CVE-2017-14033

Priority
Medium
Description
The decode method in the OpenSSL::ASN1 module in Ruby before 2.2.8, 2.3.x
before 2.3.5, and 2.4.x through 2.4.1 allows attackers to cause a denial of
service (interpreter crash) via a crafted string.
References
Bugs
Package
Upstream:needs-triage
Ubuntu 12.04 ESM (Precise Pangolin):DNE
Ubuntu 14.04 LTS (Trusty Tahr):DNE
Ubuntu 16.04 LTS (Xenial Xerus):released (2.3.1-2~16.04.5)
Ubuntu 17.10 (Artful Aardvark):released (2.3.3-1ubuntu1.2)
Ubuntu 18.04 LTS (Bionic Beaver):not-affected (2.3.5-1ubuntu4)
Patches:
Patch:https://github.com/ruby/openssl/commit/1648afef33c1d97fb203c82291b8a61269e85d3b
Package
Upstream:needs-triage
Ubuntu 12.04 ESM (Precise Pangolin):DNE
Ubuntu 14.04 LTS (Trusty Tahr):released (1.9.3.484-2ubuntu1.5)
Ubuntu 16.04 LTS (Xenial Xerus):DNE
Ubuntu 17.10 (Artful Aardvark):DNE
Ubuntu 18.04 LTS (Bionic Beaver):DNE
Package
Upstream:needs-triage
Ubuntu 12.04 ESM (Precise Pangolin):DNE
Ubuntu 14.04 LTS (Trusty Tahr):DNE
Ubuntu 16.04 LTS (Xenial Xerus):DNE
Ubuntu 17.10 (Artful Aardvark):DNE
Ubuntu 18.04 LTS (Bionic Beaver):DNE
More Information

Updated: 2018-06-26 05:01:57 UTC (commit 7799c934cca373482531a7b00e4dfe82302ceae5)