Lucene search
RubySecRUBY:RUBY-2024-27282HistoryApr 22, 2024 - 9:00 p.m.
Arbitrary memory address read vulnerability with Regex search
2024-04-2221:00:00
RubySec
www.ruby-lang.org
14
arbitrary memory vulnerability
ruby regex
heap data extraction
software update
compatibility fix
AI Score
7.3
Confidence
High
If attacker-supplied data is provided to the Ruby regex compiler, it is
possible to extract arbitrary heap data relative to the start of the text,
including pointers and sensitive strings.
We recommend to update the Ruby to version 3.3.1 or later. In order to ensure compatibility with older Ruby series, you may update as follows instead:
- For Ruby 3.0 users: Update to 3.0.7
- For Ruby 3.1 users: Update to 3.1.5
- For Ruby 3.2 users: Update to 3.2.4
- For Ruby 3.3 users: Update to 3.3.1
Affected configurations
Node
rubyrubyRange3.0.0–3.0.7
ORrubyrubyRange3.1.0–3.1.5
ORrubyrubyRange3.2.0–3.2.4
ORrubyrubyRange≤3.3.1
Related
freebsd
freebsd
ruby -- Arbitrary memory address read vulnerability with Regex search
2024-04-23 00:00:00
osv
osv
BIT-ruby-2024-27282
2024-06-04 09:56:49
CVE-2024-27282
2024-05-14 15:11:57
ruby2.7, ruby3.0, ruby3.1, ruby3.2 vulnerabilities
2024-06-17 14:24:17
cvelist
cvelist
CVE-2024-27282
1976-01-01 00:00:00
cbl_mariner
cbl_mariner
CVE-2024-27282 affecting package ruby for versions less than 3.1.4-5
2024-06-12 22:23:00
CVE-2024-27282 affecting package ruby for versions less than 3.3.3-1
2024-08-25 15:13:42
nessus
nessus
Photon OS 3.0: Ruby PHSA-2024-3.0-0754
2024-07-24 00:00:00
Photon OS 4.0: Ruby PHSA-2024-4.0-0600
2024-07-23 00:00:00
cve
cve
CVE-2024-27282
2024-05-14 15:11:57
vulnrichment
vulnrichment
CVE-2024-27282
1976-01-01 00:00:00
ubuntucve
ubuntucve
CVE-2024-27282
2024-05-14 00:00:00
alpinelinux
alpinelinux
CVE-2024-27282
2024-05-14 15:11:57
debiancve
debiancve
CVE-2024-27282
2024-05-14 15:11:57
nvd
nvd
CVE-2024-27282
2024-05-14 15:11:57
githubexploit
githubexploit
Exploit for CVE-2024-27282
2024-06-12 23:54:03
redhatcve
redhatcve
CVE-2024-27282
2024-04-24 05:34:31
cloudfoundry
cloudfoundry
USN-6838-1: Ruby vulnerabilities | Cloud Foundry
2024-07-25 00:00:00
ubuntu
ubuntu
Ruby vulnerabilities
2024-06-17 00:00:00
openvas
openvas
Huawei EulerOS: Security Advisory for ruby (EulerOS-SA-2024-2429)
2024-09-12 00:00:00
Ubuntu: Security Advisory (USN-6838-1)
2024-06-18 00:00:00
Huawei EulerOS: Security Advisory for ruby (EulerOS-SA-2024-2452)
2024-09-12 00:00:00
photon
photon
Important Photon OS Security Update - PHSA-2024-5.0-0259
2024-04-29 00:00:00
Important Photon OS Security Update - PHSA-2024-4.0-0600
2024-04-29 00:00:00
Important Photon OS Security Update - PHSA-2024-3.0-0754
2024-04-30 00:00:00
amazon
amazon
Medium: ruby
2024-09-12 18:30:00
debian
debian
[SECURITY] [DSA 5677-1] ruby3.1 security update
2024-05-03 19:47:30
[SECURITY] [DLA 3858-1] ruby2.7 security update
2024-09-02 12:46:22
rocky
rocky
ruby:3.1 security, bug fix, and enhancement update
2024-06-14 13:59:30
ruby:3.3 security, bug fix, and enhancement update
2024-06-14 13:59:30
ruby:3.1 security, bug fix, and enhancement update
2024-06-14 14:00:40
redhat
redhat
slackware
slackware
[slackware-security] ruby
2024-04-23 22:33:22
oraclelinux
oraclelinux
ruby:3.3 security, bug fix, and enhancement update
2024-06-07 00:00:00
ruby:3.1 security, bug fix, and enhancement update
2024-06-06 00:00:00
ruby:3.3 security, bug fix, and enhancement update
2024-06-06 00:00:00
almalinux
almalinux
Moderate: ruby:3.1 security, bug fix, and enhancement update
2024-06-03 00:00:00
Moderate: ruby:3.3 security, bug fix, and enhancement update
2024-06-06 00:00:00
Moderate: ruby:3.1 security, bug fix, and enhancement update
2024-06-06 00:00:00
mageia
mageia
Updated ruby packages fix security vulnerabilities
2024-05-09 05:40:29
fedora
fedora
[SECURITY] Fedora 40 Update: ruby-3.3.1-7.fc40
2024-05-03 01:46:00
[SECURITY] Fedora 38 Update: ruby-3.2.4-182.fc38
2024-05-04 02:20:05
[SECURITY] Fedora 39 Update: ruby-3.2.4-182.fc39
2024-05-04 01:33:23