Security restrictions bypass in Ruby - CVE-2018-16395
Published: November 6, 2018
Vulnerability identifier: #VU15724
CSH Severity: Low
CVSS v4: 8.7 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N]
CVE-ID: CVE-2018-16395
CWE-ID: CWE-20
Exploitation vector: Remote access
Exploit availability:
No public exploit available
Vulnerability details
The vulnerability allows a remote attacker to bypass security restrictions on the target system.
The weakness exists in OpenSSL::X509::Name due to the equality check is not correct if the value of an entity of the argument (right-hand side) starts with the value of the receiver (left-hand side). A remote attacker can supply malicious X.509 certificate to be passed and bypass security restrictions to conduct further attacks.
The weakness exists in OpenSSL::X509::Name due to the equality check is not correct if the value of an entity of the argument (right-hand side) starts with the value of the receiver (left-hand side). A remote attacker can supply malicious X.509 certificate to be passed and bypass security restrictions to conduct further attacks.
Affected software
Ruby
Debian Linux
Amazon Linux AMI
SUSE Webyast
Red Hat Enterprise Linux for x86_64
Red Hat Enterprise Linux EUS Compute Node
Opensuse
Fedora
EMC Integrated Data Protection Appliance
ruby (Alpine package)
ruby-devel
ruby
Oracle Communications Interactive Session Recorder
EMC Avamar
Dell EMC Data Protection Search
Dell EMC Storage Monitoring and Reporting (SMR)
Debian Linux
Amazon Linux AMI
SUSE Webyast
Red Hat Enterprise Linux for x86_64
Red Hat Enterprise Linux EUS Compute Node
Opensuse
Fedora
EMC Integrated Data Protection Appliance
ruby (Alpine package)
ruby-devel
ruby
Oracle Communications Interactive Session Recorder
EMC Avamar
Dell EMC Data Protection Search
Dell EMC Storage Monitoring and Reporting (SMR)
How to mitigate CVE-2018-16395
The vulnerability has been fixed in the versions 2.3.8, 2.4.5, 2.5.2.
Ruby - addressed in versions 2.3.8, 2.4.5, 2.5.2
EMC Integrated Data Protection Appliance - update to 2.7.1
ruby (Alpine package) - update to 2.3.8-r0
Dell EMC Data Protection Search - update to 19.6.0
ruby-devel - update to 1.8.7.p357-0.9.20.3.1
ruby - addressed in versions 2.4.5-90.fc27, 2.5.3-94.fc28, 2.5.3-99.fc29
Dell EMC Storage Monitoring and Reporting (SMR) - update to 4.6.0.0
EMC Integrated Data Protection Appliance - update to 2.7.1
ruby (Alpine package) - update to 2.3.8-r0
Dell EMC Data Protection Search - update to 19.6.0
ruby-devel - update to 1.8.7.p357-0.9.20.3.1
ruby - addressed in versions 2.4.5-90.fc27, 2.5.3-94.fc28, 2.5.3-99.fc29
Dell EMC Storage Monitoring and Reporting (SMR) - update to 4.6.0.0
External References
Related Security Bulletins
- Debian update for ruby2.3
- Red Hat update for ruby
- Red Hat update for ruby
- Red Hat update for ruby
- Amazon Linux AMI update for ruby23
- Red Hat update for ruby
- OpenSUSE Linux update for ruby-bundled-gems-rpmhelper, ruby2.5
- Red Hat update for ruby
- Multiple vulnerabilities in Oracle Communications Interactive Session Recorder
- Security restrictions bypass in ruby (Alpine package)
- Multiple vulnerabilities in Dell EMC Integrated Data Protection Appliance
- Multiple vulnerabilities in Dell EMC Data Protection Search
- SUSE update for ruby
- Multiple vulnerabilities in Dell Storage Monitoring and Reporting (SMR)
- Security restrictions bypass in Dell EMC Avamar
- Fedora 29 update for ruby
- Fedora 28 update for ruby
- Fedora 27 update for ruby