CVE-2021-31799

Name
CVE-2021-31799
Description
In RDoc 3.11 through 6.x before 6.3.1, as distributed with Ruby through 3.0.1, it is possible to execute arbitrary code via | and tags in a filename.
NVD Severity
unknown
Other trackers
CVE, NVD, CERT, CVE Details, CIRCL, Arch Linux, Debian, Red Hat, Ubuntu, Gentoo, SUSE (Bugzilla), SUSE (CVE), Mageia
Mailing lists
oss-security, full-disclosure, bugtraq
Exploits
Exploit DB, Metasploit
Forges
GitHub (code, issues), Aports (code, issues)

References

Type URI
MISC https://www.ruby-lang.org/en/news/2021/05/02/os-command-injection-in-rdoc/
MISC https://security-tracker.debian.org/tracker/CVE-2021-31799
Third Party Advisory https://security.netapp.com/advisory/ntap-20210902-0004/
Third Party Advisory https://lists.debian.org/debian-lts-announce/2021/10/msg00009.html
MISC https://www.oracle.com/security-alerts/cpuapr2022.html
cve@mitre.org https://security.gentoo.org/glsa/202401-05

Match rules

CPE URI Source package Min version Max version
cpe:2.3:a:ruby-lang:rdoc:*:*:*:*:*:*:*:* rdoc >= 3.11 < 6.3.1
cpe:2.3:a:ruby-lang:ruby:*:*:*:*:*:*:*:* ruby >= None <= 3.0.1
cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:* debian_linux == None == 9.0
cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:* debian_linux == None == 10.0

Vulnerable and fixed packages

Source package Branch Version Maintainer Status
ruby edge-main 2.7.4-r2 Natanael Copa <ncopa@alpinelinux.org> fixed
ruby edge-main 2.7.4-r1 Natanael Copa <ncopa@alpinelinux.org> fixed
ruby edge-main 2.7.4-r0 Natanael Copa <ncopa@alpinelinux.org> fixed
ruby edge-main 2.7.3-r0 Natanael Copa <ncopa@alpinelinux.org> possibly vulnerable
ruby edge-main 2.7.2-r0 None possibly vulnerable
ruby edge-main 2.6.6-r0 None possibly vulnerable
ruby edge-main 2.6.5-r0 None possibly vulnerable
ruby edge-main 2.5.2-r0 None possibly vulnerable
ruby edge-main 2.5.1-r0 None possibly vulnerable
ruby edge-main 2.4.3-r0 None possibly vulnerable
ruby edge-main 2.4.2-r0 None possibly vulnerable
ruby 3.22-main 2.7.4-r0 None fixed
ruby 3.22-main 2.7.3-r0 None possibly vulnerable
ruby 3.22-main 2.7.2-r0 None possibly vulnerable
ruby 3.22-main 2.6.6-r0 None possibly vulnerable
ruby 3.22-main 2.6.5-r0 None possibly vulnerable
ruby 3.22-main 2.5.2-r0 None possibly vulnerable
ruby 3.22-main 2.5.1-r0 None possibly vulnerable
ruby 3.22-main 2.4.3-r0 None possibly vulnerable
ruby 3.22-main 2.4.2-r0 None possibly vulnerable
ruby 3.21-main 2.7.4-r0 None fixed
ruby 3.21-main 2.7.3-r0 None possibly vulnerable
ruby 3.21-main 2.7.2-r0 None possibly vulnerable
ruby 3.21-main 2.6.6-r0 None possibly vulnerable
ruby 3.21-main 2.6.5-r0 None possibly vulnerable
ruby 3.21-main 2.5.2-r0 None possibly vulnerable
ruby 3.21-main 2.5.1-r0 None possibly vulnerable
ruby 3.21-main 2.4.3-r0 None possibly vulnerable
ruby 3.21-main 2.4.2-r0 None possibly vulnerable
ruby 3.20-main 2.7.4-r0 None fixed
ruby 3.20-main 2.7.3-r0 None possibly vulnerable
ruby 3.20-main 2.7.2-r0 None possibly vulnerable
ruby 3.20-main 2.6.6-r0 None possibly vulnerable
ruby 3.20-main 2.6.5-r0 None possibly vulnerable
ruby 3.20-main 2.5.2-r0 None possibly vulnerable
ruby 3.20-main 2.5.1-r0 None possibly vulnerable
ruby 3.20-main 2.4.3-r0 None possibly vulnerable
ruby 3.20-main 2.4.2-r0 None possibly vulnerable
ruby 3.19-main 2.7.4-r0 None fixed
ruby 3.19-main 2.7.3-r0 None possibly vulnerable
ruby 3.19-main 2.7.2-r0 None possibly vulnerable
ruby 3.19-main 2.6.6-r0 None possibly vulnerable
ruby 3.19-main 2.6.5-r0 None possibly vulnerable
ruby 3.19-main 2.5.2-r0 None possibly vulnerable
ruby 3.19-main 2.5.1-r0 None possibly vulnerable
ruby 3.19-main 2.4.3-r0 None possibly vulnerable
ruby 3.19-main 2.4.2-r0 None possibly vulnerable
ruby 3.18-main 2.7.4-r0 None fixed
ruby 3.17-main 2.7.4-r0 None fixed
ruby 3.12-main 2.7.6-r0 Natanael Copa <ncopa@alpinelinux.org> fixed
ruby 3.12-main 2.7.5-r0 Natanael Copa <ncopa@alpinelinux.org> fixed
ruby 3.12-main 2.7.4-r0 Natanael Copa <ncopa@alpinelinux.org> fixed
ruby 3.11-main 2.6.8-r0 Natanael Copa <ncopa@alpinelinux.org> fixed
ruby 3.11-main 2.6.7-r0 Natanael Copa <ncopa@alpinelinux.org> possibly vulnerable