Test ID:	1.3.6.1.4.1.25623.1.1.10.2017.0371
Category:	Mageia Linux Local Security Checks
Title:	Mageia: Security Advisory (MGASA-2017-0371)
Summary:	The remote host is missing an update for the 'ruby, ruby-json' package(s) announced via the MGASA-2017-0371 advisory.
Description:	Summary: The remote host is missing an update for the 'ruby, ruby-json' package(s) announced via the MGASA-2017-0371 advisory. Vulnerability Insight: If a malicious format string which contains a precious specifier (*) is passed and a huge minus value is also passed to the specifier, buffer underrun may be caused. In such situation, the result may contains heap, or the Ruby interpreter may crash (CVE-2017-0898). If a malicious string is passed to the decode method of OpenSSL::ASN1, buffer underrun may be caused and the Ruby interpreter may crash (CVE-2017-14033). The generate method of JSON module optionally accepts an instance of JSON::Ext::Generator::State class. If a malicious instance is passed, the result may include contents of heap (CVE-2017-14064). When using the Basic authentication of WEBrick, clients can pass an arbitrary string as the user name. WEBrick outputs the passed user name intact to its log, then an attacker can inject malicious escape sequences to the log and dangerous control characters may be executed on a victim's terminal emulator (CVE-2017-10784). Affected Software/OS: 'ruby, ruby-json' package(s) on Mageia 5, Mageia 6. Solution: Please install the updated package(s). CVSS Score: 9.3 CVSS Vector: AV:N/AC:M/Au:N/C:C/I:C/A:C
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2017-0898 BugTraq ID: 100862 http://www.securityfocus.com/bid/100862 Debian Security Information: DSA-4031 (Google Search) https://www.debian.org/security/2017/dsa-4031 https://security.gentoo.org/glsa/201710-18 https://github.com/mruby/mruby/issues/3722 https://hackerone.com/reports/212241 https://www.ruby-lang.org/en/news/2017/09/14/sprintf-buffer-underrun-cve-2017-0898/ https://lists.debian.org/debian-lts-announce/2018/07/msg00012.html RedHat Security Advisories: RHSA-2017:3485 https://access.redhat.com/errata/RHSA-2017:3485 RedHat Security Advisories: RHSA-2018:0378 https://access.redhat.com/errata/RHSA-2018:0378 RedHat Security Advisories: RHSA-2018:0583 https://access.redhat.com/errata/RHSA-2018:0583 RedHat Security Advisories: RHSA-2018:0585 https://access.redhat.com/errata/RHSA-2018:0585 http://www.securitytracker.com/id/1039363 https://usn.ubuntu.com/3685-1/ Common Vulnerability Exposure (CVE) ID: CVE-2017-10784 BugTraq ID: 100853 http://www.securityfocus.com/bid/100853 http://www.securitytracker.com/id/1042004 https://usn.ubuntu.com/3528-1/ Common Vulnerability Exposure (CVE) ID: CVE-2017-14033 BugTraq ID: 100868 http://www.securityfocus.com/bid/100868 Common Vulnerability Exposure (CVE) ID: CVE-2017-14064 BugTraq ID: 100890 http://www.securityfocus.com/bid/100890 Debian Security Information: DSA-3966 (Google Search) https://www.debian.org/security/2017/dsa-3966 https://bugs.ruby-lang.org/issues/13853 https://github.com/flori/json/commit/8f782fd8e181d9cfe9387ded43a5ca9692266b85 https://hackerone.com/reports/209949
Copyright	Copyright (C) 2022 Greenbone AG

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.