High severity · published Sep 19, 2017
CVE-2017-10784
The Basic authentication code in WEBrick library in Ruby before 2.2.8, 2.3.x before 2.3.5, and 2.4.x through 2.4.1 allows remote attackers to inject terminal emulator escape…
8.8
CVSS
16.4%
EPSS
No
On KEV
Description
The Basic authentication code in WEBrick library in Ruby before 2.2.8, 2.3.x before 2.3.5, and 2.4.x through 2.4.1 allows remote attackers to inject terminal emulator escape sequences into its log and possibly execute arbitrary commands via a crafted user name.
CVSS vector
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Attack vector
Network
Complexity
Low
Privileges
None
User interaction
Required
Confidentiality
High
Integrity
High
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)16.4% · higher than 97% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
RU
Ruby · Ruby-lang
through 2.2.7; 2.3.0; 2.3.0; 2.3.0; 2.3.1; 2.3.2; +8 more · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2017-10784
CVE.org
https://www.cve.org/CVERecord?id=CVE-2017-10784
Third Party Advisory
http://www.securityfocus.com/bid/100853
Third Party Advisory
http://www.securitytracker.com/id/1039363
www.securitytracker.com
http://www.securitytracker.com/id/1042004
access.redhat.com
https://access.redhat.com/errata/RHSA-2017:3485
access.redhat.com
https://access.redhat.com/errata/RHSA-2018:0378
access.redhat.com
https://access.redhat.com/errata/RHSA-2018:0583
More from Ruby
9.8
CVE-2022-28738
A double free was found in the Regexp compiler in Ruby 3.x before 3.0.4 and 3.1.x before 3.1.2
9.8
CVE-2016-2338
An exploitable heap overflow vulnerability exists in the Psych::Emitter start_document function of Ruby
9.8
CVE-2011-4121
The OpenSSL extension of Ruby (Git trunk) versions after 2011-09-01 up to 2011-11-03 always generated an exponent value of '1' to be used for private RSA key generation
9.8
CVE-2018-16395
An issue was discovered in the OpenSSL library in Ruby before 2.3.8, 2.4.x before 2.4.5, 2.5.x before 2.5.2, and 2.6.x before 2.6.0-preview3
9.8
CVE-2017-17790
The lazy_initialize function in lib/resolv.rb in Ruby through 2.4.3 uses Kernel#open, which might allow Command Injection attacks, as demonstrated by a Resolv::Hosts::new argument…