Every CVESearch/Get API key

CVE-2012-4522

The rb_get_path_check function in file.c in Ruby 1.9.3 before patchlevel 286 and Ruby 2.0.0...

5.0 Medium

CVE-2012-4522 is a medium vulnerability (CVSS 5.0) in Ruby-lang Ruby, published November 24, 2012. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 2.20%, the 82nd percentile. No source names a fixed version.

What does this mean?
Severity
5.0 MediumCVSS 2.0, NVD
Exploit chance
2.20%EPSS, 82nd percentile
Exploitation
None knownNot on CISA’s or ENISA’s lists
Fixed in
No fix listedNo source names one

Description

The rb_get_path_check function in file.c in Ruby 1.9.3 before patchlevel 286 and Ruby 2.0.0 before r37163 allows context-dependent attackers to create files in unexpected locations or with unexpected names via a NUL byte in a file path.

Exploit likelihood

2.20%Up 1.0 points since Feb 4, 2022
90%50%10%1%

Affected products

Affected packages

Affected packages
PackageAffectedFixed
ruby1.9.1
Debian:6.0
From an advisory covering 6 CVEs
before 1.9.2.0-2+deb6u4, plus listed versions
1.9.2.0-21.9.2.0-2+armhf
1.9.2.0-2+deb6u4
ruby
Red Hat:enterprise_linux:5::client_workstation
From an advisory covering 2 CVEs
before 0:1.8.5-27.el5
0:1.8.5-27.el5
ruby-debuginfo
Red Hat:enterprise_linux:5::client_workstation
From an advisory covering 2 CVEs
before 0:1.8.5-27.el5
0:1.8.5-27.el5
ruby-devel
Red Hat:enterprise_linux:5::client_workstation
From an advisory covering 2 CVEs
before 0:1.8.5-27.el5
0:1.8.5-27.el5
ruby-mode
Red Hat:enterprise_linux:5::client_workstation
From an advisory covering 2 CVEs
before 0:1.8.5-27.el5
0:1.8.5-27.el5
ruby
Red Hat:enterprise_linux:5::client
From an advisory covering 2 CVEs
before 0:1.8.5-27.el5
0:1.8.5-27.el5
ruby-debuginfo
Red Hat:enterprise_linux:5::client
From an advisory covering 2 CVEs
before 0:1.8.5-27.el5
0:1.8.5-27.el5
ruby-docs
Red Hat:enterprise_linux:5::client
From an advisory covering 2 CVEs
before 0:1.8.5-27.el5
0:1.8.5-27.el5
ruby-irb
Red Hat:enterprise_linux:5::client
From an advisory covering 2 CVEs
before 0:1.8.5-27.el5
0:1.8.5-27.el5
ruby-libs
Red Hat:enterprise_linux:5::client
From an advisory covering 2 CVEs
before 0:1.8.5-27.el5
0:1.8.5-27.el5
Show 82 moreShow less
Affected packages
PackageAffectedFixed
ruby-rdoc
Red Hat:enterprise_linux:5::client
From an advisory covering 2 CVEs
before 0:1.8.5-27.el5
0:1.8.5-27.el5
ruby-ri
Red Hat:enterprise_linux:5::client
From an advisory covering 2 CVEs
before 0:1.8.5-27.el5
0:1.8.5-27.el5
ruby-tcltk
Red Hat:enterprise_linux:5::client
From an advisory covering 2 CVEs
before 0:1.8.5-27.el5
0:1.8.5-27.el5
ruby
Red Hat:enterprise_linux:5::server
From an advisory covering 2 CVEs
before 0:1.8.5-27.el5
0:1.8.5-27.el5
ruby-debuginfo
Red Hat:enterprise_linux:5::server
From an advisory covering 2 CVEs
before 0:1.8.5-27.el5
0:1.8.5-27.el5
ruby-devel
Red Hat:enterprise_linux:5::server
From an advisory covering 2 CVEs
before 0:1.8.5-27.el5
0:1.8.5-27.el5
ruby-docs
Red Hat:enterprise_linux:5::server
From an advisory covering 2 CVEs
before 0:1.8.5-27.el5
0:1.8.5-27.el5
ruby-irb
