CVE Vulnerabilities

CVE-2018-16396

Published: Nov 16, 2018 | Modified: Nov 21, 2024
CVSS 3.x
8.1
HIGH
Source:
NVD
CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS 2.x
6.8 MEDIUM
AV:N/AC:M/Au:N/C:P/I:P/A:P
RedHat/V2
RedHat/V3
5.9 MODERATE
CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N
Ubuntu
MEDIUM

An issue was discovered in Ruby before 2.3.8, 2.4.x before 2.4.5, 2.5.x before 2.5.2, and 2.6.x before 2.6.0-preview3. It does not taint strings that result from unpacking tainted strings with some formats.

Affected Software

Name Vendor Start Version End Version
Ruby Ruby-lang 2.3.0 (including) 2.3.7 (including)
Ruby Ruby-lang 2.4.0 (including) 2.4.4 (including)
Ruby Ruby-lang 2.5.0 (including) 2.5.1 (including)
Ruby Ruby-lang 2.6.0-preview1 (including) 2.6.0-preview1 (including)
Ruby Ruby-lang 2.6.0-preview2 (including) 2.6.0-preview2 (including)
Red Hat Enterprise Linux 7 RedHat ruby-0:2.0.0.648-36.el7 *
Red Hat Enterprise Linux 7.4 Advanced Update Support RedHat ruby-0:2.0.0.648-37.el7_4 *
Red Hat Enterprise Linux 7.4 Telco Extended Update Support RedHat ruby-0:2.0.0.648-37.el7_4 *
Red Hat Enterprise Linux 7.4 Update Services for SAP Solutions RedHat ruby-0:2.0.0.648-37.el7_4 *
Red Hat Enterprise Linux 7.6 Extended Update Support RedHat ruby-0:2.0.0.648-38.el7_6 *
Red Hat Software Collections for Red Hat Enterprise Linux 6 RedHat rh-ruby23-ruby-0:2.3.8-69.el6 *
Red Hat Software Collections for Red Hat Enterprise Linux 6 RedHat rh-ruby24-ruby-0:2.4.5-91.el6 *
Red Hat Software Collections for Red Hat Enterprise Linux 7 RedHat rh-ruby23-ruby-0:2.3.8-69.el7 *
Red Hat Software Collections for Red Hat Enterprise Linux 7 RedHat rh-ruby24-ruby-0:2.4.5-91.el7 *
Red Hat Software Collections for Red Hat Enterprise Linux 7 RedHat rh-ruby25-ruby-0:2.5.3-6.el7 *
Red Hat Software Collections for Red Hat Enterprise Linux 7.4 EUS RedHat rh-ruby23-ruby-0:2.3.8-69.el7 *
Red Hat Software Collections for Red Hat Enterprise Linux 7.4 EUS RedHat rh-ruby24-ruby-0:2.4.5-91.el7 *
Red Hat Software Collections for Red Hat Enterprise Linux 7.4 EUS RedHat rh-ruby25-ruby-0:2.5.3-6.el7 *
Red Hat Software Collections for Red Hat Enterprise Linux 7.5 EUS RedHat rh-ruby23-ruby-0:2.3.8-69.el7 *
Red Hat Software Collections for Red Hat Enterprise Linux 7.5 EUS RedHat rh-ruby24-ruby-0:2.4.5-91.el7 *
Red Hat Software Collections for Red Hat Enterprise Linux 7.5 EUS RedHat rh-ruby25-ruby-0:2.5.3-6.el7 *
Red Hat Software Collections for Red Hat Enterprise Linux 7.6 EUS RedHat rh-ruby23-ruby-0:2.3.8-69.el7 *
Red Hat Software Collections for Red Hat Enterprise Linux 7.6 EUS RedHat rh-ruby24-ruby-0:2.4.5-91.el7 *
Red Hat Software Collections for Red Hat Enterprise Linux 7.6 EUS RedHat rh-ruby25-ruby-0:2.5.3-6.el7 *
Ruby1.9.1 Ubuntu trusty *
Ruby2.0 Ubuntu trusty *
Ruby2.3 Ubuntu xenial *
Ruby2.5 Ubuntu bionic *
Ruby2.5 Ubuntu cosmic *
Ruby2.5 Ubuntu devel *

References