RubyGems CVE-2017-0900 Denial of Service Vulnerability

Bugtraq ID:	100579
Class:	Failure to Handle Exceptional Conditions
CVE:	CVE-2017-0900
Remote:	Yes
Local:	No
Published:	Sep 01 2017 12:00AM
Updated:	Oct 09 2017 01:02PM
Credit:	Yusuke Endoh.
Vulnerable:	Ubuntu Ubuntu Linux 14.04 LTS RubyGems RubyGems 2.0.17 RubyGems RubyGems 2.0.16 RubyGems RubyGems 2.0.15 RubyGems RubyGems 2.0.14 RubyGems RubyGems 2.0.13 RubyGems RubyGems 2.0.12 RubyGems RubyGems 2.0.11 RubyGems RubyGems 2.0.10 RubyGems RubyGems 2.0.7 RubyGems RubyGems 2.0.6 RubyGems RubyGems 2.0.5 RubyGems RubyGems 2.0.4 RubyGems RubyGems 2.0.3 RubyGems RubyGems 2.0.2 RubyGems RubyGems 2.0.1 RubyGems RubyGems 2.1.0 RubyGems RubyGems 2.0.9 RubyGems RubyGems 2.0.8 Redhat Enterprise Linux 6 + Trustix Secure Enterprise Linux 2.0 + Trustix Secure Linux 2.2 + Trustix Secure Linux 2.1 + Trustix Secure Linux 2.0
Not Vulnerable:	RubyGems RubyGems 2.6.13

RubyGems CVE-2017-0900 Denial of Service Vulnerability

RubyGems is prone to a denial-of-service vulnerability.

An attacker can exploit this issue to cause denial-of-service conditions.

RubyGems version 2.6.12 and prior versions are affected.

RubyGems CVE-2017-0900 Denial of Service Vulnerability

The researcher has created a proof-of-concept to demonstrate the issue. Please see the references for more information.

RubyGems CVE-2017-0900 Denial of Service Vulnerability

References:

• Rubygems Homepage (Rubygems)
  
• 243003 No limit of summary length allows Denail of Service (HackerOne)
  
• Bug 1487588 - (CVE-2017-0900) CVE-2017-0900 rubygems: No size limit in summary l (Redhat)
  
• CVE-2017-0900 (Redhat)
  
• Truncate summaries to 100,000 characters in the query command (Github)