The URI.decode_www_form_component method in Ruby before 1.9.2-p330 allows remote attackers to cause a denial of service (catastrophic regular expression backtracking, resource consumption, or application crash) via a crafted string.

The remote Redhat Enterprise Linux 6 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched.

  - ruby: Command injection vulnerability in Net::FTP (CVE-2017-17405)

  - ruby: OpenSSL::X509::Name equality check does not work correctly (CVE-2018-16395)

  - DL::dlopen in Ruby 1.8, 1.9.0, 1.9.2, 1.9.3, 2.0.0 before patchlevel 648, and 2.1 before 2.1.8 opens     libraries with tainted names. (CVE-2009-5147)

Note that Nessus has not tested for these issues but has instead relied on the package manager's report that the package is installed.

The remote Redhat Enterprise Linux 5 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched.

  - ruby: Command injection vulnerability in Net::FTP (CVE-2017-17405)

  - ruby: OpenSSL::X509::Name equality check does not work correctly (CVE-2018-16395)

  - DL::dlopen in Ruby 1.8, 1.9.0, 1.9.2, 1.9.3, 2.0.0 before patchlevel 648, and 2.1 before 2.1.8 opens     libraries with tainted names. (CVE-2009-5147)

Note that Nessus has not tested for these issues but has instead relied on the package manager's report that the package is installed.

It was discovered that the uri package in the Ruby standard library uses regular expressions that may result in excessive backtracking.
Ruby applications that parse untrusted URIs using this library were susceptible to denial of service attacks by passing crafted URIs.

For the oldoldstable distribution (squeeze), this problem has been fixed in version 1.9.2.0-2+deb6u6.

The oldstable distribution (wheezy) and stable distribution (jessie) were not affected by this problem as it was fixed before release.

NOTE: Tenable Network Security has extracted the preceding description block directly from the DLA security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

ID	Name	Product	Family	Severity
198387	RHEL 6 : ruby (Unpatched Vulnerability)	Nessus	Red Hat Local Security Checks	critical
198386	RHEL 5 : ruby (Unpatched Vulnerability)	Nessus	Red Hat Local Security Checks	critical
84833	Debian DLA-275-1 : ruby1.9.1 security update	Nessus	Debian Local Security Checks	high

Detections

Analytics

CVE-2014-6438

high

Tenable Plugins

critical

critical

high