In Ruby before 2.2.10, 2.3.x before 2.3.7, 2.4.x before 2.4.4, 2.5.x before 2.5.1, and 2.6.0-preview1, the UNIXServer.open and UNIXSocket.open methods are not checked for null characters. It may be connected to an unintended socket.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade ruby | Apr 5, 2018 | Apr 3, 2018 |
| Amazon Linux Ami 2 | — | Upgrade rubygemsUpgrade rubygem-minitestUpgrade rubygem-rdocUpgrade rubyUpgrade ruby-debuginfoUpgrade ruby-docUpgrade ruby-develUpgrade rubygem-jsonUpgrade ruby-libsUpgrade ruby-tcltkUpgrade rubygem-psychUpgrade rubygems-develUpgrade rubygem-bigdecimalUpgrade rubygem-io-consoleUpgrade ruby-irbUpgrade rubygem-rake | Apr 27, 2020 | Apr 3, 2018 |
| Amazon_linux | — | Upgrade ruby24Upgrade ruby23Upgrade ruby20Upgrade ruby22 | May 11, 2018 | Apr 3, 2018 |
| Apple Osx Ruby | — | Upgrade macOS to the latest versionApply Apple macOS Security Update 2018-002 High Sierra | Oct 31, 2018 | Apr 3, 2018 |
| Centos_linux | — | Upgrade rubygems-develUpgrade ruby-irbUpgrade rubygem-bigdecimalUpgrade rubygem-jsonUpgrade rubygem-rakeUpgrade ruby-debuginfoUpgrade ruby-libsUpgrade rubygem-io-consoleUpgrade ruby-docUpgrade rubygem-minitestUpgrade rubygem-psychUpgrade rubygemsUpgrade rubygem-rdocUpgrade ruby-develUpgrade rubyUpgrade ruby-tcltk | Aug 28, 2019 | Apr 3, 2018 |
| Debian | — | Upgrade ruby1.8Upgrade ruby1.9.1Upgrade ruby2.5 | Aug 2, 2018 | Apr 3, 2018 |
| Freebsd | — | Upgrade ruby | Dec 10, 2025 | Mar 29, 2018 |
| Huawei Euleros 2_0_sp2 | — | Upgrade ruby-irbUpgrade rubyUpgrade ruby-libs | Jul 3, 2018 | Apr 3, 2018 |
| Huawei Euleros 2_0_sp3 | — | Upgrade ruby-libsUpgrade ruby-irbUpgrade ruby | Jul 3, 2018 | Apr 3, 2018 |
| Oracle Solaris | — | Upgrade runtime/ruby-23/ruby-tk to version 2.3.8-11.4.6.0.1.1.0 on Solaris 11.4Upgrade runtime/ruby-23 to version 2.3.8-11.4.6.0.1.1.0 on Solaris 11.4 | Feb 20, 2019 | Apr 3, 2018 |
| Oracle_linux | — | Upgrade rubygemsUpgrade rubygem-jsonUpgrade ruby-libsUpgrade rubygem-minitestUpgrade rubygem-rdocUpgrade rubygem-psychUpgrade rubygem-bigdecimalUpgrade rubygem-rakeUpgrade rubygem-io-consoleUpgrade rubyUpgrade rubygems-develUpgrade ruby-docUpgrade ruby-irbUpgrade ruby-develUpgrade ruby-tcltk | Jul 21, 2020 | Mar 28, 2018 |
| Redhat_linux | — | Upgrade rubygem-jsonUpgrade rubygem-bigdecimalUpgrade ruby-develUpgrade ruby-irbUpgrade rubygem-rakeUpgrade rubyUpgrade rubygem-io-consoleUpgrade ruby-debuginfoUpgrade ruby-docUpgrade ruby-libsUpgrade rubygems-develUpgrade rubygemsUpgrade ruby-tcltkUpgrade rubygem-rdocUpgrade rubygem-minitestUpgrade rubygem-psych | Aug 7, 2019 | Apr 3, 2018 |
| Suse | — | Upgrade ruby2.1Upgrade ruby2.5Upgrade ruby2.5-devel-extraUpgrade yast2-ruby-bindingsUpgrade ruby2.5-doc-riUpgrade ruby2.1-develUpgrade libruby2_1-2_1Upgrade ruby2.5-docUpgrade ruby2.1-stdlibUpgrade libruby2_5-2_5Upgrade ruby-bundled-gems-rpmhelperUpgrade ruby2.5-stdlibUpgrade ruby2.5-devel | Jul 22, 2019 | Apr 3, 2018 |
| Ubuntu | — | Upgrade libruby1.9.1Upgrade ruby1.9.1Upgrade libruby2.0Upgrade ruby2.0Upgrade ruby1.9.3Upgrade libruby2.3Upgrade ruby2.3 | Apr 25, 2018 | Apr 3, 2018 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub