UBUNTU-CVE-2020-8161

Details

A directory traversal vulnerability exists in rack < 2.2.0 that allows an attacker perform directory traversal vulnerability in the Rack::Directory app that is bundled with Rack which could result in information disclosure.

Affected Packages

Ubuntu:16.04:LTSruby-rack

Affected versions:

1.5.2-41.6.4-21.6.4-31.6.4-3ubuntu0.1

Fixed in:

1.6.4-3ubuntu0.2

Ubuntu:18.04:LTSruby-rack

Affected versions:

1.6.4-41.6.4-4ubuntu0.1

Fixed in:

1.6.4-4ubuntu0.2

Ubuntu:20.04:LTSruby-rack

Affected versions:

2.0.6-32.0.7-2

Fixed in:

2.0.7-2ubuntu0.1

References

REPORThttps://github.com/rack/rack/commit/dddb7ad18ed79ca6ab06ccc417a169fde451246e REPORThttps://groups.google.com/forum/#!msg/rubyonrails-security/IOO1vNZTzPA/Ylzi1UYLAAAJ REPORThttps://ubuntu.com/security/CVE-2020-8161 REPORThttps://ubuntu.com/security/notices/USN-4561-1 REPORThttps://ubuntu.com/security/notices/USN-4561-2 REPORThttps://www.cve.org/CVERecord?id=CVE-2020-8161

UBUNTU-CVE-2020-8161

Details

Affected Packages

References

CVSS Analysis

Related

Ecosystems

Timeline