CVE-2024-27281

一、漏洞信息
 漏洞编号：[CVE-2024-27281](https://nvd.nist.gov/vuln/detail/CVE-2024-27281)
 漏洞归属组件：[ruby](https://gitee.com/src-openeuler/ruby)
 漏洞归属的版本：2.5.8,3.0.3,3.1.3,3.2.2
 CVSS V2.0分值：
  BaseScore：0.0 Low
  Vector：CVSS：2.0/
 漏洞简述：
  A flaw was found in Rubygem RDoc. When parsing .rdoc_options used for configuration in RDoc as a YAML file there are no restrictions on the classes that can be restored. This issue may lead to object injection, resulting in remote code execution.
 漏洞公开时间：
 漏洞创建时间：2024-03-22 03:22:44
 漏洞详情参考链接：
  https://nvd.nist.gov/vuln/detail/CVE-2024-27281
<details>
<summary>更多参考(点击展开)</summary>

| 参考来源 | 参考链接 | 来源链接 |
| ------- | -------- | -------- |
| suse_bugzilla | http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2024-27281 | https://bugzilla.suse.com/show_bug.cgi?id=1221852 |
| suse_bugzilla | https://bugzilla.redhat.com/show_bug.cgi?id=2270749 | https://bugzilla.suse.com/show_bug.cgi?id=1221852 |
| suse_bugzilla | https://bugzilla.redhat.com/show_bug.cgi?id=2270750 | https://bugzilla.suse.com/show_bug.cgi?id=1221852 |
| redhat_bugzilla | https://www.ruby-lang.org/en/news/2024/03/21/rce-rdoc-cve-2024-27281/ | https://bugzilla.redhat.com/show_bug.cgi?id=2270749 |
| redhat_bugzilla | https://github.com/ruby/rdoc/commit/33221979e3a6a18de962553b56c396abb5ba3244 | https://bugzilla.redhat.com/show_bug.cgi?id=2270749 |
| ubuntu | https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-27281 | https://ubuntu.com/security/CVE-2024-27281 |
| ubuntu | https://www.ruby-lang.org/en/news/2024/03/21/rce-rdoc-cve-2024-27281/ | https://ubuntu.com/security/CVE-2024-27281 |
| ubuntu | https://github.com/ruby/rdoc/commit/da7a0c7553ef7250ca665a3fecdc01dbaacbb43d (v6.6.3) | https://ubuntu.com/security/CVE-2024-27281 |
| ubuntu | https://nvd.nist.gov/vuln/detail/CVE-2024-27281 | https://ubuntu.com/security/CVE-2024-27281 |
| ubuntu | https://launchpad.net/bugs/cve/CVE-2024-27281 | https://ubuntu.com/security/CVE-2024-27281 |
| ubuntu | https://security-tracker.debian.org/tracker/CVE-2024-27281 | https://ubuntu.com/security/CVE-2024-27281 |
| debian |  | https://security-tracker.debian.org/tracker/CVE-2024-27281 |
| ruby |  | https://github.com/rubysec/ruby-advisory-db/gems/rdoc/CVE-2024-27281.yml |
| github_advisory | https://github.com/ruby/rdoc/commit/1254b0066f312ddbf7fae7a195e66ce5b3bc6656 | https://github.com/advisories/GHSA-592j-995h-p23j |
| github_advisory | https://www.ruby-lang.org/en/news/2024/03/21/rce-rdoc-cve-2024-27281 | https://github.com/advisories/GHSA-592j-995h-p23j |
| github_advisory | https://github.com/ruby/rdoc/commit/da7a0c7553ef7250ca665a3fecdc01dbaacbb43d | https://github.com/advisories/GHSA-592j-995h-p23j |
| github_advisory | https://github.com/ruby/rdoc/commit/d22ba930f1f611dda531dba04cd3d2531bb3f8a5 | https://github.com/advisories/GHSA-592j-995h-p23j |
| github_advisory | https://github.com/ruby/rdoc/commit/811f125a4a0cc968e3eb18e16ea6c1a3b49a11bf | https://github.com/advisories/GHSA-592j-995h-p23j |
| github_advisory | https://github.com/ruby/rdoc/commit/e4a0e71e6f1032f8b4e5e58b4ef60d702c22ce17 | https://github.com/advisories/GHSA-592j-995h-p23j |
| github_advisory | https://github.com/rubysec/ruby-advisory-db/blob/master/gems/rdoc/CVE-2024-27281.yml | https://github.com/advisories/GHSA-592j-995h-p23j |
| github_advisory | https://github.com/ruby/rdoc/commit/a5de13bf0f0c26f8e764e82b5bf4bf8bffc7198e | https://github.com/advisories/GHSA-592j-995h-p23j |
| github_advisory | https://github.com/ruby/rdoc/commit/32ff6ba0bebd8ea26f569da5fd23be2937f6a644 | https://github.com/advisories/GHSA-592j-995h-p23j |
| github_advisory | https://github.com/ruby/rdoc/commit/48617985e9fbc2825219d55f04e3e0e98d2923be | https://github.com/advisories/GHSA-592j-995h-p23j |
| snyk | https://bugzilla.redhat.com/show_bug.cgi?id=2270749 | https://security.snyk.io/vuln/SNYK-RUBY-RDOC-6476871 |
| snyk | https://www.ruby-lang.org/en/news/2024/03/21/rce-rdoc-cve-2024-27281/ | https://security.snyk.io/vuln/SNYK-RUBY-RDOC-6476871 |

