In Ruby before 2.2.10, 2.3.x before 2.3.7, 2.4.x before 2.4.4, 2.5.x before 2.5.1, and 2.6.0-preview1, the UNIXServer.open and UNIXSocket.open methods are not checked for null characters. It may be connected to an unintended socket.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade ruby | Apr 5, 2018 | Apr 3, 2018 |
| Amazon Linux Ami 2 | — | Upgrade rubygem-psychUpgrade rubygems-develUpgrade rubygem-io-consoleUpgrade rubygem-bigdecimalUpgrade ruby-tcltkUpgrade ruby-irbUpgrade rubygem-rakeUpgrade rubygem-jsonUpgrade ruby-libsUpgrade rubyUpgrade ruby-docUpgrade rubygemsUpgrade rubygem-minitestUpgrade rubygem-rdocUpgrade ruby-develUpgrade ruby-debuginfo | Apr 27, 2020 | Apr 3, 2018 |
| Amazon_linux | — | Upgrade ruby22Upgrade ruby20Upgrade ruby23Upgrade ruby24 | May 11, 2018 | Apr 3, 2018 |
| Apple Osx Ruby | — | Apply OS X security update 2018-002 High SierraUpgrade macOS to the latest version | Oct 31, 2018 | Apr 3, 2018 |
| Centos_linux | — | Upgrade ruby-develUpgrade rubyUpgrade ruby-tcltkUpgrade rubygem-minitestUpgrade rubygemsUpgrade rubygem-psychUpgrade rubygem-rdocUpgrade ruby-docUpgrade ruby-irbUpgrade rubygem-bigdecimalUpgrade rubygem-rakeUpgrade rubygem-jsonUpgrade ruby-debuginfoUpgrade ruby-libsUpgrade rubygems-develUpgrade rubygem-io-console | Aug 28, 2019 | Apr 3, 2018 |
| Debian | — | Upgrade ruby2.5Upgrade ruby1.8Upgrade ruby1.9.1 | Aug 2, 2018 | Apr 3, 2018 |
| Freebsd | — | Upgrade ruby | Dec 10, 2025 | Mar 29, 2018 |
| Huawei Euleros 2_0_sp2 | — | Upgrade ruby-libsUpgrade rubyUpgrade ruby-irb | Jul 3, 2018 | Apr 3, 2018 |
| Huawei Euleros 2_0_sp3 | — | Upgrade ruby-libsUpgrade ruby-irbUpgrade ruby | Jul 3, 2018 | Apr 3, 2018 |
| Oracle Solaris | — | Upgrade runtime/ruby-23/ruby-tk to version 2.3.8-11.4.6.0.1.1.0 on Solaris 11.4Upgrade runtime/ruby-23 to version 2.3.8-11.4.6.0.1.1.0 on Solaris 11.4 | Feb 20, 2019 | Apr 3, 2018 |
| Oracle_linux | — | Upgrade rubygem-minitestUpgrade ruby-libsUpgrade rubygemsUpgrade rubygem-jsonUpgrade rubygem-rdocUpgrade rubygem-psychUpgrade ruby-docUpgrade ruby-irbUpgrade rubygem-io-consoleUpgrade rubyUpgrade rubygem-bigdecimalUpgrade ruby-tcltkUpgrade ruby-develUpgrade rubygems-develUpgrade rubygem-rake | Jul 21, 2020 | Mar 28, 2018 |
| Redhat_linux | — | Upgrade rubygem-io-consoleUpgrade rubyUpgrade ruby-docUpgrade rubygem-jsonUpgrade ruby-irbUpgrade rubygem-bigdecimalUpgrade ruby-debuginfoUpgrade ruby-develUpgrade rubygem-rakeUpgrade rubygemsUpgrade rubygem-rdocUpgrade ruby-libsUpgrade rubygems-develUpgrade ruby-tcltkUpgrade rubygem-minitestUpgrade rubygem-psych | Aug 7, 2019 | Apr 3, 2018 |
| Suse | — | Upgrade ruby2.5-develUpgrade ruby2.5-stdlibUpgrade ruby-bundled-gems-rpmhelperUpgrade libruby2_1-2_1Upgrade ruby2.5-docUpgrade ruby2.5-doc-riUpgrade ruby2.1-develUpgrade yast2-ruby-bindingsUpgrade libruby2_5-2_5Upgrade ruby2.1-stdlibUpgrade ruby2.5-devel-extraUpgrade ruby2.5Upgrade ruby2.1 | Jul 22, 2019 | Apr 3, 2018 |
| Ubuntu | — | Upgrade ruby1.9.3Upgrade libruby2.3Upgrade ruby2.3Upgrade libruby1.9.1Upgrade ruby1.9.1Upgrade libruby2.0Upgrade ruby2.0 | Apr 25, 2018 | Apr 3, 2018 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub