CVE-2018-1000074Deserialization of Untrusted Data in Rubygems

Severity
7.8HIGHNVD
OSV9.1OSV7.5
EPSS
0.5%
top 32.53%
CISA KEV
Not in KEV
Exploit
No known exploits
Timeline
PublishedMar 13
Latest updateMay 14

Description

RubyGems version Ruby 2.2 series: 2.2.9 and earlier, Ruby 2.3 series: 2.3.6 and earlier, Ruby 2.4 series: 2.4.3 and earlier, Ruby 2.5 series: 2.5.0 and earlier, prior to trunk revision 62422 contains a Deserialization of Untrusted Data vulnerability in owner command that can result in code execution. This attack appear to be exploitable via victim must run the `gem owner` command on a gem with a specially crafted YAML file. This vulnerability appears to have been fixed in 2.7.6.

CVSS vector

CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:HExploitability: 1.8 | Impact: 5.9

Affected Packages5 packages

debiandebian/rubygems< jruby 9.1.17.0-1 (bookworm)
Debianrubygems/rubygems< 3.2.0~rc.1-1+3
NVDrubygems/rubygems2.2.9+3
debiandebian/jruby< jruby 9.1.17.0-1 (bookworm)
Debianjruby/jruby< 9.1.17.0-1+2

Patches

🔴Vulnerability Details

8
OSV
RubyGems Deserialization of Untrusted Data vulnerability2022-05-14
GHSA
RubyGems Deserialization of Untrusted Data vulnerability2022-05-14
OSV
ruby2.0 regression2021-03-25
OSV
ruby1.9.1, ruby2.0, ruby2.3 vulnerabilities2018-06-13
OSV
ruby1.9.1, ruby2.0 regression2018-04-13

📋Vendor Advisories

6
Ubuntu
Ruby regression2021-03-25
Ubuntu
Ruby vulnerabilities2018-06-13
Ubuntu
Ruby regression2018-04-13
Ubuntu
Ruby vulnerabilities2018-04-05
Red Hat
rubygems: Unsafe Object Deserialization Vulnerability in gem owner allowing arbitrary code execution on specially crafted YAML2018-02-15

💬Community

2
Bugzilla
CVE-2018-1000074 rubygems: Unsafe Object Deserialization Vulnerability in gem owner allowing arbitrary code execution on specially crafted YAML2018-02-21
Bugzilla
CVE-2018-1000073 CVE-2018-1000074 CVE-2018-1000075 CVE-2018-1000076 CVE-2018-1000077 CVE-2018-1000078 CVE-2018-1000079 rubygems: various flaws [fedora-all]2018-02-21