What is CVE-2018-3759?

CVE-2018-3759 is a low-severity vulnerability in Hackerone Private_address_check Ruby Gem, classified under Concurrent Execution using Shared Resource with Improper Synchronization (Race Condition). CVSS score: 3.7/10. Published 2018-06-13.

How severe is CVE-2018-3759?

Low severity. CVSS v3 base score is 3.7 out of 10.

Vulnerability in Hackerone Private_address_check Ruby Gem

CVE-2018-3759

private_address_check ruby gem before 0.5.0 is vulnerable to a time-of-check time-of-use (TOCTOU) race condition due to the address the socket uses not being checked. DNS entries with a TTL of 0 can trigger this case where the initial reso…

Vulnerability class: Race Condition

EPSS: 0.007 (48.8th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 3.7 (Low). Vector: CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N.

Affected products

Hackerone Private_address_check Ruby Gem — versions 0.5.0
Private_address_check_project Private_address_check

Weakness classification (CWE)

CWE-362 — Concurrent Execution using Shared Resource with Improper Synchronization (Race Condition)

References

support@hackerone.com (Patch, Third Party Advisory, x_refsource_MISC)

Frequently asked questions

What is CVE-2018-3759?: CVE-2018-3759 is a low-severity vulnerability in Hackerone Private_address_check Ruby Gem, classified under Concurrent Execution using Shared Resource with Improper Synchronization (Race Condition). CVSS score: 3.7/10. Published 2018-06-13.
How severe is CVE-2018-3759?: Low severity. CVSS v3 base score is 3.7 out of 10.