sp2ip reports:
If attacker-supplied data is provided to the Ruby regex
compiler, it is possible to extract arbitrary heap data
relative to the start of the text, including pointers and
sensitive strings.
OS | Version | Architecture | Package | Version | Filename |
---|---|---|---|---|---|
FreeBSD | any | noarch | ruby | =Â 3.1.0,1 | UNKNOWN |
FreeBSD | any | noarch | ruby | <Â 3.1.5,1 | UNKNOWN |
FreeBSD | any | noarch | ruby31 | =Â 3.1.0,1 | UNKNOWN |
FreeBSD | any | noarch | ruby31 | <Â 3.1.5,1 | UNKNOWN |
FreeBSD | any | noarch | ruby32 | =Â 3.2.0,1 | UNKNOWN |
FreeBSD | any | noarch | ruby32 | <Â 3.2.4,1 | UNKNOWN |
FreeBSD | any | noarch | ruby33 | =Â 3.3.0,1 | UNKNOWN |
FreeBSD | any | noarch | ruby33 | <Â 3.3.1,1 | UNKNOWN |