CVE-2017-0898

Advisory lineage Upstream: 0 Downstream: 14
Modified
Published: 15 Sept 2017, 19:00
Last modified:17 Sept 2024, 01:36

Vulnerability Summary

Overall Risk (default)
high
70/100
CVSS Score
9.1 CRITICAL
v3.0 (nvd)
EPSS Score
1.4% LOW
1% probability +0.55%
KEV
Not listed
Ransomware
No reports
Public exploits
2 found
Dark Web
Not detected

Timeline

15 Sept 2017, 19:00
Published
Vulnerability first disclosed
17 Sept 2024, 01:36
Last Modified
Vulnerability information updated

Description

Ruby before 2.4.2, 2.3.5, and 2.2.8 is vulnerable to a malicious format string which contains a precious specifier (*) with a huge minus value. Such situation can lead to a buffer overrun, resulting in a heap memory corruption or an information disclosure from the heap.

CVSS Metrics

  • v3.0•CRITICAL•Score: 9.1CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H
  • v2.0•MEDIUM•Score: 6.4AV:N/AC:L/Au:N/C:P/I:N/A:P

EPSS Trends

Current EPSS score: 1.40%• Percentile: 81%

Techniques & Countermeasures

  • CWE-134•Use of Externally-Controlled Format String

    The product uses a function that accepts a format string as an argument, but the format string originates from an external source.

Affected Systems

  • hackerone•ruby

    Versions before 2.4.2, 2.3.5, and 2.2.8

  • ruby-lang•ruby

    2.2.0 | 2.2.1 | 2.2.2 | 2.2.3 | 2.2.4 | 2.2.5 | 2.2.6 | 2.2.7 | 2.3.0 | 2.3.1 | 2.3.2 | 2.3.3 | 2.3.4 | 2.4.0 | 2.4.1

References (13)