CVE-2016-0752
published 2016-02-16CVE-2016-0752: Directory traversal vulnerability in Action View in Ruby on Rails before 3.2.22.1, 4.0.x and 4.1.x before 4.1.14.1, 4.2.x before 4.2.5.1, and 5.x before…
PriorityP186high7.5CVSS 3.1
AVNACLPRNUINSUCHINAN
KEVITWEXPLOIT
CISA Known Exploited Vulnerabilitydue 2022-04-15
Exploited in the wild
EPSS
95.54%
99.9th percentile
Directory traversal vulnerability in Action View in Ruby on Rails before 3.2.22.1, 4.0.x and 4.1.x before 4.1.14.1, 4.2.x before 4.2.5.1, and 5.x before 5.0.0.beta1.1 allows remote attackers to read arbitrary files by leveraging an application's unrestricted use of the render method and providing a .. (dot dot) in a pathname.
Affected
57 ranges· showing 25
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| actionpack_project | actionpack | >= 0 < 3.2.22.1 | 3.2.22.1 |
| actionpack_project | actionpack | >= 3.0.0 < 3.2.22.2 | 3.2.22.2 |
| actionpack_project | actionpack | >= 4.0.0 < 4.1.14.1 | 4.1.14.1 |
| actionpack_project | actionpack | >= 4.0.0 < 4.1.14.2 | 4.1.14.2 |
| actionpack_project | actionpack | >= 4.2.0 < 4.2.5.1 | 4.2.5.1 |
| debian | debian_linux | — | — |
| debian | rails | < rails 2:4.2.5.2-1 (bookworm) | rails 2:4.2.5.2-1 (bookworm) |
| debian | rails | < rails 2:4.2.5.1-1 (bookworm) | rails 2:4.2.5.1-1 (bookworm) |
| opensuse | leap | — | — |
| opensuse | opensuse | — | — |
| rails | actionview | >= 3.0.0 < 3.2.22.2 | 3.2.22.2 |
| rails | actionview | >= 3.2.0 < 3.2.22.2 | 3.2.22.2 |
| rails | actionview | >= 4.0.0 < 4.1.14.1 | 4.1.14.1 |
| rails | actionview | >= 4.0.0 < 4.1.14.2 | 4.1.14.2 |
| rails | actionview | >= 4.2.0 < 4.2.5.1 | 4.2.5.1 |
| redhat | software_collections | — | — |
| rubyonrails | rails | < 3.2.22.1 | 3.2.22.1 |
| rubyonrails | rails | — | — |
| rubyonrails | rails | — | — |
| rubyonrails | rails | — | — |
| rubyonrails | rails | — | — |
| rubyonrails | rails | — | — |
| rubyonrails | rails | — | — |
| rubyonrails | rails | — | — |
| rubyonrails | rails | — | — |
Detection & IOCsextracted from sources · hover to see the quote
- →Detect directory traversal attempts against Rails Action View render by looking for URL-encoded path separators (%2f) combined with path traversal sequences (.. or /proc/self/) in GET requests to application endpoints. ↗
- →Monitor for multipart/form-data POST requests uploading .gif files followed immediately by a GET request referencing a /tmp/ path or Tempfile path — this is the TempFile upload + inclusion attack pattern for CVE-2016-0752 RCE. ↗
- →Alert on HTTP responses containing 'Tempfile:/<path>' in the body, which leaks the temporary file path used for the inclusion/RCE step. ↗
- →Detect exploitation attempts reading /proc/self/fd/7 via URL-encoded traversal (proc%2fself%2ffd%2f7) to leak Rails log file contents containing Tempfile paths, bypassing extension checks. ↗
- →Flag Rails applications where the render method is called with unsanitized user-controlled parameters (e.g., render params[:id]), as this is the prerequisite vulnerable code pattern for CVE-2016-0752. ↗
- →Check HTTP responses for the string 'render params' in the body (dev environment error pages), which confirms a dynamically vulnerable render endpoint. ↗
- →Check HTTP responses for the string 'ruby' when requesting /proc/self/comm via traversal — a positive match indicates arbitrary file read is confirmed on the target. ↗
