Lucene search
GoogleOSV:CVE-2024-27282HistoryMay 14, 2024 - 3:11 p.m.
CVE-2024-27282
2024-05-1415:11:57
Google
osv.dev
7
ruby
regex compiler
sensitive data
heap data
cve-2024-27282
An issue was discovered in Ruby 3.x through 3.3.0. If attacker-supplied data is provided to the Ruby regex compiler, it is possible to extract arbitrary heap data relative to the start of the text, including pointers and sensitive strings. The fixed versions are 3.0.7, 3.1.5, 3.2.4, and 3.3.1.
| CPE | Name | Operator | Version |
|---|---|---|---|
| ruby | eq | 2.6.5-r3 | |
| ruby | eq | 1.9.3_p374-r0 | |
| ruby | eq | 2.4.3-r3 | |
| ruby | eq | 2.5.3-r3 | |
| ruby | eq | 2.0.0_p247-r3 | |
| ruby | eq | 1.8.7_p160-r2 | |
| ruby | eq | 2.6.3-r3 | |
| ruby | eq | 2.3.3-r2 | |
| ruby | eq | 3.0.2-r3 | |
| ruby | eq | 1.9.3_p286-r2 |
Related
cve
cve
CVE-2024-27282
2024-05-14 15:11:57
cbl_mariner
cbl_mariner
CVE-2024-27282 affecting package ruby for versions less than 3.1.4-5
2024-06-12 22:23:00
osv
osv
BIT-ruby-2024-27282
2024-06-04 09:56:49
ruby2.7, ruby3.0, ruby3.1, ruby3.2 vulnerabilities
2024-06-17 14:24:17
ruby3.1 - security update
2024-05-03 00:00:00
cvelist
cvelist
CVE-2024-27282
1976-01-01 00:00:00
freebsd
freebsd
ruby -- Arbitrary memory address read vulnerability with Regex search
2024-04-23 00:00:00
nessus
nessus
FreeBSD : ruby -- Arbitrary memory address read vulnerability with Regex search (2ce1a2f1-0177-11ef-a45e-08002784c58d)
2024-04-24 00:00:00
Ubuntu 20.04 LTS / 22.04 LTS / 23.10 / 24.04 LTS : Ruby vulnerabilities (USN-6838-1)
2024-06-17 00:00:00
Rocky Linux 9 : ruby:3.3 (RLSA-2024:3671)
2024-06-14 00:00:00
redhatcve
redhatcve
CVE-2024-27282
2024-04-24 05:34:31
nvd
nvd
CVE-2024-27282
2024-05-14 15:11:57
debiancve
debiancve
CVE-2024-27282
2024-05-14 15:11:57
githubexploit
githubexploit
Exploit for CVE-2024-27282
2024-06-12 23:54:03
alpinelinux
alpinelinux
CVE-2024-27282
2024-05-14 15:11:57
ubuntucve
ubuntucve
CVE-2024-27282
2024-05-14 00:00:00
photon
photon
Important Photon OS Security Update - PHSA-2024-4.0-0600
2024-04-29 00:00:00
Important Photon OS Security Update - PHSA-2024-5.0-0259
2024-04-29 00:00:00
Important Photon OS Security Update - PHSA-2024-3.0-0754
2024-04-30 00:00:00
openvas
openvas
Ubuntu: Security Advisory (USN-6838-1)
2024-06-18 00:00:00
Slackware: Security Advisory (SSA:2024-114-01)
2024-04-24 00:00:00
Fedora: Security Advisory for ruby (FEDORA-2024-14db7b21a2)
2024-05-27 00:00:00
ubuntu
ubuntu
Ruby vulnerabilities
2024-06-17 00:00:00
rocky
rocky
ruby:3.1 security, bug fix, and enhancement update
2024-06-14 14:00:40
ruby:3.1 security, bug fix, and enhancement update
2024-06-14 13:59:30
ruby:3.3 security, bug fix, and enhancement update
2024-06-14 14:00:40
almalinux
almalinux
Moderate: ruby:3.1 security, bug fix, and enhancement update
2024-06-03 00:00:00
Moderate: ruby:3.3 security, bug fix, and enhancement update
2024-06-06 00:00:00
Moderate: ruby:3.1 security, bug fix, and enhancement update
2024-06-06 00:00:00
mageia
mageia
Updated ruby packages fix security vulnerabilities
2024-05-09 05:40:29
redhat
redhat
(RHSA-2024:3500) Moderate: ruby:3.0 security update
2024-05-30 12:07:40
oraclelinux
oraclelinux
ruby:3.3 security, bug fix, and enhancement update
2024-06-07 00:00:00
ruby:3.3 security, bug fix, and enhancement update
2024-06-06 00:00:00
ruby:3.1 security, bug fix, and enhancement update
2024-06-06 00:00:00
slackware
slackware
[slackware-security] ruby
2024-04-23 22:33:22
debian
debian
[SECURITY] [DSA 5677-1] ruby3.1 security update
2024-05-03 19:47:30
fedora
fedora
[SECURITY] Fedora 40 Update: ruby-3.3.1-7.fc40
2024-05-03 01:46:00
[SECURITY] Fedora 39 Update: ruby-3.2.4-182.fc39
2024-05-04 01:33:23
[SECURITY] Fedora 38 Update: ruby-3.2.4-182.fc38
2024-05-04 02:20:05