Lucene search
Ubuntu.comUB:CVE-2024-27282HistoryMay 14, 2024 - 12:00 a.m.
CVE-2024-27282
2024-05-1400:00:00
ubuntu.com
ubuntu.com
6
cve-2024-27282
bugs
debian
unix
An issue was discovered in Ruby 3.x through 3.3.0. If attacker-supplied
data is provided to the Ruby regex compiler, it is possible to extract
arbitrary heap data relative to the start of the text, including pointers
and sensitive strings. The fixed versions are 3.0.7, 3.1.5, 3.2.4, and
3.3.1.
Bugs
- <http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1069968>
- <http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1069969>
Notes
| Author | Note |
|---|---|
| mdeslaur | This also affects 2.x |
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| ubuntu | 18.04 | noarch | jruby | < any | UNKNOWN |
| ubuntu | 20.04 | noarch | jruby | < any | UNKNOWN |
| ubuntu | 23.10 | noarch | jruby | < any | UNKNOWN |
| ubuntu | 24.04 | noarch | jruby | < any | UNKNOWN |
| ubuntu | 14.04 | noarch | jruby | < any | UNKNOWN |
| ubuntu | 16.04 | noarch | jruby | < any | UNKNOWN |
| ubuntu | 16.04 | noarch | ruby2.3 | < any | UNKNOWN |
| ubuntu | 18.04 | noarch | ruby2.5 | < any | UNKNOWN |
| ubuntu | 20.04 | noarch | ruby2.7 | < 2.7.0-5ubuntu1.13 | UNKNOWN |
| ubuntu | 22.04 | noarch | ruby3.0 | < 3.0.2-7ubuntu2.6 | UNKNOWN |
References
github.com/ruby/ruby/commit/989a2355808a63fc45367785c82ffd46d18c900a
launchpad.net/bugs/cve/CVE-2024-27282
nvd.nist.gov/vuln/detail/CVE-2024-27282
security-tracker.debian.org/tracker/CVE-2024-27282
ubuntu.com/security/notices/USN-6838-1
www.cve.org/CVERecord?id=CVE-2024-27282
www.ruby-lang.org/en/news/2024/04/23/arbitrary-memory-address-read-regexp-cve-2024-27282/
Related
cve
cve
CVE-2024-27282
2024-05-14 15:11:57
cbl_mariner
cbl_mariner
CVE-2024-27282 affecting package ruby for versions less than 3.1.4-5
2024-06-12 22:23:00
cvelist
cvelist
CVE-2024-27282
1976-01-01 00:00:00
osv
osv
BIT-ruby-2024-27282
2024-06-04 09:56:49
CVE-2024-27282
2024-05-14 15:11:57
ruby2.7, ruby3.0, ruby3.1, ruby3.2 vulnerabilities
2024-06-17 14:24:17
freebsd
freebsd
ruby -- Arbitrary memory address read vulnerability with Regex search
2024-04-23 00:00:00
alpinelinux
alpinelinux
CVE-2024-27282
2024-05-14 15:11:57
nvd
nvd
CVE-2024-27282
2024-05-14 15:11:57
debiancve
debiancve
CVE-2024-27282
2024-05-14 15:11:57
githubexploit
githubexploit
Exploit for CVE-2024-27282
2024-06-12 23:54:03
redhatcve
redhatcve
CVE-2024-27282
2024-04-24 05:34:31
nessus
nessus
FreeBSD : ruby -- Arbitrary memory address read vulnerability with Regex search (2ce1a2f1-0177-11ef-a45e-08002784c58d)
2024-04-24 00:00:00
Ubuntu 20.04 LTS / 22.04 LTS / 23.10 / 24.04 LTS : Ruby vulnerabilities (USN-6838-1)
2024-06-17 00:00:00
Rocky Linux 9 : ruby:3.3 (RLSA-2024:3671)
2024-06-14 00:00:00
photon
photon
Important Photon OS Security Update - PHSA-2024-4.0-0600
2024-04-29 00:00:00
Important Photon OS Security Update - PHSA-2024-5.0-0259
2024-04-29 00:00:00
Important Photon OS Security Update - PHSA-2024-3.0-0754
2024-04-30 00:00:00
openvas
openvas
Ubuntu: Security Advisory (USN-6838-1)
2024-06-18 00:00:00
Slackware: Security Advisory (SSA:2024-114-01)
2024-04-24 00:00:00
Fedora: Security Advisory for ruby (FEDORA-2024-14db7b21a2)
2024-05-27 00:00:00
ubuntu
ubuntu
Ruby vulnerabilities
2024-06-17 00:00:00
almalinux
almalinux
Moderate: ruby:3.1 security, bug fix, and enhancement update
2024-06-03 00:00:00
Moderate: ruby:3.3 security, bug fix, and enhancement update
2024-06-06 00:00:00
Moderate: ruby:3.3 security, bug fix, and enhancement update
2024-06-06 00:00:00
rocky
rocky
ruby:3.1 security, bug fix, and enhancement update
2024-06-14 14:00:40
ruby:3.1 security, bug fix, and enhancement update
2024-06-14 13:59:30
ruby:3.3 security, bug fix, and enhancement update
2024-06-14 14:00:40
mageia
mageia
Updated ruby packages fix security vulnerabilities
2024-05-09 05:40:29
oraclelinux
oraclelinux
ruby:3.3 security, bug fix, and enhancement update
2024-06-07 00:00:00
ruby:3.1 security, bug fix, and enhancement update
2024-06-03 00:00:00
ruby:3.3 security, bug fix, and enhancement update
2024-06-06 00:00:00
redhat
redhat
(RHSA-2024:3500) Moderate: ruby:3.0 security update
2024-05-30 12:07:40
debian
debian
[SECURITY] [DSA 5677-1] ruby3.1 security update
2024-05-03 19:47:30
slackware
slackware
[slackware-security] ruby
2024-04-23 22:33:22
fedora
fedora
[SECURITY] Fedora 40 Update: ruby-3.3.1-7.fc40
2024-05-03 01:46:00
[SECURITY] Fedora 38 Update: ruby-3.2.4-182.fc38
2024-05-04 02:20:05
[SECURITY] Fedora 39 Update: ruby-3.2.4-182.fc39
2024-05-04 01:33:23