CVE-2017-10784

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2017-10784
Import Source
https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2017-10784.json
JSON Data
https://api.test.osv.dev/v1/vulns/CVE-2017-10784
Aliases
Downstream
Related
Published
2017-09-19T17:29:00.263Z
Modified
2026-04-09T05:02:39.351097Z
Severity
  • 8.8 (High) CVSS_V3 - CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H CVSS Calculator
Summary
[none]
Details

The Basic authentication code in WEBrick library in Ruby before 2.2.8, 2.3.x before 2.3.5, and 2.4.x through 2.4.1 allows remote attackers to inject terminal emulator escape sequences into its log and possibly execute arbitrary commands via a crafted user name.

References

Affected packages

Git / github.com/ruby/ruby

Affected ranges

Type
GIT
Repo
https://github.com/ruby/ruby
Events
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
530165c2948c3eed741db5659f7b937270caa46a
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
d40ea2afa6ff5a6e5befcf342fb7b6dc58796b20
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
9993701c7d3d83e24699177fef3238d8bf7bbbab
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
e3434401aca2e331132652d4458366267e8cf378
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
5827d8e887d881eb3a6e6ea7410590261c90545f
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
9d222264d5e6a2dcac5aceafb5742a65e53dc513
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
c91cb76f8d84b2963f6ede2ef445ad46a6104216
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
4bd69735af901266ec21486243fc206030caa6b9
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
d4bb726b713658f56e630b6cf817a0155b6f390e
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
8183c0532207ad0a9b9f99b659116218a9fa132b
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
e11c22602af69e8139ec0649bb39f5a66d1e66a1
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
81234c5ecaab58e03e346ebdbf5678e4b8a3db55
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
55b2febff000595e6c5d8120ccb888855b7edb6f
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
820605ba3c10b9f4dafc4e5d6e09765b8b31cbea
Database specific 
{
    "versions": [
        {
            "introduced": "0"
        },
        {
            "last_affected": "2.2.7"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "2.3.0"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "2.3.0-preview1"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "2.3.0-preview2"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "2.3.1"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "2.3.2"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "2.3.3"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "2.3.4"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "2.4.0"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "2.4.0-preview1"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "2.4.0-preview2"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "2.4.0-preview3"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "2.4.0-rc1"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "2.4.1"
        }
    ]
}

Affected versions

Other
v1_0_r2
v2_2_0_rc1
v2_2_7
v2_3_0
v2_3_0_preview1
v2_3_0_preview2
v2_3_1
v2_3_2
v2_3_3
v2_3_4
v2_4_0
v2_4_0_preview1
v2_4_0_preview2
v2_4_0_preview3
v2_4_0_rc1
v2_4_1

Database specific

source 
"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2017-10784.json"