CVE-2011-2705 The SecureRandom.random_bytes function in lib/securerandom.rb in Ruby before 1.8.7-p352 and 1.9.x before 1.9.2-p290 relies on PID values for initialization, which makes it easier for context-dependent...
MediumCVSS 5.0
EPSS 2.2%
- Published
- Updated
- Exploit status
- No public exploit known
Description
The SecureRandom.random_bytes function in lib/securerandom.rb in Ruby before 1.8.7-p352 and 1.9.x before 1.9.2-p290 relies on PID values for initialization, which makes it easier for context-dependent attackers to predict the result string by leveraging knowledge of random strings obtained in an earlier process with the same PID.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| ruby-lang ruby | <= 1.8.7-334 | No fix listed |
| ruby-lang ruby | = 1.8.7-p22 | No fix listed |
| ruby-lang ruby | = 1.8.7-p71 | No fix listed |
| ruby-lang ruby | = 1.8.7-p72 | No fix listed |
| ruby-lang ruby | = 1.8.7-160 | No fix listed |
| ruby-lang ruby | = 1.8.7-173 | No fix listed |
| ruby-lang ruby | = 1.8.7-248 | No fix listed |
| ruby-lang ruby | = 1.8.7-249 | No fix listed |
| ruby-lang ruby | = 1.8.7-299 | No fix listed |
| ruby-lang ruby | = 1.8.7-302 | No fix listed |
| ruby-lang ruby | = 1.8.7-330 | No fix listed |
| ruby-lang ruby | = 1.8.7-p21 | No fix listed |
| ruby-lang ruby | = 1.9 | No fix listed |
| ruby-lang ruby | = 1.9-r18423 | No fix listed |
| ruby-lang ruby | = 1.9.0 | No fix listed |
| ruby-lang ruby | = 1.9.0-r18423 | No fix listed |
| ruby-lang ruby | = 1.9.0-0 | No fix listed |
| ruby-lang ruby | = 1.9.0-1 | No fix listed |
| ruby-lang ruby | = 1.9.0-2 | No fix listed |
| ruby-lang ruby | = 1.9.0-20060415 | No fix listed |
| ruby-lang ruby | = 1.9.0-20070709 | No fix listed |
| ruby-lang ruby | = 1.9.1 | No fix listed |
| ruby-lang ruby | = 1.9.1--p0 | No fix listed |
| ruby-lang ruby | = 1.9.1--p129 | No fix listed |
| ruby-lang ruby | = 1.9.1--p243 | No fix listed |
Show 10 more
| Product | Affected versions | Fixed in |
|---|---|---|
| ruby-lang ruby | = 1.9.1--p376 | No fix listed |
| ruby-lang ruby | = 1.9.1--p429 | No fix listed |
| ruby-lang ruby | = 1.9.1--preview_1 | No fix listed |
| ruby-lang ruby | = 1.9.1--preview_2 | No fix listed |
| ruby-lang ruby | = 1.9.1--rc1 | No fix listed |
| ruby-lang ruby | = 1.9.1--rc2 | No fix listed |
| ruby-lang ruby | = 1.9.2 | No fix listed |
| ruby-lang ruby | = 1.9.2-dev | No fix listed |
| ruby-lang ruby | = 1.9.2-p136 | No fix listed |
| ruby-lang ruby | = 1.9.2-p180 | No fix listed |
References
- FEDORA-2011-9374 patch vendor-advisory
- FEDORA-2011-9359 vendor-advisory
- redmine.ruby-lang.org
- svn.ruby-lang.org patch
- svn.ruby-lang.org
- svn.ruby-lang.org
- [oss-security] 20110711 CVE Request: ruby PRNG fixes mailing-list patch
- [oss-security] 20110712 Re: CVE Request: ruby PRNG fixes mailing-list patch
- [oss-security] 20110720 Re: CVE Request: ruby PRNG fixes mailing-list patch
- [oss-security] 20110720 Re: CVE Request: ruby PRNG fixes mailing-list patch
- RHSA-2011:1581 vendor-advisory
- www.ruby-lang.org patch
- www.ruby-lang.org patch
- 49015 vdb-entry
- bugzilla.redhat.com patch