vulnerability
SUSE: CVE-2018-1000079: SUSE Linux Security Advisory
| Severity | CVSS | Published | Added | Modified |
|---|---|---|---|---|
| 4 | (AV:N/AC:M/Au:N/C:N/I:P/A:N) | Mar 13, 2018 | Jul 22, 2019 | Oct 22, 2021 |
Severity
4
CVSS
(AV:N/AC:M/Au:N/C:N/I:P/A:N)
Published
Mar 13, 2018
Added
Jul 22, 2019
Modified
Oct 22, 2021
Description
RubyGems version Ruby 2.2 series: 2.2.9 and earlier, Ruby 2.3 series: 2.3.6 and earlier, Ruby 2.4 series: 2.4.3 and earlier, Ruby 2.5 series: 2.5.0 and earlier, prior to trunk revision 62422 contains a Directory Traversal vulnerability in gem installation that can result in the gem could write to arbitrary filesystem locations during installation. This attack appear to be exploitable via the victim must install a malicious gem. This vulnerability appears to have been fixed in 2.7.6.
Solutions
suse-upgrade-libruby2_1-2_1suse-upgrade-libruby2_5-2_5suse-upgrade-ruby-bundled-gems-rpmhelpersuse-upgrade-ruby2-1suse-upgrade-ruby2-1-develsuse-upgrade-ruby2-1-stdlibsuse-upgrade-ruby2-5suse-upgrade-ruby2-5-develsuse-upgrade-ruby2-5-devel-extrasuse-upgrade-ruby2-5-docsuse-upgrade-ruby2-5-doc-risuse-upgrade-ruby2-5-stdlibsuse-upgrade-yast2-ruby-bindings
NEW
Explore Exposure Command
Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.