Read the docs
TI-2015-01666 Aliases CVE-2015-1855GHSA-4x8v-74xf-h4g3

Improper input validation in Ruby

Priority LOW 32CWE-20Published · Updated

Key facts

Attack vector
Network
Privileges required
None
User interaction
None
Attack complexity
High
Impact type
—
Confidentiality · integrity · availability
None · High · None
Fix status
Partial Red Hat: 7 without a fix

Attack profile from CVSS 3.1 · NVD. Fix status from CNA and Red Hat.

Summary

verify_certificate_identity in the OpenSSL extension in Ruby before 2.0.0 patchlevel 645, 2.1.x before 2.1.6, and 2.2.x before 2.2.2 does not properly validate hostnames, which allows remote attackers to spoof servers via vectors related to (1) multiple wildcards, (1) wildcards in IDNA names, (3) case sensitivity, and (4) non-ASCII characters.

Why it matters now

EPSS 0.02815 86th percentileScored 2026-11-07
Fix Partial Ruby (Ruby): 2.1.6Red Hat: 7 without a fix

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

VendorProductAffected versionsFixed inStatusSource
rubyRubybefore 2.0.0 patchlevel 645; 2.1 to before 2.1.6; and 2.2.x before 2.2.22.1.6Patch availableCNA
  • Ruby Vendorruby Affected before 2.0.0 patchlevel 645; 2.1 to before 2.1.6; and 2.2.x before 2.2.2 Fixed in 2.1.6 Patch available CNA

CPE configurations NVD · 18

CPEVersionsRoleVendor
cpe:2.3:a:ruby-lang:ruby:*:*:*:*:*:*:*:*2.1.0 to before 2.1.6; 2.2.0 to before 2.2.2Vulnerableruby
cpe:2.3:a:ruby-lang:ruby:2.0.0:-:*:*:*:*:*:*2.0.0Vulnerableruby
cpe:2.3:a:ruby-lang:ruby:2.0.0:p0:*:*:*:*:*:*2.0.0 p0Vulnerableruby
cpe:2.3:a:ruby-lang:ruby:2.0.0:p195:*:*:*:*:*:*2.0.0 p195Vulnerableruby
cpe:2.3:a:ruby-lang:ruby:2.0.0:p247:*:*:*:*:*:*2.0.0 p247Vulnerableruby
cpe:2.3:a:ruby-lang:ruby:2.0.0:p353:*:*:*:*:*:*2.0.0 p353Vulnerableruby
cpe:2.3:a:ruby-lang:ruby:2.0.0:p451:*:*:*:*:*:*2.0.0 p451Vulnerableruby
cpe:2.3:a:ruby-lang:ruby:2.0.0:p481:*:*:*:*:*:*2.0.0 p481Vulnerableruby
cpe:2.3:a:ruby-lang:ruby:2.0.0:p576:*:*:*:*:*:*2.0.0 p576Vulnerableruby
cpe:2.3:a:ruby-lang:ruby:2.0.0:p594:*:*:*:*:*:*2.0.0 p594Vulnerableruby
  • cpe:2.3:a:ruby-lang:ruby:*:*:*:*:*:*:*:* Versions 2.1.0 to before 2.1.6; 2.2.0 to before 2.2.2 Vulnerable ·ruby
  • cpe:2.3:a:ruby-lang:ruby:2.0.0:-:*:*:*:*:*:* Versions 2.0.0 Vulnerable ·ruby
  • cpe:2.3:a:ruby-lang:ruby:2.0.0:p0:*:*:*:*:*:* Versions 2.0.0 p0 Vulnerable ·ruby
  • cpe:2.3:a:ruby-lang:ruby:2.0.0:p195:*:*:*:*:*:* Versions 2.0.0 p195 Vulnerable ·ruby
  • cpe:2.3:a:ruby-lang:ruby:2.0.0:p247:*:*:*:*:*:* Versions 2.0.0 p247 Vulnerable ·ruby
  • cpe:2.3:a:ruby-lang:ruby:2.0.0:p353:*:*:*:*:*:* Versions 2.0.0 p353 Vulnerable ·ruby
  • cpe:2.3:a:ruby-lang:ruby:2.0.0:p451:*:*:*:*:*:* Versions 2.0.0 p451 Vulnerable ·ruby
  • cpe:2.3:a:ruby-lang:ruby:2.0.0:p481:*:*:*:*:*:* Versions 2.0.0 p481 Vulnerable ·ruby
  • cpe:2.3:a:ruby-lang:ruby:2.0.0:p576:*:*:*:*:*:* Versions 2.0.0 p576 Vulnerable ·ruby
  • cpe:2.3:a:ruby-lang:ruby:2.0.0:p594:*:*:*:*:*:* Versions 2.0.0 p594 Vulnerable ·ruby
Show 8 more CPE
CPEVersionsRoleVendor
cpe:2.3:a:ruby-lang:ruby:2.0.0:p598:*:*:*:*:*:*2.0.0 p598Vulnerableruby
cpe:2.3:a:ruby-lang:ruby:2.0.0:p643:*:*:*:*:*:*2.0.0 p643Vulnerableruby
cpe:2.3:a:ruby-lang:trunk:*:*:*:*:*:*:*:*before 50292Vulnerableruby
cpe:2.3:o:debian:debian_linux:7.0:*:*:*:*:*:*:*7.0VulnerableDebian
cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*8.0VulnerableDebian
cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*9.0VulnerableDebian
cpe:2.3:a:puppet:puppet_agent:1.0.0:*:*:*:*:*:*:*1.0.0VulnerablePuppet
cpe:2.3:a:puppet:puppet_enterprise:*:*:*:*:*:*:*:*3.0.0 to before 3.8.0VulnerablePuppet
  • cpe:2.3:a:ruby-lang:ruby:2.0.0:p598:*:*:*:*:*:* Versions 2.0.0 p598 Vulnerable ·ruby
  • cpe:2.3:a:ruby-lang:ruby:2.0.0:p643:*:*:*:*:*:* Versions 2.0.0 p643 Vulnerable ·ruby
  • cpe:2.3:a:ruby-lang:trunk:*:*:*:*:*:*:*:* Versions before 50292 Vulnerable ·ruby
  • cpe:2.3:o:debian:debian_linux:7.0:*:*:*:*:*:*:* Versions 7.0 Vulnerable ·Debian
  • cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:* Versions 8.0 Vulnerable ·Debian
  • cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:* Versions 9.0 Vulnerable ·Debian
  • cpe:2.3:a:puppet:puppet_agent:1.0.0:*:*:*:*:*:*:* Versions 1.0.0 Vulnerable ·Puppet
  • cpe:2.3:a:puppet:puppet_enterprise:*:*:*:*:*:*:*:* Versions 3.0.0 to before 3.8.0 Vulnerable ·Puppet

