BID:102286

Ruby CVE-2017-17790 Command Injection Vulnerability

Bugtraq ID:	102286
Class:	Input Validation Error
CVE:	CVE-2017-17790
Remote:	Yes
Local:	No
Published:	Dec 19 2017 12:00AM
Updated:	Dec 19 2017 12:00AM
Credit:	The vendor reported this issue.
Vulnerable:	Ruby-Lang Ruby 2.4.3 Ruby-Lang Ruby 2.4.2 Ruby-Lang Ruby 2.4.1 Ruby-Lang Ruby 2.3.6 Ruby-Lang Ruby 2.3.5 Ruby-Lang Ruby 2.3.4 Ruby-Lang Ruby 2.3 Ruby-Lang Ruby 2.2.9 Ruby-Lang Ruby 2.2.8 Ruby-Lang Ruby 2.2.7 Ruby-Lang Ruby 2.2 Ruby-Lang Ruby 2.1.4 Ruby-Lang Ruby 2.1.3 Ruby-Lang Ruby 2.1.2 Ruby-Lang Ruby 1.9 Ruby-Lang Ruby 1.8.5 Ruby-Lang Ruby 2.4.0 Ruby-Lang Ruby 2.2.2 Ruby-Lang Ruby 2.1.6 Ruby-Lang Ruby 2.1.5 Ruby-Lang Ruby 2.1.1 Ruby-Lang Ruby 2.0.0 Ruby-Lang Ruby 1.9.3 Ruby-Lang Ruby 1.9.1 Ruby-Lang Ruby 1.9 Ruby-Lang Ruby 1.8.7 Ruby-Lang Ruby 1.8.6 Ruby-Lang Ruby 1.8 Redhat Subscription Asset Manager 1.0.0 Redhat Software Collections for RHEL 0 Redhat Enterprise Linux 6 + Trustix Secure Enterprise Linux 2.0 + Trustix Secure Linux 2.2 + Trustix Secure Linux 2.1 + Trustix Secure Linux 2.0 Redhat Enterprise Linux 5.0 Redhat Enterprise Linux 5

Not Vulnerable: