Описание
CGI.escape_html in Ruby before 2.7.5 and 3.x before 3.0.3 has an integer overflow and resultant buffer overflow via a long string on platforms (such as Windows) where size_t and long have different numbers of bytes. This also affects the CGI gem before 0.3.1 for Ruby.
A flaw was found in the ruby. This issue occurs due to improper bounds checking by a buffer overrun in CGI.escape_html. By sending an overly long string using the size_t parameter, a remote attacker could overflow a buffer and execute arbitrary code on the system.
Затронутые пакеты
| Платформа | Пакет | Состояние | Рекомендация | Релиз |
|---|---|---|---|---|
| Red Hat Enterprise Linux 6 | ruby | Not affected | ||
| Red Hat Enterprise Linux 7 | ruby | Not affected | ||
| Red Hat Enterprise Linux 8 | ruby:2.5/ruby | Not affected | ||
| Red Hat Enterprise Linux 8 | ruby:2.6/ruby | Not affected | ||
| Red Hat Enterprise Linux 8 | ruby:2.7/ruby | Not affected | ||
| Red Hat Enterprise Linux 8 | ruby:3.0/ruby | Not affected | ||
| Red Hat Enterprise Linux 9 | ruby | Not affected | ||
| Red Hat Software Collections | rh-ruby26-ruby | Not affected | ||
| Red Hat Software Collections for Red Hat Enterprise Linux 7 | rh-ruby30-ruby | Fixed | RHSA-2022:6855 | 11.10.2022 |
| Red Hat Software Collections for Red Hat Enterprise Linux 7 | rh-ruby27-ruby | Fixed | RHSA-2022:6856 | 11.10.2022 |
Показывать по
Дополнительная информация
Статус:
EPSS
7.5 High
CVSS3
Связанные уязвимости
CGI.escape_html in Ruby before 2.7.5 and 3.x before 3.0.3 has an integer overflow and resultant buffer overflow via a long string on platforms (such as Windows) where size_t and long have different numbers of bytes. This also affects the CGI gem before 0.3.1 for Ruby.
CGI.escape_html in Ruby before 2.7.5 and 3.x before 3.0.3 has an integer overflow and resultant buffer overflow via a long string on platforms (such as Windows) where size_t and long have different numbers of bytes. This also affects the CGI gem before 0.3.1 for Ruby.
CGI.escape_html in Ruby before 2.7.5 and 3.x before 3.0.3 has an integ ...
Уязвимость программного средства cgi gem, вызванная выходом операции за границы буфера в памяти, позволяющая нарушителю выполнить произвольный код в целевой системе
EPSS
7.5 High
CVSS3