- ·The Metasploit module default URIPATH is '/users' — actual vulnerable path varies per application; operators must enumerate the correct dynamic render endpoint before exploitation. ↗
- ·The module only supports linux and bsd platforms with x86 architecture for the payload stage; the directory traversal/file read primitive itself is platform-agnostic. ↗
- ·The log inclusion fallback (leak_log via /proc/self/fd/7) is used only when the Tempfile path cannot be extracted from the 422 response body directly. ↗
- ·Only one exploitation attempt is possible when testing against the built-in Rails WEBrick server; repeated attempts will fail. ↗
- ·CVE-2016-2097 is a bypass of the incomplete fix for CVE-2016-0752; detections and patches for CVE-2016-0752 alone are insufficient — both must be addressed. ↗
CVSS provenance
nvdv3.17.5HIGHCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
nvdv2.05.0MEDIUMAV:N/AC:L/Au:N/C:P/I:N/A:N
ghsa7.5HIGH
osv7.5HIGH
vulncheck7.5HIGH
cisa7.5HIGH
vendor_debian7.5HIGH
vendor_redhat7.5HIGH
CVEs like this are exactly what “Exploited This Week” covers.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
CISA
Ruby on Rails Directory Traversal Vulnerability
cisa·2022-03-25·CVSS 7.5
CVE-2016-0752 [HIGH] CWE-22 Ruby on Rails Directory Traversal Vulnerability
Vulnerability: Ruby on Rails Directory Traversal Vulnerability
Affected: Rails Ruby on Rails
Directory traversal vulnerability in Action View in Ruby on Rails allows remote attackers to read arbitrary files.
Required Action: Apply updates per vendor instructions.
Notes: https://nvd.nist.gov/vuln/detail/CVE-2016-0752
Remediation Due Date: 2022-04-15
Red Hat
rubygem-actionpack: directory traversal in Action View, incomplete CVE-2016-0752 fix
vendor_redhat·2016-02-29·CVSS 7.5
CVE-2016-2097 [HIGH] CWE-22 rubygem-actionpack: directory traversal in Action View, incomplete CVE-2016-0752 fix
rubygem-actionpack: directory traversal in Action View, incomplete CVE-2016-0752 fix
Directory traversal vulnerability in Action View in Ruby on Rails before 3.2.22.2 and 4.x before 4.1.14.2 allows remote attackers to read arbitrary files by leveraging an application's unrestricted use of the render method and providing a .. (dot dot) in a pathname. NOTE: this vulnerability exists because of an incomplete fix for CVE-2016-0752.
A directory traversal flaw was found in the way the Action View component searched for templates for rendering. If an application passed untrusted input to the 'render' method, a remote, unauthenticated attacker could use this flaw to render unexpected files and, possibly, execute arbitrary code.
Package: ruby193-rubygem-actionpack (CloudForms Management Engine 5
Red Hat
rubygem-actionpack: directory traversal flaw in Action View
vendor_redhat·2016-01-25·CVSS 7.5
CVE-2016-0752 [HIGH] CWE-22 rubygem-actionpack: directory traversal flaw in Action View
rubygem-actionpack: directory traversal flaw in Action View
Directory traversal vulnerability in Action View in Ruby on Rails before 3.2.22.1, 4.0.x and 4.1.x before 4.1.14.1, 4.2.x before 4.2.5.1, and 5.x before 5.0.0.beta1.1 allows remote attackers to read arbitrary files by leveraging an application's unrestricted use of the render method and providing a .. (dot dot) in a pathname.
A directory traversal flaw was found in the way the Action View component searched for templates for rendering. If an application passed untrusted input to the 'render' method, a remote, unauthenticated attacker could use this flaw to render unexpected files and, possibly, execute arbitrary code.
