Lucene search

CVE-2017-0898

🗓️ 15 Sep 2017 19:00:29Reported by hackeroneType

Ruby format string vulnerability leading to heap memory corruptio

Reporter	Title	Published	Views	Family All 95
Hacker One	Ruby: sprintf combined format string attack	10 Mar 201711:48	–	hackerone
UbuntuCve	CVE-2017-0898	15 Sep 201700:00	–	ubuntucve
Prion	Information disclosure	15 Sep 201719:29	–	prion
RedhatCVE	CVE-2017-0898	10 Oct 201910:31	–	redhatcve
Debian CVE	CVE-2017-0898	15 Sep 201719:29	–	debiancve
NVD	CVE-2017-0898	15 Sep 201719:29	–	nvd
OSV	CVE-2017-0898	15 Sep 201719:29	–	osv
OSV	ruby1.8 - security update	26 Sep 201700:00	–	osv
OSV	ruby2.3 - security update	11 Nov 201700:00	–	osv
OSV	ruby1.9.1 - security update	26 Sep 201700:00	–	osv

Nvd

Vulners

Node

ruby-lang rubyMatch2.2.0

ruby-lang rubyMatch2.2.1

ruby-lang rubyMatch2.2.2

ruby-lang rubyMatch2.2.3

ruby-lang rubyMatch2.2.4

ruby-lang rubyMatch2.2.5

ruby-lang rubyMatch2.2.6

ruby-lang rubyMatch2.2.7

ruby-lang rubyMatch2.3.0

ruby-lang rubyMatch2.3.1

ruby-lang rubyMatch2.3.2

ruby-lang rubyMatch2.3.3

ruby-lang rubyMatch2.3.4

ruby-lang rubyMatch2.4.0

ruby-lang rubyMatch2.4.1

[
  {
    "product": "Ruby",
    "vendor": "HackerOne",
    "versions": [
      {
        "status": "affected",
        "version": "Versions before 2.4.2, 2.3.5, and 2.2.8"
      }
    ]
  }
]

Source	Link
usn	www.usn.ubuntu.com/3685-1/
securityfocus	www.securityfocus.com/bid/100862
access	www.access.redhat.com/errata/RHSA-2017:3485
securitytracker	www.securitytracker.com/id/1039363
ruby-lang	www.ruby-lang.org/en/news/2017/09/14/sprintf-buffer-underrun-cve-2017-0898/
debian	www.debian.org/security/2017/dsa-4031
lists	www.lists.debian.org/debian-lts-announce/2018/07/msg00012.html
access	www.access.redhat.com/errata/RHSA-2018:0378
hackerone	www.hackerone.com/reports/212241
access	www.access.redhat.com/errata/RHSA-2018:0583

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

15 Sep 2017 19:29Current

7.4High risk

Vulners AI Score7.4

CVSS26.4

CVSS39.1

EPSS0.017

CWE-134