RubyGems/private_address_check CVE-2017-0904: high 8.1, EPSS 2.42%
private_address_check vulnerable to bypass of Resolv.getaddresses method
Action: Upgrade private_address_check to 0.4.0 or later.
bundle update private_address_checkAffected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 0.4.0 | - |
Fixed versions
| 0.4.0 |
Sources
- osv: GHSA-hxhj-hp9m-qwc4
- nvd: CVE-2017-0904
- https://github.com/jtdowney/private_address_check/issues/1
- https://github.com/jtdowney/private_address_check/commit/58a0d7fe31de339c0117160567a5b33ad82b46af
- https://hackerone.com/reports/287245
- https://hackerone.com/reports/287835
- https://edoverflow.com/2017/ruby-resolv-bug
CVE-2017-0904 · published · modified · JSON