Mitigation: Avoid passing untrusted input to render method, or verify the input using whitelist before passing
Debian
CVE-2016-2097: rails - Directory traversal vulnerability in Action View in Ruby on Rails before 3.2.22....
vendor_debian·2016·CVSS 7.5
CVE-2016-2097 [HIGH] CVE-2016-2097: rails - Directory traversal vulnerability in Action View in Ruby on Rails before 3.2.22....
Directory traversal vulnerability in Action View in Ruby on Rails before 3.2.22.2 and 4.x before 4.1.14.2 allows remote attackers to read arbitrary files by leveraging an application's unrestricted use of the render method and providing a .. (dot dot) in a pathname. NOTE: this vulnerability exists because of an incomplete fix for CVE-2016-0752.
Scope: local
bookworm: resolved (fixed in 2:4.2.5.2-1)
bullseye: resolved (fixed in 2:4.2.5.2-1)
forky: resolved (fixed in 2:4.2.5.2-1)
sid: resolved (fixed in 2:4.2.5.2-1)
trixie: resolved (fixed in 2:4.2.5.2-1)
Debian
CVE-2016-0752: rails - Directory traversal vulnerability in Action View in Ruby on Rails before 3.2.22....
vendor_debian·2016·CVSS 7.5
CVE-2016-0752 [HIGH] CVE-2016-0752: rails - Directory traversal vulnerability in Action View in Ruby on Rails before 3.2.22....
Directory traversal vulnerability in Action View in Ruby on Rails before 3.2.22.1, 4.0.x and 4.1.x before 4.1.14.1, 4.2.x before 4.2.5.1, and 5.x before 5.0.0.beta1.1 allows remote attackers to read arbitrary files by leveraging an application's unrestricted use of the render method and providing a .. (dot dot) in a pathname.
Scope: local
bookworm: resolved (fixed in 2:4.2.5.1-1)
bullseye: resolved (fixed in 2:4.2.5.1-1)
forky: resolved (fixed in 2:4.2.5.1-1)
sid: resolved (fixed in 2:4.2.5.1-1)
trixie: resolved (fixed in 2:4.2.5.1-1)
VulDB
Ruby on Rails 3.0/4.0 Action View path traversal (RHSA-2016:0296 / EDB-40561)
vuldb·2026-04-23·CVSS 7.5
CVE-2016-0752 [HIGH] Ruby on Rails 3.0/4.0 Action View path traversal (RHSA-2016:0296 / EDB-40561)
A vulnerability classified as problematic has been found in Ruby on Rails 3.0/4.0. The impacted element is an unknown function of the component Action View. The manipulation leads to path traversal.
This vulnerability is documented as CVE-2016-0752. The attack can be initiated remotely. Additionally, an exploit exists.
It is recommended to upgrade the affected component.
OSV
Moderate severity vulnerability that affects actionview
osv·2018-08-13·CVSS 7.5
CVE-2016-0752 [HIGH] Moderate severity vulnerability that affects actionview
Moderate severity vulnerability that affects actionview
Withdrawn, accidental duplicate publish.
Directory traversal vulnerability in Action View in Ruby on Rails before 3.2.22.2 and 4.x before 4.1.14.2 allows remote attackers to read arbitrary files by leveraging an application's unrestricted use of the render method and providing a .. (dot dot) in a pathname. NOTE: this vulnerability exists because of an incomplete fix for CVE-2016-0752.
GHSA
Moderate severity vulnerability that affects actionview
ghsa·2018-08-13·CVSS 7.5
CVE-2016-0752 [HIGH] Moderate severity vulnerability that affects actionview
Moderate severity vulnerability that affects actionview
Withdrawn, accidental duplicate publish.
Directory traversal vulnerability in Action View in Ruby on Rails before 3.2.22.2 and 4.x before 4.1.14.2 allows remote attackers to read arbitrary files by leveraging an application's unrestricted use of the render method and providing a .. (dot dot) in a pathname. NOTE: this vulnerability exists because of an incomplete fix for CVE-2016-0752.
OSV
Directory traversal vulnerability in Action View in Ruby on Rails
osv·2017-10-24
CVE-2016-0752 [HIGH] Directory traversal vulnerability in Action View in Ruby on Rails
Directory traversal vulnerability in Action View in Ruby on Rails
Directory traversal vulnerability in Action View in Ruby on Rails before 3.2.22.1, 4.0.x and 4.1.x before 4.1.14.1, 4.2.x before 4.2.5.1, and 5.x before 5.0.0.beta1.1 allows remote attackers to read arbitrary files by leveraging an application's unrestricted use of the render method and providing a `..` (dot dot) in a pathname.
GHSA
actionview contains Path Traversal vulnerability
ghsa·2017-10-24·CVSS 7.5
CVE-2016-2097 [HIGH] CWE-22 actionview contains Path Traversal vulnerability
actionview contains Path Traversal vulnerability
There is a possible directory traversal and information leak vulnerability in Action View. This was meant to be fixed on CVE-2016-0752. However the 3.2 patch was not covering all possible scenarios. This vulnerability has been assigned the CVE identifier CVE-2016-2097.
Versions Affected: 3.2.x, 4.0.x, 4.1.x
Not affected: 4.2+
Fixed Versions: 3.2.22.2, 4.1.14.2
Impact
Applications that pass unverified user input to the `render` method in a controller may be vulnerable to an information leak vulnerability.
Impacted code will look something like this:
```ruby
def index
render params[:id]
end
```
Carefully crafted requests can cause the above code to render files from unexpected places like outside the application's view directory, and can
GHSA
Directory traversal vulnerability in Action View in Ruby on Rails
ghsa·2017-10-24
CVE-2016-0752 [HIGH] CWE-22 Directory traversal vulnerability in Action View in Ruby on Rails
Directory traversal vulnerability in Action View in Ruby on Rails
Directory traversal vulnerability in Action View in Ruby on Rails before 3.2.22.1, 4.0.x and 4.1.x before 4.1.14.1, 4.2.x before 4.2.5.1, and 5.x before 5.0.0.beta1.1 allows remote attackers to read arbitrary files by leveraging an application's unrestricted use of the render method and providing a `..` (dot dot) in a pathname.
OSV
actionview contains Path Traversal vulnerability
osv·2017-10-24·CVSS 7.5
CVE-2016-2097 [HIGH] actionview contains Path Traversal vulnerability
actionview contains Path Traversal vulnerability
There is a possible directory traversal and information leak vulnerability in Action View. This was meant to be fixed on CVE-2016-0752. However the 3.2 patch was not covering all possible scenarios. This vulnerability has been assigned the CVE identifier CVE-2016-2097.
Versions Affected: 3.2.x, 4.0.x, 4.1.x
Not affected: 4.2+
Fixed Versions: 3.2.22.2, 4.1.14.2
Impact
Applications that pass unverified user input to the `render` method in a controller may be vulnerable to an information leak vulnerability.
Impacted code will look something like this:
```ruby
def index
render params[:id]
end
```
Carefully crafted requests can cause the above code to render files from unexpected places like outside the application's view directory, and can
OSV
CVE-2016-2097: Directory traversal vulnerability in Action View in Ruby on Rails before 3
osv·2016-04-07·CVSS 7.5
CVE-2016-2097 [HIGH] CVE-2016-2097: Directory traversal vulnerability in Action View in Ruby on Rails before 3
Directory traversal vulnerability in Action View in Ruby on Rails before 3.2.22.2 and 4.x before 4.1.14.2 allows remote attackers to read arbitrary files by leveraging an application's unrestricted use of the render method and providing a .. (dot dot) in a pathname. NOTE: this vulnerability exists because of an incomplete fix for CVE-2016-0752.
OSV
CVE-2016-0752: Directory traversal vulnerability in Action View in Ruby on Rails before 3
osv·2016-02-16·CVSS 7.5
CVE-2016-0752 [HIGH] CVE-2016-0752: Directory traversal vulnerability in Action View in Ruby on Rails before 3
Directory traversal vulnerability in Action View in Ruby on Rails before 3.2.22.1, 4.0.x and 4.1.x before 4.1.14.1, 4.2.x before 4.2.5.1, and 5.x before 5.0.0.beta1.1 allows remote attackers to read arbitrary files by leveraging an application's unrestricted use of the render method and providing a .. (dot dot) in a pathname.
VulnCheck
Ruby on Rails Directory Traversal Vulnerability
vulncheck·2016·CVSS 7.5
CVE-2016-0752 [HIGH] CWE-22 Ruby on Rails Directory Traversal Vulnerability
Ruby on Rails Directory Traversal Vulnerability
Directory traversal vulnerability in Action View in Ruby on Rails allows remote attackers to read arbitrary files.
Affected: Rails Ruby on Rails
Required Action: Apply updates per vendor instructions.
Exploitation References: https://www.f5.com/labs/articles/threat-intelligence/echobot-malware-now-up-to-71-exploits--targeting-scada; https://www.researchgate.net/publication/348602660_An_analysis_of_the_use_of_CVEs_by_IoT_malware; https://www.cisa.gov/sites/default/files/feeds/known_exploited_vulnerabilities.json
Remediation Due: 2022-04-15
No detection rules found.
Exploit-DB
Ruby on Rails - Dynamic Render File Upload / Remote Code Execution (Metasploit)
exploitdb·2016-10-17
CVE-2016-0752 Ruby on Rails - Dynamic Render File Upload / Remote Code Execution (Metasploit)
Ruby on Rails - Dynamic Render File Upload / Remote Code Execution (Metasploit)
---
require 'msf/core'
class MetasploitModule 'Ruby on Rails Dynamic Render File Upload Remote Code Execution',
'Description' => %q{
This module exploits a remote code execution vulnerability in the explicit render
method when leveraging user parameters.
This module has been tested across multiple versions of Ruby on Rails.
The technique used by this module requires the specified
endpoint to be using dynamic render paths, such as the following example:
def show
render params[:id]
end
Also, the vulnerable target will need a POST endpoint for the TempFile upload, this
can literally be any endpoint. This module doesnt use the log inclusion method of
exploitation due to it not being universal enough. Instead,
Metasploit
Ruby on Rails Dynamic Render File Upload Remote Code Execution
metasploit
Ruby on Rails Dynamic Render File Upload Remote Code Execution
Ruby on Rails Dynamic Render File Upload Remote Code Execution
This module exploits a remote code execution vulnerability in the explicit render method when leveraging user parameters. This module has been tested across multiple versions of Ruby on Rails. The technique used by this module requires the specified endpoint to be using dynamic render paths, such as the following example: def show render params[:id] end Also, the vulnerable target will need a POST endpoint for the TempFile upload, this can literally be any endpoint. This module doesnt use the log inclusion method of exploitation due to it not being universal enough. Instead, a new code injection technique was found and used whereby an attacker can upload temporary image files against any POST endpoint and use them for the incl
Unit42
Mirai Variant ECHOBOT Resurfaces with 13 Previously Unexploited Vulnerabilities
blogs_unit42·2019-12-13
Mirai Variant ECHOBOT Resurfaces with 13 Previously Unexploited Vulnerabilities
Threat Research Center
Threat Research
Malware
## Mirai Variant ECHOBOT Resurfaces with 13 Previously Unexploited Vulnerabilities
Ruchna Nigam
Published: December 13, 2019
Malware
Threat Research
Vulnerabilities
Echobot
IoT
IoT Vulnerability
Mirai
Mirai variant
## Executive Summary
Since the discovery of the Mirai variant using the binary name ECHOBOT in May 2019, it has resurfaced from time to time, using new infrastructure, and more remarkably, adding to the list of vulnerabilities it scans for, as a means to increase its attack surface with each evolution.
