CVE-2015-4020
Summary
| CVE | CVE-2015-4020 |
|---|---|
| State | PUBLIC |
| Assigner | [email protected] |
| Source Priority | CVE Program / NVD first with legacy fallback |
| Published | 2015-08-25 17:59:00 UTC |
| Updated | 2017-12-09 02:29:00 UTC |
| Description | RubyGems 2.0.x before 2.0.17, 2.2.x before 2.2.5, and 2.4.x before 2.4.8 does not validate the hostname when fetching gems or making API requests, which allows remote attackers to redirect requests to arbitrary domains via a crafted DNS SRV record with a domain that is suffixed with the original domain name, aka a "DNS hijack attack." NOTE: this vulnerability exists because to an incomplete fix for CVE-2015-3900. |
Risk And Classification
Problem Types: CWE-20
NVD Known Affected Configurations (CPE 2.3)
| Type | Vendor | Product | Version | Update | Edition | Language |
|---|---|---|---|---|---|---|
| Operating System | Oracle | Solaris | 11.3 | All | All | All |
| Operating System | Oracle | Solaris | 11.3 | All | All | All |
| Application | Rubygems | Rubygems | 2.0.0 | All | All | All |
| Application | Rubygems | Rubygems | 2.0.0 | preview2 | All | All |
| Application | Rubygems | Rubygems | 2.0.0 | preview2.1 | All | All |
| Application | Rubygems | Rubygems | 2.0.0 | preview2.2 | All | All |
| Application | Rubygems | Rubygems | 2.0.0 | rc1 | All | All |
| Application | Rubygems | Rubygems | 2.0.0 | rc2 | All | All |
| Application | Rubygems | Rubygems | 2.0.1 | All | All | All |
| Application | Rubygems | Rubygems | 2.0.10 | All | All | All |
| Application | Rubygems | Rubygems | 2.0.11 | All | All | All |
| Application | Rubygems | Rubygems | 2.0.12 | All | All | All |
| Application | Rubygems | Rubygems | 2.0.13 | All | All | All |
| Application | Rubygems | Rubygems | 2.0.14 | All | All | All |
| Application | Rubygems | Rubygems | 2.0.15 | All | All | All |
| Application | Rubygems | Rubygems | 2.0.16 | All | All | All |
| Application | Rubygems | Rubygems | 2.0.2 | All | All | All |
| Application | Rubygems | Rubygems | 2.0.3 | All | All | All |
| Application | Rubygems | Rubygems | 2.0.4 | All | All | All |
| Application | Rubygems | Rubygems | 2.0.5 | All | All | All |
| Application | Rubygems | Rubygems | 2.0.6 | All | All | All |
| Application | Rubygems | Rubygems | 2.0.7 | All | All | All |
| Application | Rubygems | Rubygems | 2.0.8 | All | All | All |
| Application | Rubygems | Rubygems | 2.0.9 | All | All | All |
| Application | Rubygems | Rubygems | 2.2.0 | All | All | All |
| Application | Rubygems | Rubygems | 2.2.1 | All | All | All |
| Application | Rubygems | Rubygems | 2.2.2 | All | All | All |
| Application | Rubygems | Rubygems | 2.2.3 | All | All | All |
| Application | Rubygems | Rubygems | 2.2.4 | All | All | All |
| Application | Rubygems | Rubygems | 2.4.0 | All | All | All |
| Application | Rubygems | Rubygems | 2.4.1 | All | All | All |
| Application | Rubygems | Rubygems | 2.4.2 | All | All | All |
| Application | Rubygems | Rubygems | 2.4.3 | All | All | All |
| Application | Rubygems | Rubygems | 2.4.4 | All | All | All |
| Application | Rubygems | Rubygems | 2.4.5 | All | All | All |
| Application | Rubygems | Rubygems | 2.4.6 | All | All | All |
| Application | Rubygems | Rubygems | 2.4.7 | All | All | All |
| Application | Rubygems | Rubygems | 2.0.0 | All | All | All |
