View at Official suse advisory, NVD, CVE.org · CVE detail
Freshness: upstream tracker timestamp is available; use API updated time as primary recency signal.
CVE-2017-17790 severity moderate: SUSE including 24 source package names (libruby2_1-2_1-2.1.9-19.3.2, ruby, …), 198 product×package rows across 75 product lines (HPE Helion OpenStack 8, Image SLES12-SP5-Azure-BYOS, … (75 product lines)): Fixed 140, Known Not Affected 54, Will Not Fix 4.
The lazy_initialize function in lib/resolv.rb in Ruby through 2.4.3 uses Kernel#open, which might allow Command Injection attacks, as demonstrated by a Resolv::Hosts::new argument beginning with a '|' character, a different vulnerability than CVE-2017-17405. NOTE: situations with untrusted input may be highly unlikely.