p PatchFirst

ALPINE-CVE-2017-0899

ALPINE-CVE-2017-0899

This page contains facts from public vulnerability sources. Check the original advisory before updating.

RubyGems version 2.6.12 and earlier is vulnerable to maliciously crafted gem specifications that include terminal escape characters. Printing the gem specification would execute terminal escape sequences.

CVSS 9.8 · Critical · Fix available

Published
Updated

Stack: system

Affected products and versions

  • ruby Alpine:v3.10

    Affected ranges
    • ECOSYSTEM: < 2.4.2-r0

    Update to 2.4.2-r0

  • ruby Alpine:v3.11

    Affected ranges
    • ECOSYSTEM: < 2.4.2-r0

    Update to 2.4.2-r0

  • ruby Alpine:v3.12

    Affected ranges
    • ECOSYSTEM: < 2.4.2-r0

    Update to 2.4.2-r0

  • ruby Alpine:v3.13

    Affected ranges
    • ECOSYSTEM: < 2.4.2-r0

    Update to 2.4.2-r0

  • ruby Alpine:v3.14

    Affected ranges
    • ECOSYSTEM: < 2.4.2-r0

    Update to 2.4.2-r0

  • ruby Alpine:v3.15

    Affected ranges
    • ECOSYSTEM: < 2.4.2-r0

    Update to 2.4.2-r0

  • ruby Alpine:v3.16

    Affected ranges
    • ECOSYSTEM: < 2.4.2-r0

    Update to 2.4.2-r0

  • ruby Alpine:v3.17

    Affected ranges
    • ECOSYSTEM: < 2.4.2-r0

    Update to 2.4.2-r0

  • ruby Alpine:v3.18

    Affected ranges
    • ECOSYSTEM: < 2.4.2-r0

    Update to 2.4.2-r0

  • ruby Alpine:v3.19

    Affected ranges
    • ECOSYSTEM: < 2.4.2-r0

    Update to 2.4.2-r0

  • ruby Alpine:v3.20

    Affected ranges
    • ECOSYSTEM: < 2.4.2-r0

    Update to 2.4.2-r0

  • ruby Alpine:v3.21

    Affected ranges
    • ECOSYSTEM: < 2.4.2-r0

    Update to 2.4.2-r0

  • ruby Alpine:v3.22

    Affected ranges
    • ECOSYSTEM: < 2.4.2-r0

    Update to 2.4.2-r0

  • ruby Alpine:v3.23

    Affected ranges
    • ECOSYSTEM: < 2.4.2-r0

    Update to 2.4.2-r0

  • ruby Alpine:v3.24

    Affected ranges
    • ECOSYSTEM: < 2.4.2-r0

    Update to 2.4.2-r0

  • ruby Alpine:v3.3

    Affected ranges
    • ECOSYSTEM: < 2.2.8-r0

    Update to 2.2.8-r0

  • ruby Alpine:v3.4

    Affected ranges
    • ECOSYSTEM: < 2.3.5-r0

    Update to 2.3.5-r0

  • ruby Alpine:v3.5

    Affected ranges
    • ECOSYSTEM: < 2.3.5-r0

    Update to 2.3.5-r0

  • ruby Alpine:v3.6

    Affected ranges
    • ECOSYSTEM: < 2.4.2-r0

    Update to 2.4.2-r0

  • ruby Alpine:v3.7

    Affected ranges
    • ECOSYSTEM: < 2.4.2-r0

    Update to 2.4.2-r0

  • ruby Alpine:v3.8

    Affected ranges
    • ECOSYSTEM: < 2.4.2-r0

    Update to 2.4.2-r0

  • ruby Alpine:v3.9

    Affected ranges
    • ECOSYSTEM: < 2.4.2-r0

    Update to 2.4.2-r0

Original sources

Check your server →