Insecure installation in bundler - CVE-2013-0334

Vulnerability details

The vulnerability allows a remote attacker to compromise vulnerable system.

The vulnerability exists due to logic error within Bundler installation process, when handling gemfiles with multiple top-level sources. The application dies not control the installation source and may allow installing gem file from a different server from the list, if the server in question contains the gem file with the same name.

The attack could be launched using malicious gem file on a public repository, such as gems.github.com. A remote attacker can create a malicious gem file, which will be fetched and executed during installation.

Successful exploitation of the vulnerability may result in compromise of vulnerable system.

Affected software

How to mitigate CVE-2013-0334

External References

• http://bundler.io/blog/2014/08/14/bundler-may-install-gems-from-a-different-source-than-expected-cve...

Related Security Bulletins

• Remote code execution in Bundler
• Security update for Bundler in Gentoo Linux
• Red Hat update for rubygem-bundler and rubygem-thor
• Insecure installation in ruby-actionmailer (Alpine package)
• Fedora 21 update for rubygem-bundler