Red Hat:enterprise_linux:5::server
From an advisory covering 2 CVEs
before 0:1.8.5-27.el5
0:1.8.5-27.el5
ruby-libs
Red Hat:enterprise_linux:5::server
From an advisory covering 2 CVEs
before 0:1.8.5-27.el5
0:1.8.5-27.el5
ruby-mode
Red Hat:enterprise_linux:5::server
From an advisory covering 2 CVEs
before 0:1.8.5-27.el5
0:1.8.5-27.el5
ruby-rdoc
Red Hat:enterprise_linux:5::server
From an advisory covering 2 CVEs
before 0:1.8.5-27.el5
0:1.8.5-27.el5
ruby-ri
Red Hat:enterprise_linux:5::server
From an advisory covering 2 CVEs
before 0:1.8.5-27.el5
0:1.8.5-27.el5
ruby-tcltk
Red Hat:enterprise_linux:5::server
From an advisory covering 2 CVEs
before 0:1.8.5-27.el5
0:1.8.5-27.el5
graphviz
Red Hat:openshift:1::el6
From an advisory covering 15 CVEs
before 0:2.26.0-10.el6
0:2.26.0-10.el6
graphviz-debuginfo
Red Hat:openshift:1::el6
From an advisory covering 15 CVEs
before 0:2.26.0-10.el6
0:2.26.0-10.el6
graphviz-devel
Red Hat:openshift:1::el6
From an advisory covering 15 CVEs
before 0:2.26.0-10.el6
0:2.26.0-10.el6
graphviz-doc
Red Hat:openshift:1::el6
From an advisory covering 15 CVEs
before 0:2.26.0-10.el6
0:2.26.0-10.el6
graphviz-gd
Red Hat:openshift:1::el6
From an advisory covering 15 CVEs
before 0:2.26.0-10.el6
0:2.26.0-10.el6
graphviz-ruby
Red Hat:openshift:1::el6
From an advisory covering 15 CVEs
before 0:2.26.0-10.el6
0:2.26.0-10.el6
openshift-console
Red Hat:openshift:1::el6
From an advisory covering 15 CVEs
before 0:0.0.16-1.el6op
0:0.0.16-1.el6op
openshift-origin-broker
Red Hat:openshift:1::el6
From an advisory covering 15 CVEs
before 0:1.0.11-1.el6op
0:1.0.11-1.el6op
openshift-origin-broker-util
Red Hat:openshift:1::el6
From an advisory covering 15 CVEs
before 0:1.0.15-1.el6op
0:1.0.15-1.el6op
ruby193-ruby
Red Hat:openshift:1::el6
From an advisory covering 15 CVEs
before 0:1.9.3.327-25.el6
0:1.9.3.327-25.el6
ruby193-ruby-debuginfo
Red Hat:openshift:1::el6
From an advisory covering 15 CVEs
before 0:1.9.3.327-25.el6
0:1.9.3.327-25.el6
ruby193-ruby-devel
Red Hat:openshift:1::el6
From an advisory covering 15 CVEs
before 0:1.9.3.327-25.el6
0:1.9.3.327-25.el6
ruby193-ruby-doc
Red Hat:openshift:1::el6
From an advisory covering 15 CVEs
before 0:1.9.3.327-25.el6
0:1.9.3.327-25.el6
ruby193-ruby-irb
Red Hat:openshift:1::el6
From an advisory covering 15 CVEs
before 0:1.9.3.327-25.el6
0:1.9.3.327-25.el6
ruby193-ruby-libs
Red Hat:openshift:1::el6
From an advisory covering 15 CVEs
before 0:1.9.3.327-25.el6
0:1.9.3.327-25.el6
ruby193-ruby-tcltk
Red Hat:openshift:1::el6
From an advisory covering 15 CVEs
before 0:1.9.3.327-25.el6
0:1.9.3.327-25.el6
ruby193-rubygem-actionpack
Red Hat:openshift:1::el6
From an advisory covering 15 CVEs
before 1:3.2.8-3.el6
1:3.2.8-3.el6
ruby193-rubygem-actionpack-doc
Red Hat:openshift:1::el6
From an advisory covering 15 CVEs
before 1:3.2.8-3.el6
1:3.2.8-3.el6
ruby193-rubygem-activemodel
Red Hat:openshift:1::el6
From an advisory covering 15 CVEs
before 0:3.2.8-2.el6
0:3.2.8-2.el6
ruby193-rubygem-activemodel-doc
Red Hat:openshift:1::el6
From an advisory covering 15 CVEs
before 0:3.2.8-2.el6
