A double free was found in the Regexp compiler in Ruby 3.x before 3.0.4 and 3.1.x before 3.1.2. If a victim attempts to create a Regexp from untrusted user input, an attacker may be able to write to unexpected memory locations.
CVSS Details
- CVSS 3.1 Base Score: 9.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade rubygem-psychUpgrade ruby-docUpgrade rubygem-jsonUpgrade rubygem-rssUpgrade rubygem-rexmlUpgrade ruby-libsUpgrade rubygems-develUpgrade rubygem-pg-docUpgrade rubygem-rakeUpgrade rubygem-io-consoleUpgrade rubygem-bigdecimalUpgrade rubygem-power_assertUpgrade rubygem-irbUpgrade rubygemsUpgrade rubygem-rbsUpgrade rubygem-rdocUpgrade ruby-develUpgrade rubygem-abrtUpgrade rubygem-mysql2-docUpgrade rubygem-typeprofUpgrade rubygem-pgUpgrade rubygem-test-unitUpgrade ruby-default-gemsUpgrade rubygem-bundlerUpgrade rubygem-mysql2Upgrade rubygem-minitestUpgrade rubygem-abrt-docUpgrade ruby | Oct 20, 2022 | May 9, 2022 |
| Alpine Linux | — | Upgrade ruby | Aug 22, 2024 | May 9, 2022 |
| Amazon Linux Ami 2 | — | Upgrade ruby-debuginfoUpgrade rubygem-io-consoleUpgrade rubygem-rexmlUpgrade ruby-libsUpgrade ruby-docUpgrade rubygem-test-unitUpgrade rubygem-bigdecimalUpgrade rubygem-rakeUpgrade rubygems-develUpgrade rubygem-power_assertUpgrade ruby-default-gemsUpgrade rubygemsUpgrade rubygem-rssUpgrade rubygem-rbsUpgrade ruby-develUpgrade rubygem-jsonUpgrade rubygem-typeprofUpgrade rubygem-rdocUpgrade rubyUpgrade rubygem-psychUpgrade rubygem-minitestUpgrade rubygem-bundlerUpgrade rubygem-irb | Sep 28, 2023 | May 9, 2022 |
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | May 9, 2022 |
| Centos_linux | — | Upgrade rubygem-psychUpgrade rubygem-rssUpgrade rubygem-bundlerUpgrade rubygem-psych-debuginfoUpgrade ruby-libs-debuginfoUpgrade ruby-debugsourceUpgrade rubygem-irbUpgrade rubygem-pg-debuginfoUpgrade rubygem-mysql2Upgrade rubygem-pgUpgrade rubygem-pg-debugsourceUpgrade ruby-docUpgrade rubyUpgrade rubygem-mysql2-debuginfoUpgrade rubygem-rbsUpgrade ruby-libsUpgrade ruby-develUpgrade rubygem-rexmlUpgrade rubygem-jsonUpgrade rubygem-pg-docUpgrade rubygem-abrtUpgrade ruby-default-gemsUpgrade rubygem-power_assertUpgrade rubygem-rdocUpgrade rubygem-mysql2-docUpgrade rubygem-test-unitUpgrade rubygem-json-debuginfoUpgrade rubygem-mysql2-debugsourceUpgrade rubygems-develUpgrade rubygem-typeprofUpgrade rubygem-io-console-debuginfoUpgrade rubygem-rakeUpgrade rubygem-io-consoleUpgrade rubygem-bigdecimal-debuginfoUpgrade rubygemsUpgrade rubygem-minitestUpgrade rubygem-bigdecimalUpgrade rubygem-abrt-docUpgrade ruby-debuginfo | Oct 20, 2022 | May 9, 2022 |
| Freebsd | — | Upgrade ruby30Upgrade ruby31Upgrade rubyUpgrade ruby32 | Nov 4, 2022 | Apr 13, 2022 |
| Gentoo Linux | — | Upgrade dev-lang/ruby. | Jan 25, 2024 | May 9, 2022 |
| Oracle_linux | — | Upgrade rubygem-minitestUpgrade rubygem-test-unitUpgrade rubygem-pgUpgrade rubygem-psychUpgrade rubygem-power_assertUpgrade rubygem-abrt-docUpgrade rubygem-rdocUpgrade rubygems-develUpgrade rubygem-rssUpgrade ruby-default-gemsUpgrade rubygem-mysql2-docUpgrade ruby-libsUpgrade rubygem-typeprofUpgrade rubygemsUpgrade rubygem-pg-docUpgrade rubygem-jsonUpgrade rubygem-io-consoleUpgrade ruby-develUpgrade ruby-docUpgrade rubygem-rakeUpgrade rubygem-bigdecimalUpgrade rubyUpgrade rubygem-irbUpgrade rubygem-rbsUpgrade rubygem-mysql2Upgrade rubygem-abrtUpgrade rubygem-bundlerUpgrade rubygem-rexml | Sep 15, 2022 | Apr 14, 2022 |
| Redhat_linux | — | Upgrade rubygem-rbsUpgrade rubygem-rexmlUpgrade rubygem-irbUpgrade rubygem-bundlerUpgrade ruby-docUpgrade rubygem-pg-docUpgrade rubygem-pgUpgrade ruby-debugsourceUpgrade rubygem-rakeUpgrade rubygem-jsonUpgrade ruby-libsUpgrade rubygem-psych-debuginfoUpgrade ruby-develUpgrade rubygem-psychUpgrade rubygem-rssUpgrade ruby-default-gemsUpgrade rubygem-abrtUpgrade rubygem-pg-debugsourceUpgrade rubygem-mysql2Upgrade rubyUpgrade rubygem-mysql2-docUpgrade rubygemsUpgrade rubygem-typeprofUpgrade rubygem-power_assertUpgrade rubygem-minitestUpgrade rubygem-json-debuginfoUpgrade rubygem-pg-debuginfoUpgrade ruby-libs-debuginfoUpgrade ruby-debuginfoUpgrade rubygem-io-console-debuginfoUpgrade rubygems-develUpgrade rubygem-bigdecimalUpgrade rubygem-mysql2-debugsourceUpgrade rubygem-rdocUpgrade rubygem-bigdecimal-debuginfoUpgrade rubygem-io-consoleUpgrade rubygem-test-unitUpgrade rubygem-abrt-docUpgrade rubygem-mysql2-debuginfo | Oct 20, 2022 | May 9, 2022 |
| Rocky_linux | — | Upgrade ruby-debugsourceUpgrade ruby-libsUpgrade rubygem-psychUpgrade rubygem-bigdecimal-debuginfoUpgrade rubygem-psych-debuginfoUpgrade rubygem-pgUpgrade ruby-libs-debuginfoUpgrade rubygem-mysql2-debuginfoUpgrade rubygem-mysql2Upgrade rubygem-jsonUpgrade rubygem-mysql2-debugsourceUpgrade rubygem-io-console-debuginfoUpgrade rubygem-bigdecimalUpgrade rubygem-pg-debugsourceUpgrade rubyUpgrade rubygem-json-debuginfoUpgrade ruby-debuginfoUpgrade ruby-develUpgrade rubygem-io-consoleUpgrade rubygem-pg-debuginfo | Mar 12, 2024 | May 9, 2022 |
| Ubuntu | — | Upgrade libruby3.0Upgrade ruby3.0 | Jun 7, 2022 | May 9, 2022 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub