CVE-2016-2337

Type confusion exists in _cancel_eval Ruby's TclTkIp class method. Attacker passing different type of object than String as "retval" argument can cause arbitrary code execution.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTNIST
9.8 CRITICAL
NETWORK
LOW
NONE
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
certccCNA
---
---
CVEADP
---
---
Base Score
CVSS 3.x
EPSS Score
Percentile: 76%
VendorProductVersion
ruby-langruby
2.2.2
ruby-langruby
2.3.0
𝑥
= Vulnerable software versions
Ubuntu logo
Ubuntu Releases
Ubuntu Product
Codename
ruby1.8
zesty
dne
yakkety
dne
xenial
dne
trusty
dne
precise
ignored
ruby1.9.1
zesty
dne
yakkety
dne
xenial
dne
trusty
Fixed 1.9.3.484-2ubuntu1.3
released
precise
ignored
ruby2.0
zesty
dne
yakkety
dne
xenial
dne
trusty
Fixed 2.0.0.484-1ubuntu2.4
released
precise
dne
ruby2.3
zesty
not-affected
yakkety
not-affected
xenial
not-affected
trusty
dne
precise
dne
References
http://www.securityfocus.com/bid/91233
http://www.talosintelligence.com/reports/TALOS-2016-0031/
https://lists.debian.org/debian-lts-announce/2018/08/msg00028.html
https://security.gentoo.org/glsa/201710-18
http://www.securityfocus.com/bid/91233
http://www.talosintelligence.com/reports/TALOS-2016-0031/
https://lists.debian.org/debian-lts-announce/2018/08/msg00028.html
https://security.gentoo.org/glsa/201710-18