0:3.2.8-2.el6
ruby193-rubygem-activerecord
Red Hat:openshift:1::el6
From an advisory covering 15 CVEs
before 1:3.2.8-3.el6
1:3.2.8-3.el6
ruby193-rubygem-activerecord-doc
Red Hat:openshift:1::el6
From an advisory covering 15 CVEs
before 1:3.2.8-3.el6
1:3.2.8-3.el6
ruby193-rubygem-bigdecimal
Red Hat:openshift:1::el6
From an advisory covering 15 CVEs
before 0:1.1.0-25.el6
0:1.1.0-25.el6
ruby193-rubygem-io-console
Red Hat:openshift:1::el6
From an advisory covering 15 CVEs
before 0:0.3-25.el6
0:0.3-25.el6
ruby193-rubygem-json
Red Hat:openshift:1::el6
From an advisory covering 15 CVEs
before 0:1.5.4-25.el6
0:1.5.4-25.el6
ruby193-rubygem-minitest
Red Hat:openshift:1::el6
From an advisory covering 15 CVEs
before 0:2.5.1-25.el6
0:2.5.1-25.el6
ruby193-rubygem-railties
Red Hat:openshift:1::el6
From an advisory covering 15 CVEs
before 0:3.2.8-2.el6
0:3.2.8-2.el6
ruby193-rubygem-railties-doc
Red Hat:openshift:1::el6
From an advisory covering 15 CVEs
before 0:3.2.8-2.el6
0:3.2.8-2.el6
ruby193-rubygem-rake
Red Hat:openshift:1::el6
From an advisory covering 15 CVEs
before 0:0.9.2.2-25.el6
0:0.9.2.2-25.el6
ruby193-rubygem-rdoc
Red Hat:openshift:1::el6
From an advisory covering 15 CVEs
before 0:3.9.4-25.el6
0:3.9.4-25.el6
ruby193-rubygem-ruby_parser
Red Hat:openshift:1::el6
From an advisory covering 15 CVEs
before 0:2.3.1-3.el6op
0:2.3.1-3.el6op
ruby193-rubygem-ruby_parser-doc
Red Hat:openshift:1::el6
From an advisory covering 15 CVEs
before 0:2.3.1-3.el6op
0:2.3.1-3.el6op
ruby193-rubygems
Red Hat:openshift:1::el6
From an advisory covering 15 CVEs
before 0:1.8.23-25.el6
0:1.8.23-25.el6
ruby193-rubygems-devel
Red Hat:openshift:1::el6
From an advisory covering 15 CVEs
before 0:1.8.23-25.el6
0:1.8.23-25.el6
rubygem-actionpack
Red Hat:openshift:1::el6
From an advisory covering 15 CVEs
before 1:3.0.13-4.el6op
1:3.0.13-4.el6op
rubygem-activemodel
Red Hat:openshift:1::el6
From an advisory covering 15 CVEs
before 0:3.0.13-3.el6op
0:3.0.13-3.el6op
rubygem-activemodel-doc
Red Hat:openshift:1::el6
From an advisory covering 15 CVEs
before 0:3.0.13-3.el6op
0:3.0.13-3.el6op
rubygem-activerecord
Red Hat:openshift:1::el6
From an advisory covering 15 CVEs
before 1:3.0.13-5.el6op
1:3.0.13-5.el6op
rubygem-bson
Red Hat:openshift:1::el6
From an advisory covering 15 CVEs
before 0:1.8.1-2.el6op
0:1.8.1-2.el6op
rubygem-mongo
Red Hat:openshift:1::el6
From an advisory covering 15 CVEs
before 0:1.8.1-2.el6op
0:1.8.1-2.el6op
rubygem-mongo-doc
Red Hat:openshift:1::el6
From an advisory covering 15 CVEs
before 0:1.8.1-2.el6op
0:1.8.1-2.el6op
rubygem-openshift-origin-auth-remote-user
Red Hat:openshift:1::el6
From an advisory covering 15 CVEs
before 0:1.0.5-1.el6op
0:1.0.5-1.el6op
rubygem-openshift-origin-console
Red Hat:openshift:1::el6
From an advisory covering 15 CVEs
before 0:1.0.10-1.el6op
0:1.0.10-1.el6op
rubygem-openshift-origin-console-doc
Red Hat:openshift:1::el6
From an advisory covering 15 CVEs
before 0:1.0.10-1.el6op
0:1.0.10-1.el6op
rubygem-openshift-origin-controller
Red Hat:openshift:1::el6
From an advisory covering 15 CVEs
before 0:1.0.12-1.el6op
0:1.0.12-1.el6op
rubygem-ruby_parser
Red Hat:openshift:1::el6
From an advisory covering 15 CVEs
before 0:2.0.4-6.el6op
0:2.0.4-6.el6op
rubygem-ruby_parser-doc
Red Hat:openshift:1::el6
From an advisory covering 15 CVEs
before 0:2.0.4-6.el6op
0:2.0.4-6.el6op
openshift-origin-cartridge-jbosseap-6.0
Red Hat:openshift:1::el6
From an advisory covering 15 CVEs
before 0:1.0.4-1.el6op
0:1.0.4-1.el6op
openshift-origin-cartridge-cron-1.4
Red Hat:openshift:1::el6
From an advisory covering 15 CVEs
before 0:1.0.3-1.el6op
0:1.0.3-1.el6op
openshift-origin-cartridge-diy-0.1
Red Hat:openshift:1::el6
From an advisory covering 15 CVEs
before 0:1.0.3-1.el6op
0:1.0.3-1.el6op
openshift-origin-cartridge-haproxy-1.4
Red Hat:openshift:1::el6
From an advisory covering 15 CVEs
before 0:1.0.4-1.el6op
0:1.0.4-1.el6op
openshift-origin-cartridge-jbossews-1.0
Red Hat:openshift:1::el6
From an advisory covering 15 CVEs
before 0:1.0.13-1.el6op
0:1.0.13-1.el6op
openshift-origin-cartridge-jenkins-1.4
Red Hat:openshift:1::el6
From an advisory covering 15 CVEs
before 0:1.0.2-1.el6op
0:1.0.2-1.el6op
openshift-origin-cartridge-jenkins-client-1.4
Red Hat:openshift:1::el6
From an advisory covering 15 CVEs
before 0:1.0.2-1.el6op
0:1.0.2-1.el6op
openshift-origin-cartridge-mysql-5.1
Red Hat:openshift:1::el6
From an advisory covering 15 CVEs
before 0:1.0.5-1.el6op
0:1.0.5-1.el6op
openshift-origin-cartridge-perl-5.10
Red Hat:openshift:1::el6
From an advisory covering 15 CVEs
before 0:1.0.3-1.el6op
0:1.0.3-1.el6op
openshift-origin-cartridge-php-5.3
Red Hat:openshift:1::el6
From an advisory covering 15 CVEs
before 0:1.0.5-1.el6op
0:1.0.5-1.el6op
openshift-origin-cartridge-postgresql-8.4
Red Hat:openshift:1::el6
From an advisory covering 15 CVEs
before 0:1.0.3-2.el6op
0:1.0.3-2.el6op
openshift-origin-cartridge-ruby-1.8
Red Hat:openshift:1::el6
From an advisory covering 15 CVEs
before 0:1.0.7-1.el6op
0:1.0.7-1.el6op
openshift-origin-cartridge-ruby-1.9-scl
Red Hat:openshift:1::el6
From an advisory covering 15 CVEs
before 0:1.0.8-1.el6op
0:1.0.8-1.el6op
openshift-origin-msg-node-mcollective
Red Hat:openshift:1::el6
From an advisory covering 15 CVEs
before 0:1.0.3-1.el6op
0:1.0.3-1.el6op
php
Red Hat:openshift:1::el6
From an advisory covering 15 CVEs
before 0:5.3.3-22.el6
0:5.3.3-22.el6
php-bcmath
Red Hat:openshift:1::el6
From an advisory covering 15 CVEs
before 0:5.3.3-22.el6
0:5.3.3-22.el6
php-debuginfo
Red Hat:openshift:1::el6
From an advisory covering 15 CVEs
before 0:5.3.3-22.el6
0:5.3.3-22.el6
php-devel
Red Hat:openshift:1::el6
From an advisory covering 15 CVEs
before 0:5.3.3-22.el6
0:5.3.3-22.el6
php-imap
Red Hat:openshift:1::el6
From an advisory covering 15 CVEs
before 0:5.3.3-22.el6
0:5.3.3-22.el6
php-mbstring
Red Hat:openshift:1::el6
From an advisory covering 15 CVEs
before 0:5.3.3-22.el6
0:5.3.3-22.el6
php-process
Red Hat:openshift:1::el6
From an advisory covering 15 CVEs
before 0:5.3.3-22.el6
0:5.3.3-22.el6
rubygem-openshift-origin-node
Red Hat:openshift:1::el6
From an advisory covering 15 CVEs
before 0:1.0.11-1.el6op
0:1.0.11-1.el6op

