Lucene search
GoogleOSV:CVE-2024-27282HistoryMay 14, 2024 - 3:11 p.m.
CVE-2024-27282
2024-05-1415:11:57
Google
osv.dev
13
ruby
regex compiler
sensitive data
heap data
cve-2024-27282
AI Score
6.7
Confidence
Low
An issue was discovered in Ruby 3.x through 3.3.0. If attacker-supplied data is provided to the Ruby regex compiler, it is possible to extract arbitrary heap data relative to the start of the text, including pointers and sensitive strings. The fixed versions are 3.0.7, 3.1.5, 3.2.4, and 3.3.1.
Related
freebsd
freebsd
ruby -- Arbitrary memory address read vulnerability with Regex search
2024-04-23 00:00:00
osv
osv
BIT-ruby-2024-27282
2024-06-04 09:56:49
ruby2.7, ruby3.0, ruby3.1, ruby3.2 vulnerabilities
2024-06-17 14:24:17
Moderate: ruby:3.3 security, bug fix, and enhancement update
2024-06-06 00:00:00
cvelist
cvelist
CVE-2024-27282
1976-01-01 00:00:00
cbl_mariner
cbl_mariner
CVE-2024-27282 affecting package ruby for versions less than 3.1.4-5
2024-06-12 22:23:00
CVE-2024-27282 affecting package ruby for versions less than 3.3.3-1
2024-08-25 15:13:42
nessus
nessus
Photon OS 3.0: Ruby PHSA-2024-3.0-0754
2024-07-24 00:00:00
Photon OS 4.0: Ruby PHSA-2024-4.0-0600
2024-07-23 00:00:00
rubygems
rubygems
Arbitrary memory address read vulnerability with Regex search
2024-04-22 21:00:00
cve
cve
CVE-2024-27282
2024-05-14 15:11:57
vulnrichment
vulnrichment
CVE-2024-27282
1976-01-01 00:00:00
ubuntucve
ubuntucve
CVE-2024-27282
2024-05-14 00:00:00
alpinelinux
alpinelinux
CVE-2024-27282
2024-05-14 15:11:57
debiancve
debiancve
CVE-2024-27282
2024-05-14 15:11:57
nvd
nvd
CVE-2024-27282
2024-05-14 15:11:57
githubexploit
githubexploit
Exploit for CVE-2024-27282
2024-06-12 23:54:03
redhatcve
redhatcve
CVE-2024-27282
2024-04-24 05:34:31
ubuntu
ubuntu
Ruby vulnerabilities
2024-06-17 00:00:00
cloudfoundry
cloudfoundry
USN-6838-1: Ruby vulnerabilities | Cloud Foundry
2024-07-25 00:00:00
openvas
openvas
Huawei EulerOS: Security Advisory for ruby (EulerOS-SA-2024-2429)
2024-09-12 00:00:00
Ubuntu: Security Advisory (USN-6838-1)
2024-06-18 00:00:00
Huawei EulerOS: Security Advisory for ruby (EulerOS-SA-2024-2452)
2024-09-12 00:00:00
photon
photon
Important Photon OS Security Update - PHSA-2024-5.0-0259
2024-04-29 00:00:00
Important Photon OS Security Update - PHSA-2024-4.0-0600
2024-04-29 00:00:00
Important Photon OS Security Update - PHSA-2024-3.0-0754
2024-04-30 00:00:00
amazon
amazon
Medium: ruby
2024-09-12 18:30:00
debian
debian
[SECURITY] [DSA 5677-1] ruby3.1 security update
2024-05-03 19:47:30
[SECURITY] [DLA 3858-1] ruby2.7 security update
2024-09-02 12:46:22
rocky
rocky
ruby:3.1 security, bug fix, and enhancement update
2024-06-14 13:59:30
ruby:3.3 security, bug fix, and enhancement update
2024-06-14 13:59:30
ruby:3.1 security, bug fix, and enhancement update
2024-06-14 14:00:40
redhat
redhat
slackware
slackware
[slackware-security] ruby
2024-04-23 22:33:22
oraclelinux
oraclelinux
ruby:3.3 security, bug fix, and enhancement update
2024-06-07 00:00:00
ruby:3.3 security, bug fix, and enhancement update
2024-06-06 00:00:00
ruby:3.1 security, bug fix, and enhancement update
2024-06-06 00:00:00
almalinux
almalinux
Moderate: ruby:3.1 security, bug fix, and enhancement update
2024-06-03 00:00:00
Moderate: ruby:3.3 security, bug fix, and enhancement update
2024-06-06 00:00:00
Moderate: ruby:3.1 security, bug fix, and enhancement update
2024-06-06 00:00:00
mageia
mageia
Updated ruby packages fix security vulnerabilities
2024-05-09 05:40:29
fedora
fedora
[SECURITY] Fedora 40 Update: ruby-3.3.1-7.fc40
2024-05-03 01:46:00
[SECURITY] Fedora 38 Update: ruby-3.2.4-182.fc38
2024-05-04 02:20:05
[SECURITY] Fedora 39 Update: ruby-3.2.4-182.fc39
2024-05-04 01:33:23