.7, 2.4.x before 2.4.4, 2.5.x before 2.5.1, and 2.6.0-preview1, the UNIXServer.open and UNIXSocket.open methods are not checked for null characters. It may be connected to an unintended socket.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade ruby | Apr 5, 2018 | Apr 3, 2018 |
| Amazon Linux Ami 2 | — | Upgrade rubygems-develUpgrade ruby-irbUpgrade rubygem-io-consoleUpgrade rubygem-psychUpgrade ruby-libsUpgrade rubygem-jsonUpgrade rubygem-rakeUpgrade ruby-tcltkUpgrade rubygem-bigdecimalUpgrade rubygem-rdocUpgrade ruby-develUpgrade rubyUpgrade ruby-docUpgrade rubygemsUpgrade ruby-debuginfoUpgrade rubygem-minitest | Apr 27, 2020 | Apr 3, 2018 |
| Amazon_linux | — | Upgrade ruby23Upgrade ruby24Upgrade ruby20Upgrade ruby22 | May 11, 2018 | Apr 3, 2018 |
| Apple Osx Ruby | — | Upgrade macOS to the latest versionApply OS X security update 2018-002 High Sierra | Oct 31, 2018 | Apr 3, 2018 |
| Centos_linux | — | Upgrade ruby-irbUpgrade rubygems-develUpgrade rubygem-io-consoleUpgrade rubygem-jsonUpgrade rubygem-bigdecimalUpgrade ruby-debuginfoUpgrade ruby-libsUpgrade rubygem-rakeUpgrade ruby-docUpgrade rubygem-rdocUpgrade rubyUpgrade rubygem-minitestUpgrade rubygem-psychUpgrade ruby-develUpgrade rubygemsUpgrade ruby-tcltk | Aug 28, 2019 | Apr 3, 2018 |
| Debian | — | Upgrade ruby2.5Upgrade ruby1.8Upgrade ruby1.9.1 | Aug 2, 2018 | Apr 3, 2018 |
| Freebsd | — | Upgrade ruby | Dec 10, 2025 | Mar 29, 2018 |
| Huawei Euleros 2_0_sp2 | — | Upgrade ruby-libsUpgrade rubyUpgrade ruby-irb | Jul 3, 2018 | Apr 3, 2018 |
| Huawei Euleros 2_0_sp3 | — | Upgrade ruby-irbUpgrade ruby-libsUpgrade ruby | Jul 3, 2018 | Apr 3, 2018 |
| Oracle Solaris | — | Upgrade runtime/ruby-23/ruby-tk to version 2.3.8-11.4.6.0.1.1.0 on Solaris 11.4Upgrade runtime/ruby-23 to version 2.3.8-11.4.6.0.1.1.0 on Solaris 11.4 | Feb 20, 2019 | Apr 3, 2018 |
| Oracle_linux | — | Upgrade rubygem-rdocUpgrade rubygemsUpgrade rubygem-jsonUpgrade ruby-libsUpgrade rubygem-psychUpgrade rubygem-minitestUpgrade ruby-irbUpgrade rubygem-bigdecimalUpgrade ruby-develUpgrade rubygems-develUpgrade ruby-docUpgrade rubygem-io-consoleUpgrade rubygem-rakeUpgrade rubyUpgrade ruby-tcltk | Jul 21, 2020 | Mar 28, 2018 |
| Redhat_linux | — | Upgrade rubygems-develUpgrade rubygem-rdocUpgrade rubygem-minitestUpgrade rubygem-psychUpgrade ruby-tcltkUpgrade rubygemsUpgrade ruby-libsUpgrade ruby-develUpgrade rubyUpgrade ruby-debuginfoUpgrade rubygem-jsonUpgrade rubygem-rakeUpgrade ruby-irbUpgrade ruby-docUpgrade rubygem-io-consoleUpgrade rubygem-bigdecimal | Aug 7, 2019 | Apr 3, 2018 |
| Suse | — | Upgrade yast2-ruby-bindingsUpgrade ruby2.5-docUpgrade ruby2.5-doc-riUpgrade libruby2_5-2_5Upgrade ruby2.1-develUpgrade ruby2.1Upgrade ruby2.5Upgrade ruby2.5-devel-extraUpgrade libruby2_1-2_1Upgrade ruby2.1-stdlibUpgrade ruby2.5-develUpgrade ruby-bundled-gems-rpmhelperUpgrade ruby2.5-stdlib | Jul 22, 2019 | Apr 3, 2018 |
| Ubuntu | — | Upgrade libruby2.3Upgrade ruby2.3Upgrade ruby1.9.3Upgrade libruby1.9.1Upgrade ruby2.0Upgrade ruby1.9.1Upgrade libruby2.0 | Apr 25, 2018 | Apr 3, 2018 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub