Lucene search
Veracode Vulnerability DatabaseVERACODE:35071HistoryApr 13, 2022 - 7:35 a.m.
Buffer Overflow
2022-04-1307:35:02
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
14
ruby
buffer overflow
memory corruption
string-to-float
software
EPSS
0.005
Percentile
77.7%
ruby is vulnerable to buffer overflow. The vulnerability exists due to a memory corruption via the String-to-Float conversion which allows an attacker to cause a buffer overflow.
References
seclists.org/fulldisclosure/2022/Oct/41
hackerone.com/reports/1248108
secdb.alpinelinux.org/edge/main.yaml
secdb.alpinelinux.org/v3.12/main.yaml
secdb.alpinelinux.org/v3.13/main.yaml
secdb.alpinelinux.org/v3.14/main.yaml
secdb.alpinelinux.org/v3.15/main.yaml
security-tracker.debian.org/tracker/CVE-2022-28739
security.netapp.com/advisory/ntap-20220624-0002/
support.apple.com/kb/HT213488
support.apple.com/kb/HT213493
support.apple.com/kb/HT213494
www.ruby-lang.org/en/news/2022/04/12/buffer-overrun-in-string-to-float-cve-2022-28739/
Related
openvas
openvas
Huawei EulerOS: Security Advisory for ruby (EulerOS-SA-2022-2010)
2022-07-08 00:00:00
Ubuntu: Security Advisory (USN-5462-2)
2022-08-26 00:00:00
Huawei EulerOS: Security Advisory for ruby (EulerOS-SA-2022-2634)
2022-10-28 00:00:00
oraclelinux
oraclelinux
ruby:2.6 security, bug fix, and enhancement update
2022-07-01 00:00:00
ruby:2.5 security update
2023-01-20 00:00:00
ruby security, bug fix, and enhancement update
2022-09-21 00:00:00
nessus
nessus
NewStart CGSL MAIN 6.06 : ruby Vulnerability (NS-SA-2023-0084)
2023-12-27 00:00:00
RHEL 8 : ruby:2.6 (RHSA-2022:5338)
2022-07-01 00:00:00
cbl_mariner
cbl_mariner
CVE-2022-28739 affecting package ruby 2.6.9-1
2022-06-15 17:03:10
alpinelinux
alpinelinux
CVE-2022-28739
2022-05-09 18:15:08
ubuntu
ubuntu
Ruby vulnerability
2022-06-06 00:00:00
Ruby vulnerabilities
2022-06-06 00:00:00
prion
prion
Design/Logic Flaw
2022-05-09 18:15:00
freebsd
freebsd
Ruby -- Buffer overrun in String-to-Float conversion
2022-04-12 00:00:00
debiancve
debiancve
CVE-2022-28739
2022-05-09 18:15:08
osv
osv
ruby2.3 vulnerability
2022-06-06 22:21:58
Moderate: ruby:2.6 security, bug fix, and enhancement update
2022-06-28 10:54:23
CVE-2022-28739
2022-05-09 18:15:08
rubygems
rubygems
Buffer overrun in String-to-Float conversion
2022-04-11 21:00:00
rocky
rocky
ruby:2.6 security, bug fix, and enhancement update
2022-06-28 10:54:23
ruby security, bug fix, and enhancement update
2022-09-20 11:36:12
ruby:2.7 security, bug fix, and enhancement update
2022-09-13 07:36:49
nvd
nvd
CVE-2022-28739
2022-05-09 18:15:08
cve
cve
CVE-2022-28739
2022-05-09 18:15:08
amazon
amazon
Medium: ruby
2022-09-30 07:04:00
Medium: ruby20
2022-10-03 19:29:00
redhat
redhat
(RHSA-2022:6585) Moderate: ruby security, bug fix, and enhancement update
2022-09-20 11:36:12
ubuntucve
ubuntucve
CVE-2022-28739
2022-05-09 00:00:00
cvelist
cvelist
CVE-2022-28739
2022-05-09 00:00:00
redhatcve
redhatcve
CVE-2022-28739
2022-04-20 05:24:54
photon
photon
Critical Photon OS Security Update - PHSA-2022-0199
2022-06-17 00:00:00
Important Photon OS Security Update - PHSA-2022-3.0-0447
2022-09-07 00:00:00
Important Photon OS Security Update - PHSA-2022-4.0-0199
2022-06-17 00:00:00
fedora
fedora
[SECURITY] Fedora 36 Update: ruby-3.1.2-164.fc36
2022-05-07 05:07:39
[SECURITY] Fedora 35 Update: ruby-3.0.4-153.fc35
2022-05-08 01:48:39
[SECURITY] Fedora 34 Update: ruby-3.0.4-153.fc34
2022-05-08 02:03:44
redos
redos
ROS-20220516-06
2022-05-16 00:00:00
mageia
mageia
Updated ruby packages fix security vulnerability
2022-04-16 00:35:09
cloudfoundry
cloudfoundry
USN-5462-1: Ruby vulnerabilities | Cloud Foundry
2022-12-07 00:00:00
slackware
slackware
[slackware-security] ruby
2022-04-13 20:52:10
almalinux
almalinux
Moderate: ruby security, bug fix, and enhancement update
2022-09-20 00:00:00
Moderate: ruby:2.7 security, bug fix, and enhancement update
2022-09-13 00:00:00
Moderate: ruby:2.5 security update
2023-11-14 00:00:00
debian
debian
[SECURITY] [DLA 3450-1] ruby2.5 security update
2023-06-09 10:23:43
[SECURITY] [DLA 3858-1] ruby2.7 security update
2024-09-02 12:46:22
suse
suse
Security update for ruby2.5 (important)
2022-05-03 00:00:00
apple
apple
About the security content of macOS Big Sur 11.7.1
2022-10-24 00:00:00
About the security content of macOS Monterey 12.6.1
2022-10-24 00:00:00
About the security content of macOS Ventura 13
2022-10-24 00:00:00
gentoo
gentoo
Ruby: Multiple vulnerabilities
2024-01-24 00:00:00
ics
ics
Siemens SCALANCE XCM-/XRM-300
2024-02-15 12:00:00
oracle
oracle
Oracle Critical Patch Update Advisory - April 2023
2023-04-18 00:00:00