GoogleOSV:CVE-2021-41816CVE-2021-41816
CGI.escape_html in Ruby before 2.7.5 and 3.x before 3.0.3 has an integer overflow and resultant buffer overflow via a long string on platforms (such as Windows) where size_t and long have different numbers of bytes. This also affects the CGI gem before 0.3.1 for Ruby.
| CPE | Name | Operator | Version |
|---|---|---|---|
| ruby | eq | 1.8.7_p174-r1 | |
| ruby | eq | 1.8.7_p160-r2 | |
| ruby | eq | 2.0.0_p353-r1 | |
| ruby | eq | 1.8.7_p174-r0 | |
| ruby | eq | 2.2.2-r1 | |
| cgi | eq | 0.3.0 | |
| ruby | eq | 1.8.7_p160-r3 | |
| ruby | eq | 2.5.3-r3 | |
| ruby | eq | 2.0.0_p481-r0 | |
| ruby | eq | 2.3.1-r0 |
References
hackerone.com/reports/1328463
lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/IUXQCH6FRKANCVZO2Q7D2SQX33FP3KWN/
lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UTOJGS5IEFDK3UOO7IY4OTTFGHGLSWZF/
security-tracker.debian.org/tracker/CVE-2021-41816
security.gentoo.org/glsa/202401-27
security.netapp.com/advisory/ntap-20220303-0006/
www.ruby-lang.org/en/news/2021/11/24/buffer-overrun-in-cgi-escape_html-cve-2021-41816/
Related
