Published: 05/08/2011 Updated: 07/11/2023

CVSS v2 Base Score: 5 | Impact Score: 2.9 | Exploitability Score: 10

VMScore: 445

Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N

Ruby prior to 1.8.7-p352 does not reset the random seed upon forking, which makes it easier for context-dependent malicious users to predict the values of random numbers by leveraging knowledge of the number sequence obtained in a different child process, a related issue to CVE-2003-0900. NOTE: this issue exists because of a regression during Ruby 1.8.6 development.

Vulnerable Product	Search on Vulmon	Subscribe to Product
ruby-lang ruby 1.8.7-302
ruby-lang ruby 1.8.7-249
ruby-lang ruby 1.8.7-299
ruby-lang ruby
ruby-lang ruby 1.8.7
ruby-lang ruby 1.8.7-330
ruby-lang ruby 1.8.7-160
ruby-lang ruby 1.8.7-173
ruby-lang ruby 1.8.7-p21
ruby-lang ruby 1.8.7-248

Several security issues were fixed in ruby18 ...

Synopsis Low: ruby security, bug fix, and enhancement update Type/Severity Security Advisory: Low Topic Updated ruby packages that fix two security issues, various bugs, and addone enhancement are now available for Red Hat Enterprise Linux 6The Red Hat Security Response Team has rated this update as having ...

Synopsis Moderate: ruby security update Type/Severity Security Advisory: Moderate Topic Updated ruby packages that fix two security issues are now available forRed Hat Enterprise Linux 4 and 5The Red Hat Security Response Team has rated this update as having moderatesecurity impact Common Vulnerability Sc ...

CWE-310 https://bugzilla.redhat.com/show_bug.cgi?id=722415 http://lists.fedoraproject.org/pipermail/package-announce/2011-July/063062.html http://www.openwall.com/lists/oss-security/2011/07/11/1 http://svn.ruby-lang.org/repos/ruby/tags/v1_8_7_352/ChangeLog http://www.openwall.com/lists/oss-security/2011/07/20/16 http://www.openwall.com/lists/oss-security/2011/07/12/14 http://svn.ruby-lang.org/cgi-bin/viewvc.cgi?view=revision&revision=31713 http://www.ruby-lang.org/en/news/2011/07/02/ruby-1-8-7-p352-released/http://www.securityfocus.com/bid/49015 http://www.openwall.com/lists/oss-security/2011/07/20/1 http://redmine.ruby-lang.org/issues/show/4338 http://lists.fedoraproject.org/pipermail/package-announce/2011-July/063071.html https://exchange.xforce.ibmcloud.com/vulnerabilities/69032 https://usn.ubuntu.com/1377-1/https://nvd.nist.gov

CVE-2011-2686

Vulnerability Summary

Vulnerability Trend

Vendor Advisories

References

Vulmon Search

About

Products

Connect