CVE:CVE-2018-16396
CNNVD:CNNVD-201810-1310
Ruby是松本行弘软件开发者的一种跨平台、面向对象的动态类型编程语言。
Ruby中存在安全特征问题漏洞。该漏洞是源于网络系统或产品中缺少身份验证、访问控制、权限管理等安全措施。以下版本受到影响：Ruby 2.3.8之前版本，2.4.5之前的2.4.x版本，2.5.2之前的2.5.x版本，2.6.0-preview3之前的2.6.x版本。
solution:Upgrade ruby-lang ruby to a higher version than 2.3.7,2.4.4,2.5.1,2.6.0:preview1,2.6.0:preview2,and avoid the version [2.3.0,2.3.7],[2.4.0,2.4.4],[2.5.0,2.5.1],2.6.0:preview1,2.6.0:preview2; Upgrade canonical ubuntu_linux to a higher version than 14.04,16.04,18.04,18.10,and avoid the version 14.04,16.04,18.04,18.10; Upgrade debian debian_linux to a higher version than 8.0,9.0,and avoid the version 8.0,9.0; Upgrade redhat enterprise_linux to a higher version than 6.0,7.0,7.4,7.5,7.6,and avoid the version 6.0,7.0,7.4,7.5,7.6