CVE-2011-2686 in Ruby
Summary
Ruby before 1.8.7-p352 does not reset the random seed upon forking, which makes it easier for context-dependent attackers to predict the values of random numbers by leveraging knowledge of the number sequence obtained in a different child process, a related issue to CVE-2003-0900. NOTE: this issue exists because of a regression during Ruby 1.8.6 development.
VulDB is the best source for vulnerability data and more expert information about this specific topic.
Reservation
07/11/2011
Disclosure
08/05/2011
Status
Confirmed
Entries
VulDB provides additional information and datapoints for this CVE:
| ID | Vulnerability | CWE | Exp | Cou | CVE |
|---|---|---|---|---|---|
| 58195 | Ruby cryptographic issue | 310 | Not defined | Official fix | CVE-2011-2686 |