In Rubyzip before 1.3.0, a crafted ZIP file can bypass application checks on ZIP entry sizes because data about the uncompressed size can be spoofed. This allows attackers to cause a denial of service (disk consumption).

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - In Rubyzip before 1.3.0, a crafted ZIP file can bypass application checks on ZIP entry sizes because data     about the uncompressed size can be spoofed. This allows attackers to cause a denial of service (disk     consumption). (CVE-2019-16892)

Note that Nessus relies on the presence of the package as reported by the vendor.

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2019:4201 advisory.

    Red Hat CloudForms Management Engine delivers the insight, control, and automation needed to address the     challenges of managing virtual environments. CloudForms Management Engine is built on Ruby on Rails, a     model-view-controller (MVC) framework for web application development. Action Pack implements the     controller and the view components.

    Security Fix(es):

    * cfme: rubygem-rubyzip denial of service via crafted ZIP file (CVE-2019-16892)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

    Additional Changes:

    This update fixes various bugs and adds enhancements. Documentation for these changes is available from     the Release Notes document linked to in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

Gitlab reports :

Path Traversal to Arbitrary File Read

User Permissions Not Validated in ProjectExportWorker

XSS Vulnerability in File API

Package and File Disclosure through GitLab Workhorse

XSS Vulnerability in Create Groups

Issue and Merge Request Activity Counts Exposed

Email Confirmation Bypass Using AP

Disclosure of Forked Private Project Source Code

Private Project Names Exposed in GraphQL queries

Disclosure of Issues and Merge Requests via Todos

Denial of Service via AsciiDoc

Last Pipeline Status Exposed

Arbitrary Change of Pipeline Status

Grafana Token Displayed in Plaintext

Update excon gem

Update rdoc gem

Update rack-cors gem

Update rubyzip gem

Fix CVE-2019-16892 denial of service via crafted ZIP file.

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

ID	Name	Product	Family	Severity
257805	Linux Distros Unpatched Vulnerability : CVE-2019-16892	Nessus	Misc.	medium
210542	RHEL 8 : CloudForms 5.0.1 (RHSA-2019:4201)	Nessus	Red Hat Local Security Checks	medium
133434	FreeBSD : Gitlab -- Multiple Vulnerabilities (c5bd9068-440f-11ea-9cdb-001b217b3468)	Nessus	FreeBSD Local Security Checks	critical
131203	Fedora 31 : rubygem-rubyzip (2019-8ecd991303)	Nessus	Fedora Local Security Checks	medium
131197	Fedora 29 : rubygem-rubyzip (2019-52445dce42)	Nessus	Fedora Local Security Checks	medium
131194	Fedora 30 : rubygem-rubyzip (2019-0182d0b304)	Nessus	Fedora Local Security Checks	medium

Detections

Analytics

CVE-2019-16892

medium

Tenable Plugins

medium

medium

critical

medium

medium

medium