| Application | Rubygems | Rubygems | 2.0.0 | preview2 | All | All |
| Application | Rubygems | Rubygems | 2.0.0 | preview2.1 | All | All |
| Application | Rubygems | Rubygems | 2.0.0 | preview2.2 | All | All |
| Application | Rubygems | Rubygems | 2.0.0 | rc1 | All | All |
| Application | Rubygems | Rubygems | 2.0.0 | rc2 | All | All |
| Application | Rubygems | Rubygems | 2.0.1 | All | All | All |
| Application | Rubygems | Rubygems | 2.0.10 | All | All | All |
| Application | Rubygems | Rubygems | 2.0.11 | All | All | All |
| Application | Rubygems | Rubygems | 2.0.12 | All | All | All |
| Application | Rubygems | Rubygems | 2.0.13 | All | All | All |
| Application | Rubygems | Rubygems | 2.0.14 | All | All | All |
| Application | Rubygems | Rubygems | 2.0.15 | All | All | All |
| Application | Rubygems | Rubygems | 2.0.16 | All | All | All |
| Application | Rubygems | Rubygems | 2.0.2 | All | All | All |
| Application | Rubygems | Rubygems | 2.0.3 | All | All | All |
| Application | Rubygems | Rubygems | 2.0.4 | All | All | All |
| Application | Rubygems | Rubygems | 2.0.5 | All | All | All |
| Application | Rubygems | Rubygems | 2.0.6 | All | All | All |
| Application | Rubygems | Rubygems | 2.0.7 | All | All | All |
| Application | Rubygems | Rubygems | 2.0.8 | All | All | All |
| Application | Rubygems | Rubygems | 2.0.9 | All | All | All |
| Application | Rubygems | Rubygems | 2.2.0 | All | All | All |
| Application | Rubygems | Rubygems | 2.2.1 | All | All | All |
| Application | Rubygems | Rubygems | 2.2.2 | All | All | All |
| Application | Rubygems | Rubygems | 2.2.3 | All | All | All |
| Application | Rubygems | Rubygems | 2.2.4 | All | All | All |
| Application | Rubygems | Rubygems | 2.4.0 | All | All | All |
| Application | Rubygems | Rubygems | 2.4.1 | All | All | All |
| Application | Rubygems | Rubygems | 2.4.2 | All | All | All |
| Application | Rubygems | Rubygems | 2.4.3 | All | All | All |
| Application | Rubygems | Rubygems | 2.4.4 | All | All | All |
| Application | Rubygems | Rubygems | 2.4.5 | All | All | All |
| Application | Rubygems | Rubygems | 2.4.6 | All | All | All |
| Application | Rubygems | Rubygems | 2.4.7 | All | All | All |
References
| Reference | Source | Link | Tags |
|---|---|---|---|
| Attacking Ruby Gem Security with CVE-2015-3900 | MISC | www.trustwave.com | Third Party Advisory |
| Fix API endpoint domain clamping · rubygems/rubygems@5c7bfb5 · GitHub | CONFIRM | github.com | |
| Oracle Solaris Third Party Bulletin - October 2015 | CONFIRM | www.oracle.com | Third Party Advisory |
| 2.4.8 Released | RubyGems.org | CONFIRM | blog.rubygems.org | Vendor Advisory |
| www.trustwave.com/Resources/Security-Advisories/Advisories/TWSL2015-009 | MISC | www.trustwave.com | Third Party Advisory |
| 2.2.5 Released | RubyGems.org | CONFIRM | blog.rubygems.org | Vendor Advisory |
| RubyGems CVE-2015-4020 Incomplete Fix Security Bypass Vulnerability | BID | www.securityfocus.com | |
| CVE-2015-3900, CVE-2015-4020 - Request Hijacking Vulnerability in RubyGems | Puppet | CONFIRM | puppet.com | |
| CVE Program record | CVE.ORG | www.cve.org | canonical |
| NVD vulnerability detail | NVD | nvd.nist.gov | canonical, analysis |
No vendor comments have been submitted for this CVE.
There are currently no legacy QID mappings associated with this CVE.