CVE-2018-1000079 RubyGems Path Traversal vulnerability

What is CVE-2018-1000079?

CVE-2018-1000079 is a medium-severity path traversal vulnerability in n/a, published on 13 Mar 2018. It can only be exploited from the same machine or local network, and only if a user opens a file or follows a link.

Official description

RubyGems version Ruby 2.2 series: 2.2.9 and earlier, Ruby 2.3 series: 2.3.6 and earlier, Ruby 2.4 series: 2.4.3 and earlier, Ruby 2.5 series: 2.5.0 and earlier, prior to trunk revision 62422 contains a Directory Traversal vulnerability in gem installation that can result in the gem could write to arbitrary filesystem locations during installation. This attack appear to be exploitable via the victim must install a malicious gem. This vulnerability appears to have been fixed in 2.7.6.

Weakness: CWE-22

Which versions are affected by CVE-2018-1000079?

4 open source packages ship an affected version, including org.jruby:jruby-stdlib and rubygems-update. It affects 1 product.

Products include Rubygems Rubygems.

How do I fix CVE-2018-1000079?

Upgrade org.jruby:jruby-stdlib to 9.1.16.0 or later.

Upgrade, and resolve every user-supplied path against an allowed base folder before opening it. More about Path traversal.

Is CVE-2018-1000079 being exploited?

There is no known exploitation of CVE-2018-1000079 in the wild and no public exploit code.

Other vulnerabilities in n/a

• CVE-2022-36073 RubyGems allows creation of users with arbitrary unverified emails High 8.3
• CVE-2018-1000074 RubyGems Deserialization of Untrusted Data vulnerability High 7.8
• CVE-2018-1000073 RubyGems Link Following vulnerability High 7.5
• CVE-2019-8320 RubyGems Delete directory using symlink when decompressing tar High 7.4
• CVE-2012-2125 RubyGems HTTPS to HTTP redirect Medium 5.8

Sources

• CVE record
• NVD
• OSV
• GitHub advisory
• How this page is made

Also known as DEBIAN-CVE-2018-1000079, GHSA-8qxg-mff5-j3wc, UBUNTU-CVE-2018-1000079.