A double free was found in the Regexp compiler in Ruby 3.x before 3.0.4 and 3.1.x before 3.1.2. If a victim attempts to create a Regexp from untrusted user input, an attacker may be able to write to unexpected memory locations.
CVSS Details
- CVSS 3.1 Base Score: 9.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade ruby-develUpgrade rubygem-abrtUpgrade rubygem-typeprofUpgrade rubygem-rbsUpgrade rubygem-pgUpgrade rubygem-power_assertUpgrade rubygem-abrt-docUpgrade rubyUpgrade rubygem-mysql2-docUpgrade rubygemsUpgrade rubygem-rdocUpgrade rubygem-irbUpgrade rubygem-test-unitUpgrade rubygem-mysql2Upgrade ruby-default-gemsUpgrade rubygem-minitestUpgrade rubygem-bundlerUpgrade rubygem-io-consoleUpgrade rubygem-rexmlUpgrade rubygem-rakeUpgrade ruby-libsUpgrade rubygem-jsonUpgrade rubygem-psychUpgrade rubygems-develUpgrade ruby-docUpgrade rubygem-rssUpgrade rubygem-pg-docUpgrade rubygem-bigdecimal | Oct 20, 2022 | May 9, 2022 |
| Alpine Linux | — | Upgrade ruby | Aug 22, 2024 | May 9, 2022 |
| Amazon Linux Ami 2 | — | Upgrade rubyUpgrade rubygem-bundlerUpgrade ruby-default-gemsUpgrade rubygem-rbsUpgrade rubygemsUpgrade rubygem-power_assertUpgrade rubygem-jsonUpgrade rubygem-rdocUpgrade rubygem-irbUpgrade rubygem-minitestUpgrade rubygem-psychUpgrade rubygem-rssUpgrade rubygem-typeprofUpgrade ruby-develUpgrade ruby-debuginfoUpgrade rubygem-rexmlUpgrade ruby-libsUpgrade rubygem-bigdecimalUpgrade ruby-docUpgrade rubygem-test-unitUpgrade rubygem-rakeUpgrade rubygem-io-consoleUpgrade rubygems-devel | Sep 28, 2023 | May 9, 2022 |
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | May 9, 2022 |
| Centos_linux | — | Upgrade rubygem-mysql2-docUpgrade rubygem-rdocUpgrade rubygemsUpgrade rubygem-bigdecimal-debuginfoUpgrade rubygem-typeprofUpgrade ruby-debuginfoUpgrade rubygem-test-unitUpgrade rubygem-minitestUpgrade rubygem-io-consoleUpgrade rubygem-abrt-docUpgrade rubygem-io-console-debuginfoUpgrade rubygem-rakeUpgrade rubygem-mysql2-debugsourceUpgrade rubygems-develUpgrade rubygem-bigdecimalUpgrade rubygem-json-debuginfoUpgrade ruby-libs-debuginfoUpgrade rubygem-psych-debuginfoUpgrade rubygem-rbsUpgrade ruby-develUpgrade rubygem-rexmlUpgrade rubygem-abrtUpgrade rubyUpgrade rubygem-power_assertUpgrade rubygem-pg-docUpgrade rubygem-irbUpgrade ruby-debugsourceUpgrade rubygem-bundlerUpgrade ruby-default-gemsUpgrade rubygem-mysql2-debuginfoUpgrade rubygem-rssUpgrade rubygem-psychUpgrade ruby-libsUpgrade ruby-docUpgrade rubygem-pg-debuginfoUpgrade rubygem-pg-debugsourceUpgrade rubygem-pgUpgrade rubygem-mysql2Upgrade rubygem-json | Oct 20, 2022 | May 9, 2022 |
| Freebsd | — | Upgrade ruby31Upgrade ruby30Upgrade rubyUpgrade ruby32 | Nov 4, 2022 | Apr 13, 2022 |
| Gentoo Linux | — | Upgrade dev-lang/ruby. | Jan 25, 2024 | May 9, 2022 |
| Oracle_linux | — | Upgrade rubygem-rakeUpgrade rubyUpgrade rubygem-bigdecimalUpgrade rubygem-rexmlUpgrade rubygem-irbUpgrade rubygem-mysql2Upgrade rubygem-bundlerUpgrade ruby-docUpgrade ruby-develUpgrade rubygem-rbsUpgrade rubygem-io-consoleUpgrade rubygem-abrtUpgrade rubygems-develUpgrade rubygem-abrt-docUpgrade rubygem-typeprofUpgrade rubygem-mysql2-docUpgrade rubygem-minitestUpgrade rubygem-psychUpgrade ruby-libsUpgrade rubygem-power_assertUpgrade rubygem-rdocUpgrade ruby-default-gemsUpgrade rubygem-rssUpgrade rubygem-test-unitUpgrade rubygem-pg-docUpgrade rubygem-pgUpgrade rubygem-jsonUpgrade rubygems | Sep 15, 2022 | Apr 14, 2022 |
| Redhat_linux | — | Upgrade rubygem-jsonUpgrade rubygem-rexmlUpgrade rubygem-pg-debugsourceUpgrade rubygem-mysql2Upgrade rubygem-psych-debuginfoUpgrade rubygem-bundlerUpgrade rubygem-abrtUpgrade rubygem-rssUpgrade ruby-develUpgrade ruby-debugsourceUpgrade rubygem-rbsUpgrade ruby-libsUpgrade rubygem-irbUpgrade ruby-default-gemsUpgrade rubyUpgrade rubygem-psychUpgrade rubygem-pg-docUpgrade ruby-docUpgrade rubygem-pgUpgrade rubygem-rakeUpgrade rubygems-develUpgrade rubygem-io-console-debuginfoUpgrade rubygem-json-debuginfoUpgrade rubygem-rdocUpgrade rubygem-mysql2-debuginfoUpgrade rubygem-test-unitUpgrade rubygem-abrt-docUpgrade rubygem-typeprofUpgrade rubygem-power_assertUpgrade rubygem-mysql2-debugsourceUpgrade rubygem-bigdecimal-debuginfoUpgrade rubygem-io-consoleUpgrade rubygem-bigdecimalUpgrade rubygemsUpgrade rubygem-minitestUpgrade rubygem-mysql2-docUpgrade rubygem-pg-debuginfoUpgrade ruby-libs-debuginfoUpgrade ruby-debuginfo | Oct 20, 2022 | May 9, 2022 |
| Rocky_linux | — | Upgrade ruby-debuginfoUpgrade rubygem-pg-debuginfoUpgrade ruby-develUpgrade rubygem-io-consoleUpgrade rubygem-json-debuginfoUpgrade rubygem-mysql2-debuginfoUpgrade rubygem-mysql2-debugsourceUpgrade rubygem-mysql2Upgrade rubygem-jsonUpgrade rubygem-bigdecimalUpgrade rubygem-io-console-debuginfoUpgrade rubygem-pg-debugsourceUpgrade rubyUpgrade ruby-debugsourceUpgrade rubygem-pgUpgrade rubygem-psychUpgrade ruby-libsUpgrade rubygem-bigdecimal-debuginfoUpgrade ruby-libs-debuginfoUpgrade rubygem-psych-debuginfo | Mar 12, 2024 | May 9, 2022 |
| Ubuntu | — | Upgrade libruby3.0Upgrade ruby3.0 | Jun 7, 2022 | May 9, 2022 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub