CVE-2011-2686
Published Aug 5, 2011
Last updated a year ago
Overview
- Description
- Ruby before 1.8.7-p352 does not reset the random seed upon forking, which makes it easier for context-dependent attackers to predict the values of random numbers by leveraging knowledge of the number sequence obtained in a different child process, a related issue to CVE-2003-0900. NOTE: this issue exists because of a regression during Ruby 1.8.6 development.
- Source
- secalert@redhat.com
- NVD status
- Modified
Social media
- Hype score
- Not currently trending
Risk scores
CVSS 2.0
- Type
- Primary
- Base score
- 5
- Impact score
- 2.9
- Exploitability score
- 10
- Vector string
- AV:N/AC:L/Au:N/C:P/I:N/A:N
Weaknesses
- nvd@nist.gov
- CWE-310
Configurations
[
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:a:ruby-lang:ruby:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "2C145137-6CD4-4E6D-B17E-F21F88E272BF",
"versionEndIncluding": "1.8.7-334"
},
{
"criteria": "cpe:2.3:a:ruby-lang:ruby:1.8.7:p22:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "1FE05F3A-A8B5-45EE-BF52-D55E2768F890"
},
{
"criteria": "cpe:2.3:a:ruby-lang:ruby:1.8.7:p71:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "0C6D66E2-3E10-4DEA-9E6B-53A5DE78AFCF"
},
{
"criteria": "cpe:2.3:a:ruby-lang:ruby:1.8.7:p72:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "17AA24B4-30C7-4D46-A55C-A5CC7C446436"
},
{
"criteria": "cpe:2.3:a:ruby-lang:ruby:1.8.7-160:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "DD10E326-6907-47DB-B2F1-D09EF2E7EBD8"
},
{
"criteria": "cpe:2.3:a:ruby-lang:ruby:1.8.7-173:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "55A7F5F2-3F5D-441B-9756-8540BDCB3356"
},
{
"criteria": "cpe:2.3:a:ruby-lang:ruby:1.8.7-248:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "4FE44E5F-8ECA-4325-9454-12682D84F430"
},
{
"criteria": "cpe:2.3:a:ruby-lang:ruby:1.8.7-249:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "81D68A0E-2809-4A02-BEEA-B37719AC23DC"
},
{
"criteria": "cpe:2.3:a:ruby-lang:ruby:1.8.7-299:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "324BD6C5-27BE-4678-846D-90433FD6AD0A"
},
{
"criteria": "cpe:2.3:a:ruby-lang:ruby:1.8.7-302:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "6AA691FE-2BBF-4407-A52B-8CCAA07E0BC1"
},
{
"criteria": "cpe:2.3:a:ruby-lang:ruby:1.8.7-330:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "3684A343-ABD7-4B80-993C-1F3CC0F983DF"
},
{
"criteria": "cpe:2.3:a:ruby-lang:ruby:1.8.7-p21:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "D1797BB1-935E-45F0-A803-A985E5659236"
}
],
"operator": "OR"
}
]
}
]