openEuler update for ruby

Published: 2022-06-10

Risk	High
Patch available	YES
Number of vulnerabilities	2
CVE-ID	CVE-2022-28739 CVE-2022-28738
CWE-ID	CWE-704 CWE-415
Exploitation vector	Network
Public exploit	N/A
Vulnerable software	openEuler Operating systems & Components / Operating system rubygems-devel Operating systems & Components / Operating system package or component ruby-help Operating systems & Components / Operating system package or component rubygem-xmlrpc Operating systems & Components / Operating system package or component rubygem-test-unit Operating systems & Components / Operating system package or component rubygem-net-telnet Operating systems & Components / Operating system package or component rubygem-did_you_mean Operating systems & Components / Operating system package or component rubygem-rdoc Operating systems & Components / Operating system package or component rubygem-minitest Operating systems & Components / Operating system package or component rubygems Operating systems & Components / Operating system package or component ruby-irb Operating systems & Components / Operating system package or component rubygem-rake Operating systems & Components / Operating system package or component rubygem-power_assert Operating systems & Components / Operating system package or component rubygem-bigdecimal Operating systems & Components / Operating system package or component rubygem-psych Operating systems & Components / Operating system package or component ruby-debugsource Operating systems & Components / Operating system package or component ruby-debuginfo Operating systems & Components / Operating system package or component ruby-devel Operating systems & Components / Operating system package or component rubygem-io-console Operating systems & Components / Operating system package or component rubygem-json Operating systems & Components / Operating system package or component rubygem-openssl Operating systems & Components / Operating system package or component ruby Operating systems & Components / Operating system package or component
Vendor	openEuler

Security Bulletin

This security bulletin contains information about 2 vulnerabilities.

1) Type conversion

EUVDB-ID: #VU62081

Risk: High

CVSSv4.0: 8.1 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U/U:Amber]

CVE-ID: CVE-2022-28739

CWE-ID: CWE-704 - Type conversion

Exploit availability: No

Description

The vulnerability allows a remote attacker to compromise the affected system.

The vulnerability exists due to a type conversion error in some convertion methods like Kernel#Float</code> and <code>String#to_f. A remote attacker can pass specially crafted data to the affected application, trigger memory corruption and execute arbitrary code in the system.

Mitigation

Install updates from vendor's repository.

Vulnerable software versions

openEuler: 20.03 LTS SP1 - 22.03 LTS

rubygems-devel: before 2.7.6-116

ruby-help: before 2.5.8-116

rubygem-xmlrpc: before 0.3.0-116

rubygem-test-unit: before 3.2.7-116

rubygem-net-telnet: before 0.1.1-116

rubygem-did_you_mean: before 1.2.0-116

rubygem-rdoc: before 6.0.1.1-116

rubygem-minitest: before 5.10.3-116

rubygems: before 2.7.6-116

ruby-irb: before 2.5.8-116

rubygem-rake: before 12.3.0-116

rubygem-power_assert: before 1.1.1-116

rubygem-bigdecimal: before 1.3.4-116

rubygem-psych: before 3.0.2-116

ruby-debugsource: before 2.5.8-116

ruby-debuginfo: before 2.5.8-116

ruby-devel: before 2.5.8-116

rubygem-io-console: before 0.4.6-116

rubygem-json: before 2.1.0-116

rubygem-openssl: before 2.1.2-116

ruby: before 2.5.8-116

CPE2.3

External links

https://www.openeuler.org/en/security/security-bulletins/detail/?id=openEuler-SA-2022-1700

Q & A

Can this vulnerability be exploited remotely?

Yes. This vulnerability can be exploited by a remote non-authenticated attacker via the Internet.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

2) Double Free

EUVDB-ID: #VU62080