Unlike other Mirai variants, this particular variant stands out for the sheer number of exploits it incorporates, with the latest version having a total of 71 unique exploits, 13 of which haven’t been seen exploite
Unit42
Mirai Variant ECHOBOT Resurfaces with 13 Previously Unexploited Vulnerabilities
blogs_unit42·2019-12-13
Mirai Variant ECHOBOT Resurfaces with 13 Previously Unexploited Vulnerabilities
## Executive Summary
Since the discovery of the Mirai variant using the binary name ECHOBOT in May 2019, it has resurfaced from time to time, using new infrastructure, and more remarkably, adding to the list of vulnerabilities it scans for, as a means to increase its attack surface with each evolution.
Unlike other Mirai variants, this particular variant stands out for the sheer number of exploits it incorporates, with the latest version having a total of 71 unique exploits, 13 of which haven’t been seen exploited in the wild until now, ranging from extremely old CVEs from as long back as 2003, to recent vulnerabilities made public as recently as early December 2019. Based on this seemingly odd choice, one could risk a guess that the attackers could potentially be aiming for the sweet sp
HackerOne
Regarding [CVE-2016-0752] Possible Information Leak Vulnerability in Action View
hackerone·2016-03-01·CVSS 7.5
CVE-2016-0752 [HIGH] Regarding [CVE-2016-0752] Possible Information Leak Vulnerability in Action View
Regarding [CVE-2016-0752] Possible Information Leak Vulnerability in Action View
# Possible Information Leak Vulnerability in Action View.
There is a possible directory traversal and information leak vulnerability in
Action View. This was meant to be fixed on CVE-2016-0752. However the 3.2 patch was not covering
all the scenarios. This vulnerability has been assigned the CVE identifier
CVE-2016-2097.
Versions Affected: 3.2.x, 4.0.x, 4.1.x
Not affected: 4.2+
Fixed Versions: 3.2.22.2, 4.1.14.2
Impact
Applications that pass unverified user input to the `render` method in a
controller may be vulnerable to an information leak vulnerability.
Impacted code will look something like this:
```ruby
def index
render params[:id]
end
```
Carefully crafted requests can cause the above code to rend
Bugzilla
CVE-2016-2097 rubygem-actionview, rubygem-actionpack: directory traversal in Action View, incomplete CVE-2016-0752 fix
bugzilla·2016-02-19·CVSS 7.5
CVE-2016-2097 [HIGH] CVE-2016-2097 rubygem-actionview, rubygem-actionpack: directory traversal in Action View, incomplete CVE-2016-0752 fix
CVE-2016-2097 rubygem-actionview, rubygem-actionpack: directory traversal in Action View, incomplete CVE-2016-0752 fix
A possible directory traversal and information leak vulnerability in Action View was found. This issue was meant to be fixed in patch for CVE-2016-0752. However the 3.2 patch was not covering all the scenarios.
Applications that pass unverified user input to the `render` method in a controller may be vulnerable to an information leak vulnerability.
Impacted code will look something like this:
```ruby
def index
render params[:id]
end
```
Carefully crafted requests can cause the above code to render files from unexpected places like outside the application's view directory, and can possibly escalate this to a remote code execution attack.
A workaround to this issue is
HackerOne
Explicit, dynamic render path: Dir. Trav + RCE
hackerone·2016-02-12·CVSS 7.5
CVE-2016-0752 [HIGH] Explicit, dynamic render path: Dir. Trav + RCE
Explicit, dynamic render path: Dir. Trav + RCE
Possible Information Leak Vulnerability in Action View
There is a possible directory traversal and information leak vulnerability in
Action View. This vulnerability has been assigned the CVE identifier
CVE-2016-0752.
Versions Affected: All.
Not affected: None.
Fixed Versions: 5.0.0.beta1.1, 4.2.5.1, 4.1.14.1, 3.2.22.1
Impact
Applications that pass unverified user input to the `render` method in a
controller may be vulnerable to an information leak vulnerability.