</details>

漏洞分析指导链接：
  https://gitee.com/openeuler/cve-manager/blob/master/cve-vulner-manager/doc/md/manual.md
 漏洞数据来源:
  openBrain开源漏洞感知系统
 漏洞补丁信息：
  <details>
<summary>详情(点击展开)</summary>

| 影响的包 | 修复版本 | 修复补丁 | 问题引入补丁 | 来源  |
| ------- | -------- | ------- | -------- | --------- |
|  |  | https://github.com/ruby/rdoc/commit/33221979e3a6a18de962553b56c396abb5ba3244 |  | redhat_bugzilla |
|  |  | https://github.com/ruby/rdoc/commit/da7a0c7553ef7250ca665a3fecdc01dbaacbb43d (v6.6.3) |  | ubuntu |
|  |  | https://github.com/ruby/rdoc/commit/1254b0066f312ddbf7fae7a195e66ce5b3bc6656 |  | github_advisory |
|  |  | https://github.com/ruby/rdoc/commit/da7a0c7553ef7250ca665a3fecdc01dbaacbb43d |  | github_advisory |
|  |  | https://github.com/ruby/rdoc/commit/d22ba930f1f611dda531dba04cd3d2531bb3f8a5 |  | github_advisory |
|  |  | https://github.com/ruby/rdoc/commit/811f125a4a0cc968e3eb18e16ea6c1a3b49a11bf |  | github_advisory |
|  |  | https://github.com/ruby/rdoc/commit/e4a0e71e6f1032f8b4e5e58b4ef60d702c22ce17 |  | github_advisory |
|  |  | https://github.com/ruby/rdoc/commit/a5de13bf0f0c26f8e764e82b5bf4bf8bffc7198e |  | github_advisory |
|  |  | https://github.com/ruby/rdoc/commit/32ff6ba0bebd8ea26f569da5fd23be2937f6a644 |  | github_advisory |
|  |  | https://github.com/ruby/rdoc/commit/48617985e9fbc2825219d55f04e3e0e98d2923be |  | github_advisory |

</details>

二、漏洞分析结构反馈
 影响性分析说明：
            ruby-rdoc发现一个RCE漏洞。在将.rdoc_options（用于RDoc中的配置）解析为YAML文件时，可能会发生对象注入并导致远程代码执行。     
 openEuler评分：
  4.5
 Vector：CVSS：2.0/AV:L/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:L
 受影响版本排查(受影响/不受影响)：
  1.master(3.2.2):受影响
2.openEuler-20.03-LTS-SP1(2.5.8):受影响
3.openEuler-20.03-LTS-SP4(2.5.8):受影响
4.openEuler-22.03-LTS(3.0.3):受影响
5.openEuler-22.03-LTS-Next(3.0.3):受影响
6.openEuler-22.03-LTS-SP1(3.0.3):受影响
7.openEuler-22.03-LTS-SP2(3.0.3):受影响
8.openEuler-22.03-LTS-SP3(3.0.3):受影响
9.openEuler-24.03-LTS:受影响
10.openEuler-24.03-LTS-Next:受影响

修复是否涉及abi变化(是/否)：
  1.master(3.2.2):否
2.openEuler-20.03-LTS-SP1(2.5.8):否
3.openEuler-20.03-LTS-SP4(2.5.8):否
4.openEuler-22.03-LTS(3.0.3):否
5.openEuler-22.03-LTS-Next(3.0.3):否
6.openEuler-22.03-LTS-SP1(3.0.3):否
7.openEuler-22.03-LTS-SP2(3.0.3):否
8.openEuler-22.03-LTS-SP3(3.0.3):否
9.openEuler-24.03-LTS:否
10.openEuler-24.03-LTS-Next:否

三、漏洞修复
安全公告链接：https://www.openeuler.org/zh/security/safety-bulletin/detail/?id=openEuler-SA-2024-1433

src-openEuler/ruby
关闭

内容风险标识

评论 (30)

src-openEuler/ruby关闭 .gitee-modal { width: 500px !important; }

内容风险标识

CVE-2024-27281

评论 (30)

搜索帮助

src-openEuler/ruby
关闭