Ruby CVE-2018-8778 Arbitrary Memory Disclosure Vulnerability

coocoor.com

28 pointsrobin04 comments

Open articleView on HN

https://www.ruby-lang.org/en/news/2018/03/28/buffer-under-re...

Affected Versions:

Ruby 2.2 series: 2.2.9 and earlier

Ruby 2.3 series: 2.3.6 and earlier

Ruby 2.4 series: 2.4.3 and earlier

Ruby 2.5 series: 2.5.0 and earlier

Ruby 2.6 series: 2.6.0-preview1

prior to trunk revision r62992

https://nvd.nist.gov/vuln/detail/CVE-2018-8778

Seems like the vulnerability is somewhat old with a published date of 04/03/2018. Any reason this is coming up again today?

https://nvd.nist.gov/vuln/detail/CVE-2018-8778#VulnChangeHis...

Looks like someone added more information today

Thank you @Jeremy_k for pointing that out. Yes it a vulnerability from 2018. It seems like they added couple of red hat distribution versions affected by this vulnerability.

Reply on news.ycombinator.com