ALPINE-CVE-2017-10784
ALPINE-CVE-2017-10784
This page contains facts from public vulnerability sources. Check the original advisory before updating.
The Basic authentication code in WEBrick library in Ruby before 2.2.8, 2.3.x before 2.3.5, and 2.4.x through 2.4.1 allows remote attackers to inject terminal emulator escape sequences into its log and possibly execute arbitrary commands via a crafted user name.
CVSS 8.8 · High · Fix available
- Published
- Updated
Stack: system
Affected products and versions
ruby Alpine:v3.10
- Affected ranges
- ECOSYSTEM: < 2.4.2-r0
Update to 2.4.2-r0
ruby Alpine:v3.11
- Affected ranges
- ECOSYSTEM: < 2.4.2-r0
Update to 2.4.2-r0
ruby Alpine:v3.12
- Affected ranges
- ECOSYSTEM: < 2.4.2-r0
Update to 2.4.2-r0
ruby Alpine:v3.13
- Affected ranges
- ECOSYSTEM: < 2.4.2-r0
Update to 2.4.2-r0
ruby Alpine:v3.14
- Affected ranges
- ECOSYSTEM: < 2.4.2-r0
Update to 2.4.2-r0
ruby Alpine:v3.15
- Affected ranges
- ECOSYSTEM: < 2.4.2-r0
Update to 2.4.2-r0
ruby Alpine:v3.16
- Affected ranges
- ECOSYSTEM: < 2.4.2-r0
Update to 2.4.2-r0
ruby Alpine:v3.17
- Affected ranges
- ECOSYSTEM: < 2.4.2-r0
Update to 2.4.2-r0
ruby Alpine:v3.18
- Affected ranges
- ECOSYSTEM: < 2.4.2-r0
Update to 2.4.2-r0
ruby Alpine:v3.19
- Affected ranges
- ECOSYSTEM: < 2.4.2-r0
Update to 2.4.2-r0
ruby Alpine:v3.20
- Affected ranges
- ECOSYSTEM: < 2.4.2-r0
Update to 2.4.2-r0
ruby Alpine:v3.21
- Affected ranges
- ECOSYSTEM: < 2.4.2-r0
Update to 2.4.2-r0
ruby Alpine:v3.22
- Affected ranges
- ECOSYSTEM: < 2.4.2-r0
Update to 2.4.2-r0
ruby Alpine:v3.23
- Affected ranges
- ECOSYSTEM: < 2.4.2-r0
Update to 2.4.2-r0
ruby Alpine:v3.24
- Affected ranges
- ECOSYSTEM: < 2.4.2-r0
Update to 2.4.2-r0
ruby Alpine:v3.3
- Affected ranges
- ECOSYSTEM: < 2.2.8-r0
Update to 2.2.8-r0
ruby Alpine:v3.4
- Affected ranges
- ECOSYSTEM: < 2.3.5-r0
Update to 2.3.5-r0
ruby Alpine:v3.5
- Affected ranges
- ECOSYSTEM: < 2.3.5-r0
Update to 2.3.5-r0
ruby Alpine:v3.6
- Affected ranges
- ECOSYSTEM: < 2.4.2-r0
Update to 2.4.2-r0
ruby Alpine:v3.7
- Affected ranges
- ECOSYSTEM: < 2.4.2-r0
Update to 2.4.2-r0
ruby Alpine:v3.8
- Affected ranges
- ECOSYSTEM: < 2.4.2-r0
Update to 2.4.2-r0
ruby Alpine:v3.9
- Affected ranges
- ECOSYSTEM: < 2.4.2-r0
Update to 2.4.2-r0