Permissions, Privileges, and Access Controls in Ruby and Opensuse - CVE-2013-2065

Vulnerability identifier: #VU42404

CSH Severity: Medium

CVSS v4: 6.9 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N]

CVE-ID: CVE-2013-2065

CWE-ID: CWE-264

Exploitation vector: Remote access

Exploit availability: No public exploit available

The vulnerability allows a remote non-authenticated attacker to read and manipulate data.

(1) DL and (2) Fiddle in Ruby 1.9 before 1.9.3 patchlevel 426, and 2.0 before 2.0.0 patchlevel 195, do not perform taint checking for native functions, which allows context-dependent attackers to bypass intended $SAFE level restrictions.

Ruby
Opensuse
Amazon Linux AMI
Ubuntu
Slackware Linux
libruby1.8 (Ubuntu package)
ruby1.8 (Ubuntu package)
libruby1.9.1 (Ubuntu package)
ruby1.9.1 (Ubuntu package)

Install update from vendor's website.

libruby1.8 (Ubuntu package) - addressed in versions 1.8.7.352-2ubuntu1.4, 1.8.7.358-4ubuntu0.4, 1.8.7.358-7ubuntu1.2, 1.8.7.358-7ubuntu2.1
ruby1.8 (Ubuntu package) - addressed in versions 1.8.7.352-2ubuntu1.4, 1.8.7.358-4ubuntu0.4, 1.8.7.358-7ubuntu1.2, 1.8.7.358-7ubuntu2.1
libruby1.9.1 (Ubuntu package) - addressed in versions 1.9.3.0-1ubuntu2.8, 1.9.3.194-1ubuntu1.6, 1.9.3.194-8.1ubuntu1.2, 1.9.3.194-8.1ubuntu2.1
ruby1.9.1 (Ubuntu package) - addressed in versions 1.9.3.0-1ubuntu2.8, 1.9.3.194-1ubuntu1.6, 1.9.3.194-8.1ubuntu1.2, 1.9.3.194-8.1ubuntu2.1

• http://lists.fedoraproject.org/pipermail/package-announce/2013-May/107064.html
• http://lists.fedoraproject.org/pipermail/package-announce/2013-May/107098.html
• http://lists.fedoraproject.org/pipermail/package-announce/2013-May/107120.html
• http://lists.opensuse.org/opensuse-updates/2013-10/msg00057.html
• http://www.ubuntu.com/usn/USN-2035-1
• https://puppet.com/security/cve/cve-2013-2065
• https://www.ruby-lang.org/en/news/2013/05/14/taint-bypass-dl-fiddle-cve-2013-2065/

• Amazon Linux AMI update for ruby19
• Slackware Linux update for ruby
• Ubuntu update for ruby1.8, ruby1.9.1