CVE-2022-28738
A double free was found in the Regexp compiler in Ruby 3.x before 3.0.4 and 3.1.x before 3.1.2. If a victim attempts to create a Regexp from untrusted...
Description d'origine
La description telle que publiée par la source (souvent en anglais).
A double free was found in the Regexp compiler in Ruby 3.x before 3.0.4 and 3.1.x before 3.1.2. If a victim attempts to create a Regexp from untrusted user input, an attacker may be able to write to unexpected memory locations.
Paquets affectés
Bitnami
ruby-min
[{"type":"SEMVER","events":[{"introduced":"3.0.0"},{"fixed":"3.0.4"},{"introduced":"3.1.0"},{"fixed":"3.1.2"}]}]
Bitnami
ruby
[{"type":"SEMVER","events":[{"introduced":"3.0.0"},{"fixed":"3.0.4"},{"introduced":"3.1.0"},{"fixed":"3.1.2"}]}]
État des correctifs par distribution
Paquets corrigés publiés par chaque distribution pour cette CVE
- Alpine Linux ALPINE-CVE-2022-28738 ruby Corrigé dans: 3.0.4-r0
Références
- advisory hackerone.com
- advisory security-tracker.debian.org
- advisory security.netapp.com
- advisory ruby-lang.org
- web security.gentoo.org
- web nvd.nist.gov