Impacted code will look something like this:
```ruby
def index
render params[:id]
end
```
Carefully crafted requests can cause the above code to render files from
unexpected places like outside the application's view directory, and can
possibly escalate this to a remote code exe
Bugzilla
CVE-2016-0752 rubygem-actionpack: directory traversal flaw in Action View
bugzilla·2016-01-26·CVSS 7.5
CVE-2016-0752 [HIGH] CVE-2016-0752 rubygem-actionpack: directory traversal flaw in Action View
CVE-2016-0752 rubygem-actionpack: directory traversal flaw in Action View
A possible directory traversal and information leak vulnerability in Action View was reported. Applications that pass unverified user input to the `render` method in a controller may be vulnerable to an information leak vulnerability.
Vulnerable code:
```ruby
def index
render params[:id]
end
```
Carefully crafted requests can cause the above code to render files from unexpected places like outside the application's view directory, and can possibly escalate this to a remote code execution attack. All versions are affected.
http://weblog.rubyonrails.org/2016/1/25/Rails-5-0-0-beta1-1-4-2-5-1-4-1-14-1-3-2-22-1-and-rails-html-sanitizer-1-0-3-have-been-released/
External References:
https://groups.google.com/forum/#
Bugzilla
CVE-2016-0752 rubygem-actionview: Possible Information Leak Vulnerability in Action View [fedora-all]
bugzilla·2016-01-26·CVSS 7.5
CVE-2016-0752 [HIGH] CVE-2016-0752 rubygem-actionview: Possible Information Leak Vulnerability in Action View [fedora-all]
CVE-2016-0752 rubygem-actionview: Possible Information Leak Vulnerability in Action View [fedora-all]
This is an automatically created tracking bug! It was created to ensure
that one or more security vulnerabilities are fixed in affected versions
of Fedora.
For comments that are specific to the vulnerability please use bugs filed
against the "Security Response" product referenced in the "Blocks" field.
For more information see:
http://fedoraproject.org/wiki/Security/TrackingBugs
When submitting as an update, use the fedpkg template provided in the next
comment(s). This will include the bug IDs of this tracking bug as well as
the relevant top-level CVE bugs.
Please also mention the CVE IDs being fixed in the RPM changelog and the
fedpkg commit message.
NOTE: this issue affects multipl
http://lists.fedoraproject.org/pipermail/package-announce/2016-February/178044.htmlhttp://lists.fedoraproject.org/pipermail/package-announce/2016-February/178069.htmlhttp://lists.opensuse.org/opensuse-security-announce/2016-04/msg00053.htmlhttp://lists.opensuse.org/opensuse-updates/2016-02/msg00034.htmlhttp://lists.opensuse.org/opensuse-updates/2016-02/msg00043.htmlhttp://rhn.redhat.com/errata/RHSA-2016-0296.htmlhttp://www.debian.org/security/2016/dsa-3464http://www.openwall.com/lists/oss-security/2016/01/25/13http://www.securityfocus.com/bid/81801http://www.securitytracker.com/id/1034816https://groups.google.com/forum/message/raw?msg=ruby-security-ann/335P1DcLG00/JXcBnTtZEgAJhttps://www.exploit-db.com/exploits/40561/http://lists.fedoraproject.org/pipermail/package-announce/2016-February/178044.htmlhttp://lists.fedoraproject.org/pipermail/package-announce/2016-February/178069.htmlhttp://lists.opensuse.org/opensuse-security-announce/2016-04/msg00053.htmlhttp://lists.opensuse.org/opensuse-updates/2016-02/msg00034.htmlhttp://lists.opensuse.org/opensuse-updates/2016-02/msg00043.htmlhttp://rhn.redhat.com/errata/RHSA-2016-0296.htmlhttp://www.debian.org/security/2016/dsa-3464http://www.openwall.com/lists/oss-security/2016/01/25/13http://www.securityfocus.com/bid/81801http://www.securitytracker.com/id/1034816https://groups.google.com/forum/message/raw?msg=ruby-security-ann/335P1DcLG00/JXcBnTtZEgAJhttps://www.exploit-db.com/exploits/40561/https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2016-0752
2016-02-16
Published
2022-03-25
Added to CISA KEV
Exploited in the wild