CVE:CVE-2017-0903
CNNVD:CNNVD-201710-304
RubyGems是RubyGems组织的一款Ruby程序包管理器，它主要用于发布和管理Ruby程序包。
RubyGems 2.0.0版本至2.6.13版本中存在代码执行漏洞。远程攻击者可借助特制的序列化对象利用该漏洞执行代码。
solution:Upgrade rubygems rubygems to a higher version than 2.0.0,2.0.0:preview2,2.0.0:preview2.1,2.0.0:preview2.2,2.0.0:rc1,2.0.0:rc2,2.0.1,2.0.2,2.0.3,2.0.4,2.0.5,2.0.6,2.0.7,2.0.8,2.0.9,2.0.10,2.0.11,2.0.12,2.0.13,2.0.14,2.0.15,2.0.16,2.0.17,2.1.0,2.1.0.rc.1,2.1.0.rc.2,2.1.1,2.1.2,2.1.3,2.1.4,2.1.5,2.1.6,2.1.7,2.1.8,2.1.9,2.1.10,2.1.11,2.2.0,2.2.0.preiew.1,2.2.0.rc.1,2.2.1,2.2.2,2.2.3,2.2.4,2.2.5,2.3.0,2.4.0,2.4.1,2.4.2,2.4.3,2.4.4,2.4.5,2.4.6,2.4.7,2.4.8,2.5.0,2.5.1,2.5.2,2.6.0,2.6.1,2.6.2,2.6.3,2.6.4,2.6.5,2.6.6,2.6.7,2.6.8,2.6.9,2.6.10,2.6.11,2.6.12,2.6.13,and avoid the version 2.0.0,2.0.0:preview2,2.0.0:preview2.1,2.0.0:preview2.2,2.0.0:rc1,2.0.0:rc2,2.0.1,2.0.2,2.0.3,2.0.4,2.0.5,2.0.6,2.0.7,2.0.8,2.0.9,2.0.10,2.0.11,2.0.12,2.0.13,2.0.14,2.0.15,2.0.16,2.0.17,2.1.0,2.1.0.rc.1,2.1.0.rc.2,2.1.1,2.1.2,2.1.3,2.1.4,2.1.5,2.1.6,2.1.7,2.1.8,2.1.9,2.1.10,2.1.11,2.2.0,2.2.0.preiew.1,2.2.0.rc.1,2.2.1,2.2.2,2.2.3,2.2.4,2.2.5,2.3.0,2.4.0,2.4.1,2.4.2,2.4.3,2.4.4,2.4.5,2.4.6,2.4.7,2.4.8,2.5.0,2.5.1,2.5.2,2.6.0,2.6.1,2.6.2,2.6.3,2.6.4,2.6.5,2.6.6,2.6.7,2.6.8,2.6.9,2.6.10,2.6.11,2.6.12,2.6.13; Upgrade debian debian_linux to a higher version than 8.0,9.0,and avoid the version 8.0,9.0; Upgrade canonical ubuntu_linux to a higher version than 14.04,16.04,17.10,and avoid the version 14.04,16.04,17.10; Upgrade redhat enterprise_linux_desktop to a higher version than 7.0,and avoid the version 7.0; Upgrade redhat enterprise_linux_server to a higher version than 7.0,and avoid the version 7.0; Upgrade redhat enterprise_linux_server_aus to a higher version than 7.4,7.6,and avoid the version 7.4,7.6; Upgrade redhat enterprise_linux_server_eus to a higher version than 7.4,7.5,7.6,and avoid the version 7.4,7.5,7.6; Upgrade redhat enterprise_linux_server_tus to a higher version than 7.4,7.6,and avoid the version 7.4,7.6; Upgrade redhat enterprise_linux_workstation to a higher version than 7.0,and avoid the version 7.0