CVE-2017-10784 WEBrick RCE Vulnerability
HighCVSS 8.8
EPSS 16.4%
PoC
- Published
- Updated
- Exploit status
- Proof-of-concept only
Description
The Basic authentication code in WEBrick library in Ruby before 2.2.8, 2.3.x before 2.3.5, and 2.4.x through 2.4.1 allows remote attackers to inject terminal emulator escape sequences into its log and possibly execute arbitrary commands via a crafted user name.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| rubygems webrick(RubyGems) | < 1.4.0 | 1.4.0 |
| rubygems webrick(RubyGems) | = 1.3.1 | No fix listed |
| rubygems webrick(RubyGems) | = 1.4.0.beta1 | No fix listed |
| ruby-lang ruby | <= 2.2.7 | No fix listed |
| ruby-lang ruby | = 2.3.0 | No fix listed |
| ruby-lang ruby | = 2.3.0-preview1 | No fix listed |
| ruby-lang ruby | = 2.3.0-preview2 | No fix listed |
| ruby-lang ruby | = 2.3.1 | No fix listed |
| ruby-lang ruby | = 2.3.2 | No fix listed |
| ruby-lang ruby | = 2.3.3 | No fix listed |
| ruby-lang ruby | = 2.3.4 | No fix listed |
| ruby-lang ruby | = 2.4.0 | No fix listed |
| ruby-lang ruby | = 2.4.0-preview1 | No fix listed |
| ruby-lang ruby | = 2.4.0-preview2 | No fix listed |
| ruby-lang ruby | = 2.4.0-preview3 | No fix listed |
| ruby-lang ruby | = 2.4.0-rc1 | No fix listed |
| ruby-lang ruby | = 2.4.1 | No fix listed |
| alpine/ruby(Alpine:v3.10) | < 2.4.2-r0 | 2.4.2-r0 |
| alpine/ruby(Alpine:v3.11) | < 2.4.2-r0 | 2.4.2-r0 |
| alpine/ruby(Alpine:v3.12) | < 2.4.2-r0 | 2.4.2-r0 |
| alpine/ruby(Alpine:v3.13) | < 2.4.2-r0 | 2.4.2-r0 |
| alpine/ruby(Alpine:v3.14) | < 2.4.2-r0 | 2.4.2-r0 |
| alpine/ruby(Alpine:v3.15) | < 2.4.2-r0 | 2.4.2-r0 |
| alpine/ruby(Alpine:v3.16) | < 2.4.2-r0 | 2.4.2-r0 |
| alpine/ruby(Alpine:v3.17) | < 2.4.2-r0 | 2.4.2-r0 |
Show 16 more
| Product | Affected versions | Fixed in |
|---|---|---|
| alpine/ruby(Alpine:v3.18) | < 2.4.2-r0 | 2.4.2-r0 |
| alpine/ruby(Alpine:v3.19) | < 2.4.2-r0 | 2.4.2-r0 |
| alpine/ruby(Alpine:v3.20) | < 2.4.2-r0 | 2.4.2-r0 |
| alpine/ruby(Alpine:v3.21) | < 2.4.2-r0 | 2.4.2-r0 |
| alpine/ruby(Alpine:v3.22) | < 2.4.2-r0 | 2.4.2-r0 |
| alpine/ruby(Alpine:v3.23) | < 2.4.2-r0 | 2.4.2-r0 |
| alpine/ruby(Alpine:v3.24) | < 2.4.2-r0 | 2.4.2-r0 |
| alpine/ruby(Alpine:v3.3) | < 2.2.8-r0 | 2.2.8-r0 |
| alpine/ruby(Alpine:v3.4) | < 2.3.5-r0 | 2.3.5-r0 |
| alpine/ruby(Alpine:v3.5) | < 2.3.5-r0 | 2.3.5-r0 |
| alpine/ruby(Alpine:v3.6) | < 2.4.2-r0 | 2.4.2-r0 |
| alpine/ruby(Alpine:v3.7) | < 2.4.2-r0 | 2.4.2-r0 |
| alpine/ruby(Alpine:v3.8) | < 2.4.2-r0 | 2.4.2-r0 |
| alpine/ruby(Alpine:v3.9) | < 2.4.2-r0 | 2.4.2-r0 |
| alpine/ruby2.2(Alpine:v3.5) | < 2.2.8-r0 | 2.2.8-r0 |
| alpine/ruby2.2(Alpine:v3.6) | < 2.2.8-r0 | 2.2.8-r0 |
References
- nvd.nist.gov third-party-advisory vendor-advisory
- RHSA-2017:3485 vendor-advisory
- RHSA-2018:0378 vendor-advisory
- RHSA-2018:0583 vendor-advisory
- RHSA-2018:0585 vendor-advisory
- [debian-lts-announce] 20180714 [SECURITY] [DLA 1421-1] ruby2.1 security update mailing-list
- GLSA-201710-18 vendor-advisory
- USN-3528-1 vendor-advisory
- USN-3685-1 vendor-advisory
- DSA-4031 vendor-advisory
- www.ruby-lang.org patch vendor-advisory
- www.ruby-lang.org patch vendor-advisory
- www.ruby-lang.org vendor-advisory
- web.archive.org
- web.archive.org
- web.archive.org
- github.com patch
- github.com patch
- hackerone.com
- github.com exploit
- github.com
- github.com product
- 100853 third-party-advisory vdb-entry
- 1039363 third-party-advisory vdb-entry
- 1042004 vdb-entry
- security.alpinelinux.org vendor-advisory