正文

Ruby 信息泄露漏洞

admin
admin V管理员 /0 评论 /9 阅读
0306
此篇文章发布距今已超过1158天，您需要注意文章的内容或图片是否可用！

漏洞信息详情

Ruby 信息泄露漏洞

  • CNNVD编号：CNNVD-202107-409
    • <!--
  • 危害等级： 中危-->
  • 危害等级： 中危
  • CVE编号： CVE-2021-31810
  • 漏洞类型： 信息泄露
  • 发布时间： 2021-07-07
  • 威胁类型： 远程
  • 更新时间： 2021-10-27
  • 厂        商：
  • 漏洞来源：

漏洞简介

Ruby是松本行弘个人开发者的一种跨平台、面向对象的动态类型编程语言。

Ruby 存在安全漏洞。恶意 FTP 服务器可以使用 PASV 响应来欺骗 Net：：FTP 连接给定的 IP 地址和端口。

漏洞公告

目前厂商已发布升级补丁以修复漏洞，补丁获取链接：

https://access.redhat.com/security/cve/cve-2021-31810

参考网址

来源:CONFIRM

链接:https://security.netapp.com/advisory/ntap-20210917-0001/

来源:MLIST

链接:https://lists.debian.org/debian-lts-announce/2021/10/msg00009.html

来源:MISC

链接:https://hackerone.com/reports/1145454

来源:FEDORA

链接:https://lists.fedoraproject.org/archives/list/[email protected]/message/MWXHK5UUHVSHF7HTHMX6JY3WXDVNIHSL/

来源:MISC

链接:https://www.ruby-lang.org/en/news/2021/07/07/trusting-pasv-responses-in-net-ftp/

来源:www.cybersecurity-help.cz

链接:https://www.cybersecurity-help.cz/vdb/SB2021080913

来源:packetstormsecurity.com

链接:https://packetstormsecurity.com/files/164211/Red-Hat-Security-Advisory-2021-3559-01.html

来源:packetstormsecurity.com

链接:https://packetstormsecurity.com/files/164647/Red-Hat-Security-Advisory-2021-3982-01.html

来源:www.auscert.org.au

链接:https://www.auscert.org.au/bulletins/ESB-2021.2338

来源:www.auscert.org.au

链接:https://www.auscert.org.au/bulletins/ESB-2021.2646

来源:access.redhat.com

链接:https://access.redhat.com/security/cve/cve-2021-31810

来源:packetstormsecurity.com

链接:https://packetstormsecurity.com/files/163622/Ubuntu-Security-Notice-USN-5020-1.html

来源:www.cybersecurity-help.cz

链接:https://www.cybersecurity-help.cz/vdb/SB2021092218

来源:www.auscert.org.au

链接:https://www.auscert.org.au/bulletins/ESB-2021.2484

来源:www.auscert.org.au

链接:https://www.auscert.org.au/bulletins/ESB-2021.3149

来源:www.auscert.org.au

链接:https://www.auscert.org.au/bulletins/ESB-2021.3413

来源:www.auscert.org.au

链接:https://www.auscert.org.au/bulletins/ESB-2021.3545

来源:packetstormsecurity.com

链接:https://packetstormsecurity.com/files/163745/Red-Hat-Security-Advisory-2021-3020-01.html

来源:vigilance.fr

链接:https://vigilance.fr/vulnerability/Ruby-information-disclosure-via-Port-Scans-35966

来源:www.cybersecurity-help.cz

链接:https://www.cybersecurity-help.cz/vdb/SB2021080210

受影响实体

    暂无


补丁

  • Ruby 安全漏洞的修复措施
    <!--
    2021-7-7
    -->