What each source reports

NVD Score used5.0

The rb_get_path_check function in file.c in Ruby 1.9.3 before patchlevel 286 and Ruby 2.0.0 before r37163 allows context-dependent attackers to create files in unexpected locations or with unexpected names via a NUL byte in a file path.

Record
CVE-2012-4522
CVSS 2.0
5.0 MediumAV:N/AC:L/Au:N/C:N/I:P/A:N
Weakness
CWE-264
Updated
2026-11-02
CVE ListNo score

The rb_get_path_check function in file.c in Ruby 1.9.3 before patchlevel 286 and Ruby 2.0.0 before r37163 allows context-dependent attackers to create files in unexpected locations or with unexpected names via a NUL byte in a file path.

Record
CVE-2012-4522
Updated
2026-11-02
EUVDEUVD-2012-4450No score

The rb_get_path_check function in file.c in Ruby 1.9.3 before patchlevel 286 and Ruby 2.0.0 before r37163 allows context-dependent attackers to create files in unexpected locations or with unexpected names via a NUL byte in a file path.

Record
EUVD-2012-4450
Updated
2026-11-03
GitHub AdvisoriesGHSA-6mch-f8jc-rpmrNo score

The rb_get_path_check function in file.c in Ruby 1.9.3 before patchlevel 286 and Ruby 2.0.0...

The rb_get_path_check function in file.c in Ruby 1.9.3 before patchlevel 286 and Ruby 2.0.0 before r37163 allows context-dependent attackers to create files in unexpected locations or with unexpected names via a NUL byte in a file path.

Record
GHSA-6mch-f8jc-rpmr
Updated
2026-11-02

History

History
RecordedChangedSources
affected, facts
aliasesEUVD
first indexedCVE List, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

References

Show 86 moreShow less
PagesAll vulnerabilitiesBrowseDocsSourcesGuideGet API key
MoveEnter Open