FKIE_CVE-2014-2734

Vulnerability from fkie_nvd - Published: 2014-04-24 23:55 - Updated: 2026-05-06 22:30
Severity
Summary
The openssl extension in Ruby 2.x does not properly maintain the state of process memory after a file is reopened, which allows remote attackers to spoof signatures within the context of a Ruby script that attempts signature verification after performing a certain sequence of filesystem operations. NOTE: this issue has been disputed by the Ruby OpenSSL team and third parties, who state that the original demonstration PoC contains errors and redundant or unnecessarily-complex code that does not appear to be related to a demonstration of the issue. As of 20140502, CVE is not aware of any public comment by the original researcher
References
cve@mitre.orghttp://packetstormsecurity.com/files/126218/Ruby-OpenSSL-Private-Key-Spoofing.htmlExploit
cve@mitre.orghttp://seclists.org/fulldisclosure/2014/Apr/231Exploit
cve@mitre.orghttp://seclists.org/fulldisclosure/2014/May/13
cve@mitre.orghttp://www.osvdb.org/106006
cve@mitre.orghttp://www.securityfocus.com/bid/66956
cve@mitre.orghttps://gist.github.com/10446549
cve@mitre.orghttps://gist.github.com/emboss/91696b56cd227c8a0c13
cve@mitre.orghttps://github.com/adrienthebo/cve-2014-2734/
cve@mitre.orghttps://news.ycombinator.com/item?id=7601973
cve@mitre.orghttps://www.ruby-lang.org/en/news/2014/05/09/dispute-of-vulnerability-cve-2014-2734/
af854a3a-2127-422b-91ae-364da2661108http://packetstormsecurity.com/files/126218/Ruby-OpenSSL-Private-Key-Spoofing.htmlExploit
af854a3a-2127-422b-91ae-364da2661108http://seclists.org/fulldisclosure/2014/Apr/231Exploit
af854a3a-2127-422b-91ae-364da2661108http://seclists.org/fulldisclosure/2014/May/13
af854a3a-2127-422b-91ae-364da2661108http://www.osvdb.org/106006
af854a3a-2127-422b-91ae-364da2661108http://www.securityfocus.com/bid/66956
af854a3a-2127-422b-91ae-364da2661108https://gist.github.com/10446549
af854a3a-2127-422b-91ae-364da2661108https://gist.github.com/emboss/91696b56cd227c8a0c13
af854a3a-2127-422b-91ae-364da2661108https://github.com/adrienthebo/cve-2014-2734/
af854a3a-2127-422b-91ae-364da2661108https://news.ycombinator.com/item?id=7601973
af854a3a-2127-422b-91ae-364da2661108https://www.ruby-lang.org/en/news/2014/05/09/dispute-of-vulnerability-cve-2014-2734/
Impacted products
Vendor Product Version
ruby-lang ruby 2.0
ruby-lang ruby 2.0.0
ruby-lang ruby 2.0.0
ruby-lang ruby 2.0.0
ruby-lang ruby 2.0.0
ruby-lang ruby 2.0.0
ruby-lang ruby 2.0.0
ruby-lang ruby 2.0.0
ruby-lang ruby 2.0.0
ruby-lang ruby 2.1
ruby-lang ruby 2.1
ruby-lang ruby 2.1.1
To clipboard 

{
  "configurations": [
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:ruby-lang:ruby:2.0:*:*:*:*:*:*:*",
              "matchCriteriaId": "90E0471D-1323-4E67-B66C-DEBF3BBAEEAA",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:ruby-lang:ruby:2.0.0:*:*:*:*:*:*:*",
              "matchCriteriaId": "B03B7561-A854-4EFA-9E4E-CFC4EEAE4EE1",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:ruby-lang:ruby:2.0.0:p0:*:*:*:*:*:*",
              "matchCriteriaId": "D2423B85-0971-42AC-8B64-819008BC5778",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:ruby-lang:ruby:2.0.0:p195:*:*:*:*:*:*",
              "matchCriteriaId": "1C663278-3B2A-4B7C-959A-2AA804467F21",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:ruby-lang:ruby:2.0.0:p247:*:*:*:*:*:*",
              "matchCriteriaId": "B7927149-A76A-48BC-8405-7375FC7D7486",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:ruby-lang:ruby:2.0.0:preview1:*:*:*:*:*:*",
              "matchCriteriaId": "CB116A84-1652-4F5D-98AC-81F0349EEDC0",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:ruby-lang:ruby:2.0.0:preview2:*:*:*:*:*:*",
              "matchCriteriaId": "259C21E7-6084-4710-9BB3-C232942A451E",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:ruby-lang:ruby:2.0.0:rc1:*:*:*:*:*:*",
              "matchCriteriaId": "285A3431-BDFE-40C5-92CD-B18217757C23",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:ruby-lang:ruby:2.0.0:rc2:*:*:*:*:*:*",
              "matchCriteriaId": "D66B32CB-AC49-4A1C-85ED-6389F27CB319",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:ruby-lang:ruby:2.1:-:*:*:*:*:*:*",
              "matchCriteriaId": "77020036-DC99-461B-9A36-E8C0BE44E6B8",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:ruby-lang:ruby:2.1:preview1:*:*:*:*:*:*",
              "matchCriteriaId": "7A2C6617-222D-4EA3-A194-4D69B10197DE",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:ruby-lang:ruby:2.1.1:*:*:*:*:*:*:*",
              "matchCriteriaId": "8DF046E4-503B-4A10-BEAB-3144BD86EA49",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ]
    }
  ],
  "cveTags": [
    {
      "sourceIdentifier": "cve@mitre.org",
      "tags": [
        "disputed"
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "The openssl extension in Ruby 2.x does not properly maintain the state of process memory after a file is reopened, which allows remote attackers to spoof signatures within the context of a Ruby script that attempts signature verification after performing a certain sequence of filesystem operations.  NOTE: this issue has been disputed by the Ruby OpenSSL team and third parties, who state that the original demonstration PoC contains errors and redundant or unnecessarily-complex code that does not appear to be related to a demonstration of the issue. As of 20140502, CVE is not aware of any public comment by the original researcher"
    },
    {
      "lang": "es",
      "value": "** DISPUTADA ** La extensi\u00f3n openssl en Ruby 2.x no mantiene correctamente el estado de la memoria de procesos despu\u00e9s de la reapertura de un fichero, lo que permite a atacantes remotos falsificar firmas dentro del contexto de una secuencia de comandos Ruby que intenta la verificaci\u00f3n de firmas despu\u00e9s de realizar cierta secuencia de operaciones del sistema de ficheros. NOTA: este problema ha sido disputado por el equipo OpenSSL de Ruby y terceras partes, que dicen que la demostraci\u00f3n PoC original contiene errores y c\u00f3digo redundante o innecesariamente complejo que no parece estar relacionado con una demostraci\u00f3n del problema. Desde 02052014, CVE no est\u00e1 consciente de ning\u00fan comentario p\u00fablico por parte del investigador original."
    }
  ],
  "id": "CVE-2014-2734",
  "lastModified": "2026-05-06T22:30:45.220",
  "metrics": {
    "cvssMetricV2": [
      {
        "acInsufInfo": false,
        "baseSeverity": "MEDIUM",
        "cvssData": {
          "accessComplexity": "MEDIUM",
          "accessVector": "NETWORK",
          "authentication": "NONE",
          "availabilityImpact": "NONE",
          "baseScore": 5.8,
          "confidentialityImpact": "PARTIAL",
          "integrityImpact": "PARTIAL",
          "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:N",
          "version": "2.0"
        },
        "exploitabilityScore": 8.6,
        "impactScore": 4.9,
        "obtainAllPrivilege": false,
        "obtainOtherPrivilege": false,
        "obtainUserPrivilege": false,
        "source": "nvd@nist.gov",
        "type": "Primary",
        "userInteractionRequired": false
      }
    ]
  },
  "published": "2014-04-24T23:55:05.707",
  "references": [
    {
      "source": "cve@mitre.org",
      "tags": [
        "Exploit"
      ],
      "url": "http://packetstormsecurity.com/files/126218/Ruby-OpenSSL-Private-Key-Spoofing.html"
    },
    {
      "source": "cve@mitre.org",
      "tags": [
        "Exploit"
      ],
      "url": "http://seclists.org/fulldisclosure/2014/Apr/231"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://seclists.org/fulldisclosure/2014/May/13"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://www.osvdb.org/106006"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://www.securityfocus.com/bid/66956"
    },
    {
      "source": "cve@mitre.org",
      "url": "https://gist.github.com/10446549"
    },
    {
      "source": "cve@mitre.org",
      "url": "https://gist.github.com/emboss/91696b56cd227c8a0c13"
    },
    {
      "source": "cve@mitre.org",
      "url": "https://github.com/adrienthebo/cve-2014-2734/"
    },
    {
      "source": "cve@mitre.org",
      "url": "https://news.ycombinator.com/item?id=7601973"
    },
    {
      "source": "cve@mitre.org",
      "url": "https://www.ruby-lang.org/en/news/2014/05/09/dispute-of-vulnerability-cve-2014-2734/"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Exploit"
      ],
      "url": "http://packetstormsecurity.com/files/126218/Ruby-OpenSSL-Private-Key-Spoofing.html"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Exploit"
      ],
      "url": "http://seclists.org/fulldisclosure/2014/Apr/231"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://seclists.org/fulldisclosure/2014/May/13"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://www.osvdb.org/106006"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://www.securityfocus.com/bid/66956"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "https://gist.github.com/10446549"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "https://gist.github.com/emboss/91696b56cd227c8a0c13"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "https://github.com/adrienthebo/cve-2014-2734/"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "https://news.ycombinator.com/item?id=7601973"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "https://www.ruby-lang.org/en/news/2014/05/09/dispute-of-vulnerability-cve-2014-2734/"
    }
  ],
  "sourceIdentifier": "cve@mitre.org",
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "description": [
        {
          "lang": "en",
          "value": "CWE-399"
        }
      ],
      "source": "nvd@nist.gov",
      "type": "Primary"
    }
  ]
}


Log in or create an account to share your comment.




Tags
Taxonomy of the tags.





Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.

Sightings

Author Source Type Date Other

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or observed by the user.
  • Confirmed: The vulnerability has been validated from an analyst's perspective.
  • Published Proof of Concept: A public proof of concept is available for this vulnerability.
  • Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
  • Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
  • Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
  • Not confirmed: The user expressed doubt about the validity of the vulnerability.
  • Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.


Detection rules are retrieved from Rulezet.