CVE-2014-2734

Published Apr 24, 2014

Last updated 3 months ago

Overview

Description: The openssl extension in Ruby 2.x does not properly maintain the state of process memory after a file is reopened, which allows remote attackers to spoof signatures within the context of a Ruby script that attempts signature verification after performing a certain sequence of filesystem operations. NOTE: this issue has been disputed by the Ruby OpenSSL team and third parties, who state that the original demonstration PoC contains errors and redundant or unnecessarily-complex code that does not appear to be related to a demonstration of the issue. As of 20140502, CVE is not aware of any public comment by the original researcher
Source: cve@mitre.org
NVD status: Modified
CNA Tags: disputed

Hype score: Not currently trending

Risk scores

CVSS 2.0

Type: Primary
Base score: 5.8
Impact score: 4.9
Exploitability score: 8.6
Vector string: AV:N/AC:M/Au:N/C:P/I:P/A:N

Weaknesses

nvd@nist.gov: CWE-399

Configurations

[
  {
    "nodes": [
      {
        "negate": false,
        "cpeMatch": [
          {
            "criteria": "cpe:2.3:a:ruby-lang:ruby:2.0:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "90E0471D-1323-4E67-B66C-DEBF3BBAEEAA"
          },
          {
            "criteria": "cpe:2.3:a:ruby-lang:ruby:2.0.0:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "B03B7561-A854-4EFA-9E4E-CFC4EEAE4EE1"
          },
          {
            "criteria": "cpe:2.3:a:ruby-lang:ruby:2.0.0:p0:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "D2423B85-0971-42AC-8B64-819008BC5778"
          },
          {
            "criteria": "cpe:2.3:a:ruby-lang:ruby:2.0.0:p195:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "1C663278-3B2A-4B7C-959A-2AA804467F21"
          },
          {
            "criteria": "cpe:2.3:a:ruby-lang:ruby:2.0.0:p247:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "B7927149-A76A-48BC-8405-7375FC7D7486"
          },
          {
            "criteria": "cpe:2.3:a:ruby-lang:ruby:2.0.0:preview1:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "CB116A84-1652-4F5D-98AC-81F0349EEDC0"
          },
          {
            "criteria": "cpe:2.3:a:ruby-lang:ruby:2.0.0:preview2:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "259C21E7-6084-4710-9BB3-C232942A451E"
          },
          {
            "criteria": "cpe:2.3:a:ruby-lang:ruby:2.0.0:rc1:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "285A3431-BDFE-40C5-92CD-B18217757C23"
          },
          {
            "criteria": "cpe:2.3:a:ruby-lang:ruby:2.0.0:rc2:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "D66B32CB-AC49-4A1C-85ED-6389F27CB319"
          },
          {
            "criteria": "cpe:2.3:a:ruby-lang:ruby:2.1:-:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "77020036-DC99-461B-9A36-E8C0BE44E6B8"
          },
          {
            "criteria": "cpe:2.3:a:ruby-lang:ruby:2.1:preview1:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "7A2C6617-222D-4EA3-A194-4D69B10197DE"
          },
          {
            "criteria": "cpe:2.3:a:ruby-lang:ruby:2.1.1:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "8DF046E4-503B-4A10-BEAB-3144BD86EA49"
          }
        ],
        "operator": "OR"
      }
    ]
  }
]

Overview

Social media

Risk scores

CVSS 2.0

Weaknesses

Configurations

References