Lucene search

K
osvGoogleOSV:USN-6838-1
HistoryJun 17, 2024 - 2:24 p.m.

ruby2.7, ruby3.0, ruby3.1, ruby3.2 vulnerabilities

2024-06-1714:24:17
Google
osv.dev
ruby
rdoc
regex
compiler
vulnerabilities
yaml
remote
code execution
memory
sensitive
software

7 High

AI Score

Confidence

Low

0 Low

EPSS

Percentile

0.0%

It was discovered that Ruby RDoc incorrectly parsed certain YAML files. If
a user or automated system were tricked into parsing a specially crafted
.rdoc_options file, a remote attacker could possibly use this issue to
execute arbitrary code. (CVE-2024-27281)

It was discovered that the Ruby regex compiler incorrectly handled certain
memory operations. A remote attacker could possibly use this issue to
obtain sensitive memory contents. (CVE-2024-27282)