CVE-2015-1855 verify_certificate_identity in the OpenSSL extension in Ruby before 2.0.0 patchlevel 645, 2.1.x before 2.1.6, and 2.2.x before 2.2.2 does not properly validate hostnames, which allows remote attackers...
MediumCVSS 5.9
EPSS 2.8%
- Published
- Updated
- Exploit status
- No public exploit known
Description
verify_certificate_identity in the OpenSSL extension in Ruby before 2.0.0 patchlevel 645, 2.1.x before 2.1.6, and 2.2.x before 2.2.2 does not properly validate hostnames, which allows remote attackers to spoof servers via vectors related to (1) multiple wildcards, (1) wildcards in IDNA names, (3) case sensitivity, and (4) non-ASCII characters.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| ruby-lang ruby | >= 2.1.0, < 2.1.6 | 2.1.6 |
| ruby-lang ruby | >= 2.2.0, < 2.2.2 | 2.2.2 |
| ruby-lang ruby | = 2.0.0 | No fix listed |
| ruby-lang ruby | = 2.0.0-p0 | No fix listed |
| ruby-lang ruby | = 2.0.0-p195 | No fix listed |
| ruby-lang ruby | = 2.0.0-p247 | No fix listed |
| ruby-lang ruby | = 2.0.0-p353 | No fix listed |
| ruby-lang ruby | = 2.0.0-p451 | No fix listed |
| ruby-lang ruby | = 2.0.0-p481 | No fix listed |
| ruby-lang ruby | = 2.0.0-p576 | No fix listed |
| ruby-lang ruby | = 2.0.0-p594 | No fix listed |
| ruby-lang ruby | = 2.0.0-p598 | No fix listed |
| ruby-lang ruby | = 2.0.0-p643 | No fix listed |
| ruby-lang trunk | < 50292 | 50292 |
| debian linux | = 7.0 | No fix listed |
| debian linux | = 8.0 | No fix listed |
| debian linux | = 9.0 | No fix listed |
| puppet agent | = 1.0.0 | No fix listed |
| puppet enterprise | >= 3.0.0, < 3.8.0 | 3.8.0 |
| Ruby | = before 2.0.0 patchlevel 645 | No fix listed |
| Ruby | = 2.1.x before 2.1.6 | No fix listed |
| Ruby | = and 2.2.x before 2.2.2 | No fix listed |
References
- www.debian.org third-party-advisory
- www.debian.org third-party-advisory
- www.debian.org third-party-advisory
- bugs.ruby-lang.org third-party-advisory
- puppetlabs.com third-party-advisory
- www.ruby-lang.org vendor-advisory