CVE-2018-16395

critical
New! CVE Severity Now Using CVSS v3

The calculated severity for CVEs has been updated to use CVSS v3 by default. CVEs that do not have a CVSS v3 score will fall back CVSS v2 for calculating severity. Severity display preferences can be toggled in the settings dropdown.

Description

An issue was discovered in the OpenSSL library in Ruby before 2.3.8, 2.4.x before 2.4.5, 2.5.x before 2.5.2, and 2.6.x before 2.6.0-preview3. When two OpenSSL::X509::Name objects are compared using ==, depending on the ordering, non-equal objects may return true. When the first argument is one character longer than the second, or the second argument contains a character that is one less than a character in the same position of the first argument, the result of == will be true. This could be leveraged to create an illegitimate certificate that may be accepted as legitimate and then used in signing or encryption operations.

References

http://lists.opensuse.org/opensuse-security-announce/2019-07/msg00036.html

http://www.securitytracker.com/id/1042105

https://access.redhat.com/errata/RHSA-2018:3729

https://access.redhat.com/errata/RHSA-2018:3730

https://access.redhat.com/errata/RHSA-2018:3731

https://access.redhat.com/errata/RHSA-2018:3738

https://access.redhat.com/errata/RHSA-2019:1948

https://access.redhat.com/errata/RHSA-2019:2565

https://hackerone.com/reports/387250

https://lists.debian.org/debian-lts-announce/2018/10/msg00020.html

https://security.netapp.com/advisory/ntap-20190221-0002/

https://usn.ubuntu.com/3808-1/

https://www.debian.org/security/2018/dsa-4332

https://www.ruby-lang.org/en/news/2018/10/17/openssl-x509-name-equality-check-does-not-work-correctly-cve-2018-16395/

https://www.ruby-lang.org/en/news/2018/10/17/ruby-2-3-8-released/

https://www.ruby-lang.org/en/news/2018/10/17/ruby-2-4-5-released/

https://www.ruby-lang.org/en/news/2018/10/17/ruby-2-5-2-released/

https://www.ruby-lang.org/en/news/2018/11/06/ruby-2-6-0-preview3-released/

Details

Source: MITRE

Published: 2018-11-16

Updated: 2019-10-03

Risk Information

CVSS v2

Base Score: 7.5

Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P

Impact Score: 6.4

Exploitability Score: 10

Severity: HIGH

CVSS v3

Base Score: 9.8

Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Impact Score: 5.9

Exploitability Score: 3.9

Severity: CRITICAL

Tenable Plugins

View all (27 total)

IDNameProductFamilySeverity
137599SUSE SLES12 Security Update : ruby2.1 (SUSE-SU-2020:1570-1)NessusSuSE Local Security Checks
high
128299RHEL 7 : ruby (RHSA-2019:2565)NessusRed Hat Local Security Checks
critical
127635RHEL 7 : ruby (RHSA-2019:1948)NessusRed Hat Local Security Checks
critical
127221NewStart CGSL CORE 5.04 / MAIN 5.04 : ruby Vulnerability (NS-SA-2019-0043)NessusNewStart CGSL Local Security Checks
critical
126904openSUSE Security Update : ruby-bundled-gems-rpmhelper / ruby2.5 (openSUSE-2019-1771)NessusSuSE Local Security Checks
high
126846EulerOS 2.0 SP2 : ruby (EulerOS-SA-2019-1718)NessusHuawei Local Security Checks
critical
126617SUSE SLED15 / SLES15 Security Update : ruby-bundled-gems-rpmhelper, ruby2.5 (SUSE-SU-2019:1804-1)NessusSuSE Local Security Checks
high
125569EulerOS Virtualization for ARM 64 3.0.2.0 : ruby (EulerOS-SA-2019-1617)NessusHuawei Local Security Checks
critical
124931EulerOS Virtualization 3.0.1.0 : ruby (EulerOS-SA-2019-1428)NessusHuawei Local Security Checks
critical
124627EulerOS 2.0 SP5 : ruby (EulerOS-SA-2019-1341)NessusHuawei Local Security Checks
critical
124626EulerOS 2.0 SP3 : ruby (EulerOS-SA-2019-1340)NessusHuawei Local Security Checks
critical
122904Photon OS 1.0: Rubygem PHSA-2019-1.0-0205NessusPhotonOS Local Security Checks
critical
122903Photon OS 1.0: Ruby PHSA-2019-1.0-0205NessusPhotonOS Local Security Checks
critical
122897Photon OS 2.0: Rubygem PHSA-2019-2.0-0130NessusPhotonOS Local Security Checks
critical
122896Photon OS 2.0: Ruby PHSA-2019-2.0-0130NessusPhotonOS Local Security Checks
critical
121052Amazon Linux 2 : ruby (ALAS-2019-1143)NessusAmazon Linux Local Security Checks
critical
120464Fedora 28 : ruby (2018-6070bcf454)NessusFedora Local Security Checks
critical
120334Fedora 29 : ruby (2018-319b9d0f68)NessusFedora Local Security Checks
critical
119665CentOS 7 : ruby (CESA-2018:3738)NessusCentOS Local Security Checks
critical
119472Amazon Linux AMI : ruby23 / ruby24 (ALAS-2018-1113)NessusAmazon Linux Local Security Checks
critical
119444Scientific Linux Security Update : ruby on SL7.x x86_64 (20181130)NessusScientific Linux Local Security Checks
critical
119294RHEL 7 : ruby (RHSA-2018:3738)NessusRed Hat Local Security Checks
critical
119293Oracle Linux 7 : ruby (ELSA-2018-3738)NessusOracle Linux Local Security Checks
critical
119106Fedora 27 : ruby (2018-190ecd2ef8)NessusFedora Local Security Checks
critical
118721Debian DSA-4332-1 : ruby2.3 - security updateNessusDebian Local Security Checks
critical
118471Debian DLA-1558-1 : ruby2.1 security updateNessusDebian Local Security Checks
critical
118247FreeBSD : ruby -- multiple vulnerabilities (afc60484-0652-440e-b01a-5ef814747f06)NessusFreeBSD Local Security Checks
critical