critical9.8
CVE-2019-17383
The netaddr gem before 2.0.4 for Ruby has misconfigured file permissions, such that a gem install may result in 0777 permissions in the target filesystem.
Impact
The netaddr gem before 2.0.4 for Ruby has misconfigured file permissions, such that a gem install may result in 0777 permissions in the target filesystem.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Netaddr Project | Netaddr | from 1.5.0 before 1.5.3 from 2.0 before 2.0.4 |