NetSight
IP …
critical9.8

CVE-2017-14064

Ruby through 2.2.7, 2.3.x through 2.3.4, and 2.4.x through 2.4.1 can expose arbitrary memory during a JSON.generate call.

Impact

Ruby through 2.2.7, 2.3.x through 2.3.4, and 2.4.x through 2.4.1 can expose arbitrary memory during a JSON.generate call. The issues lies in using strdup in ext/json/ext/generator/generator.c, which will stop after encountering a '\0' byte, returning a pointer to a string of length zero, which is not the length stored in space_len.

Affected products

VendorProductAffected versions
Ruby-LangRuby
through 2.2.7
Versions 2.3.0, 2.3.1, 2.3.2, 2.3.3, 2.3.4
DebianDebian Linux
Versions 8.0, 9.0
CanonicalUbuntu Linux
Versions 14.04, 16.04, 17.10
RedhatEnterprise Linux Desktop
Version 7.0
RedhatEnterprise Linux Server
Version 7.0
RedhatEnterprise Linux Server Aus
Versions 7.4, 7.6
RedhatEnterprise Linux Server Eus
Versions 7.4, 7.5, 7.6
RedhatEnterprise Linux Server Tus
Versions 7.4, 7.6
RedhatEnterprise Linux Workstation
Version 7.0

Weakness classification

CWE-119

References