CVEvulnerability
CVE-2020-10933
5.3 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2020-05-04
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 5.3 MEDIUM — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
- CVSS 2.0 ([email protected])
- 5.0 MEDIUM — AV:N/AC:L/Au:N/C:P/I:N/A:N
- Weaknesses
- CWE-908
Description
An issue was discovered in Ruby 2.5.x through 2.5.7, 2.6.x through 2.6.5, and 2.7.0. If a victim calls BasicSocket#read_nonblock(requested_size, buffer, exception: false), the method resizes the buffer to fit the requested size, but no data is copied. Thus, the buffer string provides the previous value of the heap. This may expose possibly sensitive data from the interpreter.
Affected configurations
• ruby-lang ruby (>= 2.5.0 <= 2.5.7)
• ruby-lang ruby (>= 2.6.0 <= 2.6.5)
• ruby-lang ruby 2.7.0
• fedoraproject fedora 31
• debian debian linux 10.0
Related
Weakness · CWE (1)
- CWE-908 Use of Uninitialized Resource weakness
References
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/F4TNVTT66VPRMX5UZYSDGSVRXKKDDDU5/ lists.fedoraproject.org
- https://security.netapp.com/advisory/ntap-20200625-0001/ Third Party Advisory
- https://www.debian.org/security/2020/dsa-4721 Third Party Advisory
- https://www.ruby-lang.org/en/news/2020/03/31/heap-exposure-in-socket-cve-2020-10933/ Exploit, Vendor Advisory
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/F4TNVTT66VPRMX5UZYSDGSVRXKKDDDU5/ lists.fedoraproject.org
- https://security.netapp.com/advisory/ntap-20200625-0001/ Third Party Advisory
- https://www.debian.org/security/2020/dsa-4721 Third Party Advisory
- https://www.ruby-lang.org/en/news/2020/03/31/heap-exposure-in-socket-cve-2020-10933/ Exploit, Vendor Advisory