The diff_pp function in lib/gauntlet_rubyparser.rb in the ruby_parser gem 3.1.1 and earlier for Ruby allows local users to overwrite arbitrary files via a symlink attack on a temporary file with a predictable name in /tmp.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Ruby_parser | Ryan_davis | * | 3.1.1 (including) |
| Ruby_parser | Ryan_davis | 1.0.0 (including) | 1.0.0 (including) |
| Ruby_parser | Ryan_davis | 2.0.0 (including) | 2.0.0 (including) |
| Ruby_parser | Ryan_davis | 2.0.1 (including) | 2.0.1 (including) |
| Ruby_parser | Ryan_davis | 2.0.2 (including) | 2.0.2 (including) |
| Ruby_parser | Ryan_davis | 2.0.3 (including) | 2.0.3 (including) |
| Ruby_parser | Ryan_davis | 2.0.4 (including) | 2.0.4 (including) |
| Ruby_parser | Ryan_davis | 2.0.5 (including) | 2.0.5 (including) |
| Ruby_parser | Ryan_davis | 2.0.6 (including) | 2.0.6 (including) |
| Ruby_parser | Ryan_davis | 2.1.0 (including) | 2.1.0 (including) |
| Ruby_parser | Ryan_davis | 2.2.0 (including) | 2.2.0 (including) |
| Ruby_parser | Ryan_davis | 2.3.0 (including) | 2.3.0 (including) |
| Ruby_parser | Ryan_davis | 2.3.1 (including) | 2.3.1 (including) |
| Ruby_parser | Ryan_davis | 3.0.0 (including) | 3.0.0 (including) |
| Ruby_parser | Ryan_davis | 3.0.0.a1 (including) | 3.0.0.a1 (including) |
| Ruby_parser | Ryan_davis | 3.0.0.a2 (including) | 3.0.0.a2 (including) |
| Ruby_parser | Ryan_davis | 3.0.0.a3 (including) | 3.0.0.a3 (including) |
| Ruby_parser | Ryan_davis | 3.0.0.a4 (including) | 3.0.0.a4 (including) |
| Ruby_parser | Ryan_davis | 3.0.0.a5 (including) | 3.0.0.a5 (including) |
| Ruby_parser | Ryan_davis | 3.0.0.a6 (including) | 3.0.0.a6 (including) |
| Ruby_parser | Ryan_davis | 3.0.0.a7 (including) | 3.0.0.a7 (including) |
| Ruby_parser | Ryan_davis | 3.0.0.a8 (including) | 3.0.0.a8 (including) |
| Ruby_parser | Ryan_davis | 3.0.0.a9 (including) | 3.0.0.a9 (including) |
| Ruby_parser | Ryan_davis | 3.0.0.a10 (including) | 3.0.0.a10 (including) |
| Ruby_parser | Ryan_davis | 3.0.1 (including) | 3.0.1 (including) |
| Ruby_parser | Ryan_davis | 3.0.2 (including) | 3.0.2 (including) |
| Ruby_parser | Ryan_davis | 3.0.3 (including) | 3.0.3 (including) |
| Ruby_parser | Ryan_davis | 3.0.4 (including) | 3.0.4 (including) |
| Ruby_parser | Ryan_davis | 3.1.0 (including) | 3.1.0 (including) |