PublicDateAtUSN: 2016-03-23
Candidate: CVE-2015-7551
PublicDate: 2016-03-24 01:59:00 UTC
References:
 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-7551
 https://www.ruby-lang.org/en/news/2015/12/16/unsafe-tainted-string-usage-in-fiddle-and-dl-cve-2015-7551/
 https://ubuntu.com/security/notices/USN-3365-1
Description:
 The Fiddle::Handle implementation in ext/fiddle/handle.c in Ruby before
 2.0.0-p648, 2.1 before 2.1.8, and 2.2 before 2.2.4, as distributed in Apple
 OS X before 10.11.4 and other products, mishandles tainting, which allows
 context-dependent attackers to execute arbitrary code or cause a denial of
 service (application crash) via a crafted string, related to the DL module
 and the libffi library.  NOTE: this vulnerability exists because of a
 CVE-2009-5147 regression.
Ubuntu-Description:
Notes:
 mdeslaur> This is the same issue as CVE-2009-5147, except for other
 mdeslaur> releases than 1.9.1
Bugs:
 http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=796551
 http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=796344
Priority: low
Discovered-by: Christian Hofstaedtler
Assigned-to:
CVSS:
 nvd: CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H [8.4 HIGH]

Patches_ruby1.9.1:
upstream_ruby1.9.1: needs-triage
precise_ruby1.9.1: ignored (reached end-of-life)
precise/esm_ruby1.9.1: DNE (precise was needed)
trusty_ruby1.9.1: not-affected (code not present)
trusty/esm_ruby1.9.1: DNE (trusty was not-affected [code not present])
vivid_ruby1.9.1: ignored (reached end-of-life)
vivid/stable-phone-overlay_ruby1.9.1: DNE
vivid/ubuntu-core_ruby1.9.1: DNE
wily_ruby1.9.1: DNE
xenial_ruby1.9.1: DNE
yakkety_ruby1.9.1: DNE
zesty_ruby1.9.1: DNE
devel_ruby1.9.1: DNE

Patches_ruby2.2:
upstream_ruby2.2: released (2.2.4-1)
precise_ruby2.2: DNE
precise/esm_ruby2.2: DNE
trusty_ruby2.2: DNE
trusty/esm_ruby2.2: DNE
vivid_ruby2.2: DNE
vivid/stable-phone-overlay_ruby2.2: DNE
vivid/ubuntu-core_ruby2.2: DNE
wily_ruby2.2: ignored (reached end-of-life)
xenial_ruby2.2: DNE
yakkety_ruby2.2: DNE
zesty_ruby2.2: DNE
devel_ruby2.2: DNE

Patches_ruby2.1:
 upstream: https://github.com/ruby/ruby/commit/339e11a7f178312d937b7c95dd3115ce7236597a (fiddle)
upstream_ruby2.1: needs-triage
precise_ruby2.1: DNE
precise/esm_ruby2.1: DNE
trusty_ruby2.1: DNE
trusty/esm_ruby2.1: DNE
vivid_ruby2.1: ignored (reached end-of-life)
vivid/stable-phone-overlay_ruby2.1: DNE
vivid/ubuntu-core_ruby2.1: DNE
wily_ruby2.1: ignored (reached end-of-life)
xenial_ruby2.1: DNE
yakkety_ruby2.1: DNE
zesty_ruby2.1: DNE
devel_ruby2.1: DNE

Patches_ruby2.0:
upstream_ruby2.0: needs-triage
precise_ruby2.0: DNE
precise/esm_ruby2.0: DNE
trusty_ruby2.0: released (2.0.0.484-1ubuntu2.4)
trusty/esm_ruby2.0: DNE (trusty was released [2.0.0.484-1ubuntu2.4])
vivid_ruby2.0: DNE
vivid/stable-phone-overlay_ruby2.0: DNE
vivid/ubuntu-core_ruby2.0: DNE
wily_ruby2.0: DNE
xenial_ruby2.0: DNE
yakkety_ruby2.0: DNE
zesty_ruby2.0: DNE
devel_ruby2.0: DNE

Patches_ruby2.3:
upstream_ruby2.3: released (2.3.0)
precise_ruby2.3: DNE
precise/esm_ruby2.3: DNE
trusty_ruby2.3: DNE
trusty/esm_ruby2.3: DNE
vivid_ruby2.3: DNE
vivid/stable-phone-overlay_ruby2.3: DNE
vivid/ubuntu-core_ruby2.3: DNE
wily_ruby2.3: DNE
xenial_ruby2.3: not-affected (2.3.1-2~16.04)
esm-infra/xenial_ruby2.3: not-affected (2.3.1-2~16.04)
yakkety_ruby2.3: not-affected (2.3.1-5build2)
zesty_ruby2.3: not-affected (2.3.3-1)
devel_ruby2.3: not-affected (2.3.3-1)