In Ruby before 2.2.10, 2.3.x before 2.3.7, 2.4.x before 2.4.4, 2.5.x before 2.5.1, and 2.6.0-preview1, the UNIXServer.open and UNIXSocket.open methods are not checked for null characters. It may be connected to an unintended socket.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade ruby | Apr 5, 2018 | Apr 3, 2018 |
| Amazon Linux Ami 2 | — | Upgrade rubygem-rdocUpgrade ruby-debuginfoUpgrade ruby-docUpgrade rubyUpgrade ruby-develUpgrade rubygemsUpgrade rubygem-minitestUpgrade rubygem-psychUpgrade rubygem-bigdecimalUpgrade ruby-irbUpgrade ruby-libsUpgrade rubygem-rakeUpgrade rubygem-jsonUpgrade ruby-tcltkUpgrade rubygem-io-consoleUpgrade rubygems-devel | Apr 27, 2020 | Apr 3, 2018 |
| Amazon_linux | — | Upgrade ruby22Upgrade ruby20Upgrade ruby24Upgrade ruby23 | May 11, 2018 | Apr 3, 2018 |
| Apple Osx Ruby | — | Upgrade macOS to the latest versionApply OS X security update 2018-002 High Sierra | Oct 31, 2018 | Apr 3, 2018 |
| Centos_linux | — | Upgrade ruby-tcltkUpgrade rubygemsUpgrade ruby-develUpgrade rubyUpgrade rubygem-rdocUpgrade rubygem-minitestUpgrade rubygem-psychUpgrade ruby-irbUpgrade rubygem-rakeUpgrade ruby-libsUpgrade ruby-debuginfoUpgrade rubygem-io-consoleUpgrade rubygem-bigdecimalUpgrade ruby-docUpgrade rubygems-develUpgrade rubygem-json | Aug 28, 2019 | Apr 3, 2018 |
| Debian | — | Upgrade ruby1.8Upgrade ruby1.9.1Upgrade ruby2.5 | Aug 2, 2018 | Apr 3, 2018 |
| Freebsd | — | Upgrade ruby | Dec 10, 2025 | Mar 29, 2018 |
| Huawei Euleros 2_0_sp2 | — | Upgrade rubyUpgrade ruby-libsUpgrade ruby-irb | Jul 3, 2018 | Apr 3, 2018 |
| Huawei Euleros 2_0_sp3 | — | Upgrade ruby-irbUpgrade ruby-libsUpgrade ruby | Jul 3, 2018 | Apr 3, 2018 |
| Oracle Solaris | — | Upgrade runtime/ruby-23/ruby-tk to version 2.3.8-11.4.6.0.1.1.0 on Solaris 11.4Upgrade runtime/ruby-23 to version 2.3.8-11.4.6.0.1.1.0 on Solaris 11.4 | Feb 20, 2019 | Apr 3, 2018 |
| Oracle_linux | — | Upgrade rubygems-develUpgrade rubygem-rakeUpgrade rubygem-bigdecimalUpgrade ruby-tcltkUpgrade rubygem-io-consoleUpgrade ruby-irbUpgrade ruby-develUpgrade rubyUpgrade ruby-docUpgrade rubygem-psychUpgrade rubygem-rdocUpgrade rubygemsUpgrade rubygem-minitestUpgrade ruby-libsUpgrade rubygem-json | Jul 21, 2020 | Mar 28, 2018 |
| Redhat_linux | — | Upgrade rubygem-rakeUpgrade ruby-develUpgrade ruby-debuginfoUpgrade ruby-docUpgrade rubygem-bigdecimalUpgrade ruby-irbUpgrade rubygem-jsonUpgrade rubyUpgrade rubygem-io-consoleUpgrade ruby-tcltkUpgrade ruby-libsUpgrade rubygem-minitestUpgrade rubygemsUpgrade rubygem-rdocUpgrade rubygems-develUpgrade rubygem-psych | Aug 7, 2019 | Apr 3, 2018 |
| Suse | — | Upgrade ruby2.5-stdlibUpgrade ruby2.5-develUpgrade ruby-bundled-gems-rpmhelperUpgrade ruby2.5-devel-extraUpgrade ruby2.1Upgrade ruby2.1-stdlibUpgrade libruby2_1-2_1Upgrade ruby2.5-docUpgrade ruby2.5-doc-riUpgrade yast2-ruby-bindingsUpgrade ruby2.1-develUpgrade libruby2_5-2_5Upgrade ruby2.5 | Jul 22, 2019 | Apr 3, 2018 |
| Ubuntu | — | Upgrade ruby1.9.1Upgrade libruby1.9.1Upgrade ruby2.0Upgrade libruby2.0Upgrade ruby2.3Upgrade ruby1.9.3Upgrade libruby2.3 | Apr 25, 2018 | Apr 3, 2018 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub