bundler-budit 0.6.1

data/data/ruby-advisory-db/rubies/ruby/CVE-2018-6914.yml

@@ -0,0 +1,27 @@
+---
+engine: ruby
+cve: 2018-6914
+url: https://www.ruby-lang.org/en/news/2018/03/28/unintentional-file-and-directory-creation-with-directory-traversal-cve-2018-6914/
+title: Unintentional file and directory creation with directory traversal in tempfile and tmpdir
+date: 2018-03-28
+description: |
+  There is an unintentional directory creation vulnerability in tmpdir library
+  bundled with Ruby. And there is also an unintentional file creation
+  vulnerability in tempfile library bundled with Ruby, because it uses tmpdir
+  internally
+
+  `Dir.mktmpdir` method introduced by tmpdir library accepts the prefix and the
+  suffix of the directory which is created as the first parameter. The prefix can
+  contain relative directory specifiers `../`, so this method can be used to
+  target any directory. So, if a script accepts an external input as the prefix,
+  and the targeted directory has inappropriate permissions or the ruby process
+  has inappropriate privileges, the attacker can create a directory or a file at
+  any directory.
+
+  All users running an affected release should upgrade immediately.
+patched_versions:
+  - "~> 2.2.10"
+  - "~> 2.3.7"
+  - "~> 2.4.4"
+  - "~> 2.5.1"
+  - "> 2.6.0-preview1"

data/data/ruby-advisory-db/rubies/ruby/CVE-2018-8777.yml

@@ -0,0 +1,21 @@
+---
+engine: ruby
+cve: 2018-8777
+url: https://www.ruby-lang.org/en/news/2018/03/28/large-request-dos-in-webrick-cve-2018-8777/
+title: DoS by large request in WEBrick
+date: 2018-03-28
+description: |
+  There is a out-of-memory DoS vulnerability with a large request in WEBrick
+  bundled with Ruby
+
+  If an attacker sends a large request which contains huge HTTP headers,
+  WEBrick try to process it on memory, so the request causes the out-of-memory
+  DoS attack.
+
+  All users running an affected release should upgrade immediately.
+patched_versions:
+  - "~> 2.2.10"
+  - "~> 2.3.7"
+  - "~> 2.4.4"
+  - "~> 2.5.1"
+  - "> 2.6.0-preview1"

data/data/ruby-advisory-db/rubies/ruby/CVE-2018-8778.yml

@@ -0,0 +1,20 @@
+---
+engine: ruby
+cve: 2018-8778
+url: https://www.ruby-lang.org/en/news/2018/03/28/buffer-under-read-unpack-cve-2018-8778/
+title: Buffer under-read in String#unpack
+date: 2018-03-28
+description: |
+  `String#unpack` receives format specifiers as its parameter, and can be
+  specified the position of parsing the data by the specifier `@`. If a big
+  number is passed with `@`, the number is treated as the negative value, and
+  out-of-buffer read is occurred. So, if a script accepts an external input as
+  the argument of `String#unpack`, the attacker can read data on heaps.
+
+  All users running an affected release should upgrade immediately.
+patched_versions:
+  - "~> 2.2.10"
+  - "~> 2.3.7"
+  - "~> 2.4.4"
+  - "~> 2.5.1"
+  - "> 2.6.0-preview1"

data/data/ruby-advisory-db/rubies/ruby/CVE-2018-8779.yml

@@ -0,0 +1,28 @@
+---
+engine: ruby
+cve: 2018-8779
+url: https://www.ruby-lang.org/en/news/2018/03/28/poisoned-nul-byte-unixsocket-cve-2018-8779/
+title: Unintentional socket creation by poisoned NUL byte in UNIXServer and UNIXSocket
+date: 2018-03-28
+description: |
+  There is a unintentional socket creation vulnerability in `UNIXServer.open`
+  method of socket library bundled with Ruby. And there is also a unintentional
+  socket access vulnerability in `UNIXSocket.open` method.
+
+  `UNIXServer.open` accepts the path of the socket to be created at the first
+  parameter. If the path contains NUL (`\0`) bytes, this method recognize that
+  the path is completed before the NUL bytes. So, if a script accepts an external
+  input as the argument of this method, the attacker can make the socket file in
+  the unintentional path. And, `UNIXSocket.open` also accepts the path of the
+  socket to be created at the first parameter without checking NUL bytes like
+  `UNIXServer.open`. So, if a script accepts an external input as the argument of
+  this method, the attacker can accepts the socket file in the unintentional
+  path.
+
+  All users running an affected release should upgrade immediately.
+patched_versions:
+  - "~> 2.2.10"
+  - "~> 2.3.7"
+  - "~> 2.4.4"
+  - "~> 2.5.1"
+  - "> 2.6.0-preview1"

data/data/ruby-advisory-db/rubies/ruby/CVE-2018-8780.yml

@@ -0,0 +1,22 @@
+---
+engine: ruby
+cve: 2018-8780
+url: https://www.ruby-lang.org/en/news/2018/03/28/poisoned-nul-byte-dir-cve-2018-8780/
+title: Unintentional directory traversal by poisoned NUL byte in Dir
+date: 2018-03-28
+description: |
+  There is an unintentional directory traversal in some methods in `Dir`
+
+  `Dir.open`, `Dir.new`, `Dir.entries` and `Dir.empty?` accept the path of the
+  target directory as their parameter. If the parameter contains NUL (`\0`)
+  bytes, these methods recognize that the path is completed before the NUL bytes.
+  So, if a script accepts an external input as the argument of these methods, the
+  attacker can make the unintentional directory traversal.
+
+  All users running an affected release should upgrade immediately.
+patched_versions:
+  - "~> 2.2.10"
+  - "~> 2.3.7"
+  - "~> 2.4.4"
+  - "~> 2.5.1"
+  - "> 2.6.0-preview1"

data/data/ruby-advisory-db/rubies/ruby/OSVDB-100113.yml

@@ -0,0 +1,17 @@
+---
+engine: ruby
+cve: 2013-4164
+osvdb: 100113
+url: http://www.osvdb.org/show/osvdb/100113
+title: Heap Overflow in Floating Point Parsing (CVE-2013-4164)
+date: 2013-11-22
+description: |
+  Heap-based buffer overflow in Ruby 1.8, 1.9 before 1.9.3-p484, 2.0 before 2.0.0-p353, 2.1 before
+  2.1.0 preview2, and trunk before revision 43780 allows context-dependent attackers to cause a
+  denial of service (segmentation fault) and possibly execute arbitrary code via a string that is
+  converted to a floating point value, as demonstrated using (1) the to_f method or (2) JSON.parse.
+cvss_v2: 6.8
+patched_versions:
+  - ~> 1.9.3.484
+  - ~> 2.0.0.353
+  - ">= 2.1.0.preview.2"

data/data/ruby-advisory-db/rubies/ruby/OSVDB-105027.yml

@@ -0,0 +1,20 @@
+---
+engine: ruby
+cve: 2014-2525
+osvdb: 105027
+url: http://www.osvdb.org/show/osvdb/105027
+title: |
+  LibYAML yaml_parser_scan_uri_escapes() Function Crafted Document Parsing Heap
+  Buffer Overflow
+date: 2014-03-26
+description: |
+  LibYAML contains an overflow condition in the yaml_parser_scan_uri_escapes()
+  function that is triggered as user-supplied input is not properly validated
+  when parsing a specially crafted YAML document. This may allow a
+  context-dependent attacker to cause a heap-based buffer overflow, resulting
+  in a denial of service or potentially allowing the execution of arbitrary
+  code in a program linked against the library.
+cvss_v2: 6.8
+patched_versions:
+  - ~> 2.0.0.481
+  - ">= 2.1.2"

data/data/ruby-advisory-db/rubies/ruby/OSVDB-107478.yml

@@ -0,0 +1,16 @@
+---
+engine: ruby
+cve: 2014-3916
+osvdb: 107478
+url: http://www.osvdb.org/show/osvdb/107478
+title: Ruby string.c str_buf_cat() Function Crafted String Handling Remote DoS
+date: 2014-04-07
+description: |
+  Ruby contains a flaw in the str_buf_cat() function in string.c that is
+  triggered when handling an overly long string. This may allow a remote
+  attacker to cause a denial of service.
+cvss_v2: 5.0
+patched_versions:
+  - ~> 2.0.0.576
+  - ~> 2.1.3
+  - ">= 2.2.0.preview.1"

data/data/ruby-advisory-db/rubies/ruby/OSVDB-108971.yml

@@ -0,0 +1,17 @@
+---
+engine: ruby
+cve: 2014-4975
+osvdb: 108971
+url: http://www.osvdb.org/show/osvdb/108971
+title: Ruby pack.c encodes() Function Remote Stack Buffer Overflow
+date: 2014-07-09
+description: |
+  Ruby contains an overflow condition in the encodes() function in pack.c. The
+  issue is triggered as user-supplied input is not properly validated when
+  allocating buffer lengths. This may allow a remote attacker to cause a
+  stack-based buffer overflow, resulting in a denial of service or potentially
+  allowing the execution of arbitrary code.
+cvss_v2: 5.0
+patched_versions:
+  - ~> 2.1.3
+  - ">= 2.2.0.preview.1"

data/data/ruby-advisory-db/rubies/ruby/OSVDB-113747.yml

@@ -0,0 +1,19 @@
+---
+engine: ruby
+cve: 2014-8080
+osvdb: 113747
+url: http://www.osvdb.org/show/osvdb/113747
+title: Ruby lib/rexml/entity.rb XML External Entity (XXE) Expansion Remote DoS
+date: 2014-10-27
+description: |
+  Ruby contains an XXE (Xml eXternal Entity) injection flaw in
+  lib/rexml/entity.rb that is triggered during the parsing of XML data. The
+  issue is due to an incorrectly configured XML parser accepting XML external
+  entities from an untrusted source. By sending specially crafted XML data, a
+  remote attacker can consume all available memory and cause a denial of
+  service.
+cvss_v2: 5.0
+patched_versions:
+  - ~> 1.9.3.550
+  - ~> 2.0.0.594
+  - ">= 2.1.4"

data/data/ruby-advisory-db/rubies/ruby/OSVDB-114641.yml

@@ -0,0 +1,22 @@
+---
+engine: ruby
+cve: 2014-8090
+osvdb: 114641
+url: http://www.osvdb.org/show/osvdb/114641
+title: |
+  Ruby lib/rexml/entity.rb NULL String Handling Recursive XML External Entity
+  (XXE) Expansion Resource Consumption Remote DoS
+date: 2014-11-13
+description: |
+  Ruby contains an XXE (Xml eXternal Entity) injection flaw in the
+  lib/rexml/entity.rb that is triggered during the parsing of XML data when
+  handling recursive expansions in NULL strings. The issue is due to an
+  incorrectly configured XML parser accepting XML external entities from an
+  untrusted source. By sending specially crafted XML data, a remote attacker
+  can cause a consumption of system resources and a denial of service.
+cvss_v2: 5.0
+patched_versions:
+  - ~> 1.9.3.551
+  - ~> 2.0.0.598
+  - ">= 2.1.5"
+

data/data/ruby-advisory-db/rubies/ruby/OSVDB-120541.yml

@@ -0,0 +1,22 @@
+---
+engine: ruby
+cve: 2015-1855
+osvdb: 120541
+url: http://www.osvdb.org/show/osvdb/120541
+title: |
+  Ruby lib/openssl/ssl.rb verify_certificate_identity() Function X.509
+  Certificate Improper Hostname Verification MitM Spoofing
+date: 2014-03-16
+description: |
+  Ruby contains a flaw related to certificate validation in
+  verify_certificate_identity() function in lib/openssl/ssl.rb. The issue is
+  due to the server hostname not being verified to match a domain name in the
+  Subject's Common Name (CN) or SubjectAltName field of the X.509 certificate.
+  By spoofing the TLS/SSL server via a certificate that appears valid, an
+  attacker with the ability to intercept network traffic (e.g. MiTM, DNS cache
+  poisoning) can disclose and optionally manipulate transmitted data.
+cvss_v2: 4.0
+patched_versions:
+  - ~> 2.0.0.645
+  - ~> 2.1.6
+  - ">= 2.2.2"

data/data/ruby-advisory-db/rubies/ruby/OSVDB-46550.yml

@@ -0,0 +1,22 @@
+---
+engine: ruby
+cve: 2008-2662
+osvdb: 46550
+url: http://www.osvdb.org/show/osvdb/46550
+title: Ruby rb_str_buf_append Function Multiple Overflows
+date: 2008-06-20
+description: |
+  Multiple integer overflows in the rb_str_buf_append
+  function in Ruby 1.8.4 and earlier, 1.8.5 before 1.8.5-p231, 1.8.6 before 1.8.6-p230,
+  1.8.7 before 1.8.7-p22, and 1.9.0 before 1.9.0-2 allow context-dependent attackers
+  to execute arbitrary code or cause a denial of service via unknown vectors that
+  trigger memory corruption, a different issue than CVE-2008-2663, CVE-2008-2664,
+  and CVE-2008-2725. NOTE: as of 20080624, there has been inconsistent usage of multiple
+  CVE identifiers related to Ruby. This CVE description should be regarded as authoritative,
+  although it is likely to change.
+cvss_v2: 10.0
+patched_versions:
+  - ~> 1.8.5.231
+  - ~> 1.8.6.230
+  - ~> 1.8.7.22
+  - ">= 1.9.0.2"

data/data/ruby-advisory-db/rubies/ruby/OSVDB-46551.yml

@@ -0,0 +1,21 @@
+---
+engine: ruby
+cve: 2008-2663
+osvdb: 46551
+url: http://www.osvdb.org/show/osvdb/46551
+title: Ruby rb_ary_store Function Multiple Overflows
+date: 2008-06-20
+description: |
+  Multiple integer overflows in the rb_ary_store function
+  in Ruby 1.8.4 and earlier, 1.8.5 before 1.8.5-p231, 1.8.6 before 1.8.6-p230, and
+  1.8.7 before 1.8.7-p22 allow context-dependent attackers to execute arbitrary code
+  or cause a denial of service via unknown vectors, a different issue than CVE-2008-2662,
+  CVE-2008-2664, and CVE-2008-2725. NOTE: as of 20080624, there has been inconsistent
+  usage of multiple CVE identifiers related to Ruby. The CVE description should be
+  regarded as authoritative, although it is likely to change.
+cvss_v2: 10.0
+patched_versions:
+  - ~> 1.8.5.231
+  - ~> 1.8.6.230
+  - ~> 1.8.7.22
+  - ">= 1.9.0.2"

data/data/ruby-advisory-db/rubies/ruby/OSVDB-46552.yml

@@ -0,0 +1,21 @@
+---
+engine: ruby
+cve: 2008-2664
+osvdb: 46552
+url: http://www.osvdb.org/show/osvdb/46552
+title: Ruby rb_str_format Function Unspecified Memory Corruption
+date: 2008-06-20
+description: |
+  The rb_str_format function in Ruby 1.8.4 and earlier,
+  1.8.5 before 1.8.5-p231, 1.8.6 before 1.8.6-p230, 1.8.7 before 1.8.7-p22, and 1.9.0
+  before 1.9.0-2 allows context-dependent attackers to trigger memory corruption via
+  unspecified vectors related to alloca, a different issue than CVE-2008-2662, CVE-2008-2663,
+  and CVE-2008-2725. NOTE: as of 20080624, there has been inconsistent usage of multiple
+  CVE identifiers related to Ruby. The CVE description should be regarded as authoritative,
+  although it is likely to change.
+cvss_v2: 7.8
+patched_versions:
+  - ~> 1.8.5.231
+  - ~> 1.8.6.230
+  - ~> 1.8.7.22
+  - ">= 1.9.0.2"

data/data/ruby-advisory-db/rubies/ruby/OSVDB-46553.yml

@@ -0,0 +1,22 @@
+---
+engine: ruby
+cve: 2008-2725
+osvdb: 46553
+url: http://www.osvdb.org/show/osvdb/46553
+title: Ruby rb_ary_splice Function REALLOC_N Overflow
+date: 2008-06-20
+description: |
+  Integer overflow in the (1) rb_ary_splice function
+  in Ruby 1.8.4 and earlier, 1.8.5 before 1.8.5-p231, 1.8.6 before 1.8.6-p230, and
+  1.8.7 before 1.8.7-p22; and (2) the rb_ary_replace function in 1.6.x allows context-dependent
+  attackers to trigger memory corruption via unspecified vectors, aka the "REALLOC_N"
+  variant, a different issue than CVE-2008-2662, CVE-2008-2663, and CVE-2008-2664.
+  NOTE: as of 20080624, there has been inconsistent usage of multiple CVE identifiers
+  related to Ruby. The CVE description should be regarded as authoritative, although
+  it is likely to change.
+cvss_v2: 7.8
+patched_versions:
+  - ~> 1.8.5.231
+  - ~> 1.8.6.230
+  - ~> 1.8.7.22
+  - ">= 1.9.0.2"

data/data/ruby-advisory-db/rubies/ruby/OSVDB-46554.yml

@@ -0,0 +1,18 @@
+---
+engine: ruby
+cve: 2008-2726
+osvdb: 46554
+url: http://www.osvdb.org/show/osvdb/46554
+title: Ruby rb_ary_splice Function Overflow (beg + rlen)
+date: 2008-06-20
+description: |
+  A buffer overflow exists in Ruby. The rb_ary_splice function fails to
+  validate unspecified data resulting in an integer overflow. With a specially crafted
+  request, a context-dependent attacker can cause arbitrary code execution resulting
+  in a loss of integrity.
+cvss_v2: 7.8
+patched_versions:
+  - ~> 1.8.5.231
+  - ~> 1.8.6.230
+  - ~> 1.8.7.22
+  - ">= 1.9.0.2"

data/data/ruby-advisory-db/rubies/ruby/OSVDB-47753.yml

@@ -0,0 +1,16 @@
+---
+engine: ruby
+cve: 2008-3790
+osvdb: 47753
+url: http://www.osvdb.org/show/osvdb/47753
+title: Ruby REXML Library Crafted XML Document Handling DoS
+date: 2008-08-25
+description: |
+  The REXML module in Ruby 1.8.6 through 1.8.6-p287,
+  1.8.7 through 1.8.7-p72, and 1.9 allows context-dependent attackers to cause a denial
+  of service (CPU consumption) via an XML document with recursively nested entities,
+  aka an "XML entity explosion."
+cvss_v2: 5.0
+patched_versions:
+  - ~> 1.8.7.160
+  - ">= 1.9.1"

data/data/ruby-advisory-db/rubies/ruby/OSVDB-55031.yml

@@ -0,0 +1,17 @@
+---
+engine: ruby
+cve: 2009-1904
+osvdb: 55031
+url: http://www.osvdb.org/show/osvdb/55031
+title: Ruby BigDecimal Library Float Data Type Conversion String Argument Handling
+  DoS
+date: 2009-06-10
+description: |
+  The BigDecimal library in Ruby 1.8.6 before p369
+  and 1.8.7 before p173 allows context-dependent attackers to cause a denial of service
+  (application crash) via a string argument that represents a large number, as demonstrated
+  by an attempted conversion to the Float data type.
+cvss_v2: 5.0
+patched_versions:
+  - ~> 1.8.6.369
+  - ">= 1.8.7.174"

data/data/ruby-advisory-db/rubies/ruby/OSVDB-60880.yml

@@ -0,0 +1,17 @@
+---
+engine: ruby
+cve: 2009-4124
+osvdb: 60880
+url: http://www.osvdb.org/show/osvdb/60880
+title: Ruby string.c rb_str_justify() Function Overflow
+date: 2009-12-07
+description: |
+  Heap-based buffer overflow in the rb_str_justify
+  function in string.c in Ruby 1.9.1 before 1.9.1-p376 allows context-dependent attackers
+  to execute arbitrary code via unspecified vectors involving (1) String#ljust, (2)
+  String#center, or (3) String#rjust. NOTE: some of these details are obtained from
+  third party information.
+cvss_v2: 10.0
+patched_versions:
+  - "~> 1.8.0"
+  - ">= 1.9.1.376"

data/data/ruby-advisory-db/rubies/ruby/OSVDB-61774.yml

@@ -0,0 +1,20 @@
+---
+engine: ruby
+cve: 2009-4492
+osvdb: 61774
+url: http://www.osvdb.org/show/osvdb/61774
+title: WEBrick HTTP Request Escape Sequence Terminal Command Injection
+date: 2010-01-10
+description: |
+  WEBrick 1.3.1 in Ruby 1.8.6 through patchlevel 383,
+  1.8.7 through patchlevel 248, 1.8.8dev, 1.9.1 through patchlevel 376, and 1.9.2dev
+  writes data to a log file without sanitizing non-printable characters, which might
+  allow remote attackers to modify a window''s title, or possibly execute arbitrary
+  commands or overwrite files, via an HTTP request containing an escape sequence for
+  a terminal emulator.
+cvss_v2: 5.0
+patched_versions:
+  - ~> 1.8.6.388
+  - ~> 1.8.7.249
+  - ">= 1.9.1.378"
+