The netaddr gem before 2.0.4 for Ruby has misconfigured file permissions, such that a gem install may result in 0777 permissions in the target filesystem.
References
Link | Resource |
---|---|
https://github.com/dspinhirne/netaddr-rb/commit/3aac46c00a36e71905eaa619cb94d45bff6e3b51 | Patch Third Party Advisory |
https://rubygems.org/gems/netaddr/versions | Product |
History
No history.
MITRE Information
Status: PUBLISHED
Assigner: mitre
Published: 2019-10-09T14:54:40
Updated: 2019-10-09T14:54:40
Reserved: 2019-10-09T00:00:00
Link: CVE-2019-17383
JSON object: View
NVD Information
Status : Analyzed
Published: 2019-10-09T16:15:15.767
Modified: 2022-07-19T17:14:16.493
Link: CVE-2019-17383
JSON object: View
Redhat Information
No data.
CWE