Lucene search
GoogleOSV:BIT-RUBY-2024-27282HistoryJun 04, 2024 - 9:56 a.m.
BIT-ruby-2024-27282
2024-06-0409:56:49
Google
osv.dev
8
ruby
3.x
issue
regex compiler
heap data
pointers
sensitive strings
software
AI Score
6.1
Confidence
Low
An issue was discovered in Ruby 3.x through 3.3.0. If attacker-supplied data is provided to the Ruby regex compiler, it is possible to extract arbitrary heap data relative to the start of the text, including pointers and sensitive strings. The fixed versions are 3.0.7, 3.1.5, 3.2.4, and 3.3.1.
Related
freebsd
freebsd
ruby -- Arbitrary memory address read vulnerability with Regex search
2024-04-23 00:00:00
cvelist
cvelist
CVE-2024-27282
1976-01-01 00:00:00
cbl_mariner
cbl_mariner
CVE-2024-27282 affecting package ruby for versions less than 3.1.4-5
2024-06-12 22:23:00
CVE-2024-27282 affecting package ruby for versions less than 3.3.3-1
2024-08-25 15:13:42
nessus
nessus
Photon OS 3.0: Ruby PHSA-2024-3.0-0754
2024-07-24 00:00:00
Photon OS 4.0: Ruby PHSA-2024-4.0-0600
2024-07-23 00:00:00
rubygems
rubygems
Arbitrary memory address read vulnerability with Regex search
2024-04-22 21:00:00
cve
cve
CVE-2024-27282
2024-05-14 15:11:57
osv
osv
CVE-2024-27282
2024-05-14 15:11:57
ruby2.7, ruby3.0, ruby3.1, ruby3.2 vulnerabilities
2024-06-17 14:24:17
Moderate: ruby:3.3 security, bug fix, and enhancement update
2024-06-06 00:00:00
ubuntucve
ubuntucve
CVE-2024-27282
2024-05-14 00:00:00
vulnrichment
vulnrichment
CVE-2024-27282
1976-01-01 00:00:00
alpinelinux
alpinelinux
CVE-2024-27282
2024-05-14 15:11:57
debiancve
debiancve
CVE-2024-27282
2024-05-14 15:11:57
nvd
nvd
CVE-2024-27282
2024-05-14 15:11:57
githubexploit
githubexploit
Exploit for CVE-2024-27282
2024-06-12 23:54:03
redhatcve
redhatcve
CVE-2024-27282
2024-04-24 05:34:31
ubuntu
ubuntu
Ruby vulnerabilities
2024-06-17 00:00:00
cloudfoundry
cloudfoundry
USN-6838-1: Ruby vulnerabilities | Cloud Foundry
2024-07-25 00:00:00
openvas
openvas
Huawei EulerOS: Security Advisory for ruby (EulerOS-SA-2024-2429)
2024-09-12 00:00:00
Ubuntu: Security Advisory (USN-6838-1)
2024-06-18 00:00:00
Huawei EulerOS: Security Advisory for ruby (EulerOS-SA-2024-2452)
2024-09-12 00:00:00
photon
photon
Important Photon OS Security Update - PHSA-2024-5.0-0259
2024-04-29 00:00:00
Important Photon OS Security Update - PHSA-2024-4.0-0600
2024-04-29 00:00:00
Important Photon OS Security Update - PHSA-2024-3.0-0754
2024-04-30 00:00:00
amazon
amazon
Medium: ruby
2024-09-12 18:30:00
almalinux
almalinux
Moderate: ruby:3.1 security, bug fix, and enhancement update
2024-06-03 00:00:00
Moderate: ruby:3.3 security, bug fix, and enhancement update
2024-06-06 00:00:00
Moderate: ruby:3.1 security, bug fix, and enhancement update
2024-06-06 00:00:00
rocky
rocky
ruby:3.3 security, bug fix, and enhancement update
2024-06-14 13:59:30
ruby:3.1 security, bug fix, and enhancement update
2024-06-14 14:00:40
ruby:3.1 security, bug fix, and enhancement update
2024-06-14 13:59:30
redhat
redhat
mageia
mageia
Updated ruby packages fix security vulnerabilities
2024-05-09 05:40:29
debian
debian
[SECURITY] [DSA 5677-1] ruby3.1 security update
2024-05-03 19:47:30
[SECURITY] [DLA 3858-1] ruby2.7 security update
2024-09-02 12:46:22
slackware
slackware
[slackware-security] ruby
2024-04-23 22:33:22
oraclelinux
oraclelinux
ruby:3.3 security, bug fix, and enhancement update
2024-06-07 00:00:00
ruby:3.3 security, bug fix, and enhancement update
2024-06-06 00:00:00
ruby:3.1 security, bug fix, and enhancement update
2024-06-06 00:00:00
fedora
fedora
[SECURITY] Fedora 40 Update: ruby-3.3.1-7.fc40
2024-05-03 01:46:00
[SECURITY] Fedora 39 Update: ruby-3.2.4-182.fc39
2024-05-04 01:33:23
[SECURITY] Fedora 38 Update: ruby-3.2.4-182.fc38
2024-05-04 02:20:05