Remediation

  • Fix · CNA Ruby (Ruby) Fixed in 2.1.6

Vendor assessments

Red Hat

Red Hat rating: Moderate. Red Hat's page for this CVE →

ProductStatusPlan or fix
CloudForms Management Engine 5AffectedNo fix yet
Red Hat Enterprise Linux 5AffectedNo fix planned: Will not fix
Red Hat Enterprise Linux 6AffectedNo fix planned: Will not fix
Red Hat Enterprise Linux 7AffectedNo fix planned: Will not fix
Red Hat OpenStack Platform 4AffectedNo fix planned: Will not fix
Red Hat Software CollectionsAffectedNo fix planned: Will not fix
Red Hat Subscription Asset ManagerAffectedNo fix yet
Not affected: 1 product
  • Red Hat Software Collections

Timeline

  1. 2026-10-02 Threatist record created from CVE-2015-1855
  2. 2026-10-03 Alias added: GHSA-4x8v-74xf-h4g3

References

Advisory 6

  • TI-2026-71508 Integer overflow in GitLab allows code execution on the server KEVCVSS 3.1CRITICAL 10.0
  • TI-2017-12709 Ruby before 2.4.3 allows Net::FTP command injection. CVSS 3.0HIGH 8.8
  • TI-2008-03501 Algorithmic complexity vulnerability in the WEBrick::HTTPUtils.split_header_value… CVSS 2.0HIGH 7.8
  • TI-2021-09891 In Ruby through 3.0 on Windows, a remote attacker can submit a crafted path when a Web… CVSS 3.1HIGH 7.5
  • TI-2013-03637 Heap-based buffer overflow in Ruby 1.8, 1.9 before 1.9.3-p484, 2.0 before 2.0.0-p353, 2.1… CVSS 2.0MEDIUM 6.8
  • TI-2018-11751 An issue was discovered in the OpenSSL library in Ruby before 2.3.8, 2.4.x before 2.4.5… CVSS 3.0CRITICAL 9.8
See all 92 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences