A double free was found in the Regexp compiler in Ruby 3.x before 3.0.4 and 3.1.x before 3.1.2. If a victim attempts to create a Regexp from untrusted user input, an attacker may be able to write to unexpected memory locations.
CVSS Details
- CVSS 3.1 Base Score: 9.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade rubygems-develUpgrade rubygem-rakeUpgrade rubygem-rexmlUpgrade rubygem-bigdecimalUpgrade rubygem-rssUpgrade rubygem-pg-docUpgrade rubygem-jsonUpgrade ruby-libsUpgrade rubygem-psychUpgrade rubygem-io-consoleUpgrade ruby-docUpgrade ruby-develUpgrade ruby-default-gemsUpgrade rubygemsUpgrade rubyUpgrade rubygem-abrt-docUpgrade rubygem-minitestUpgrade rubygem-abrtUpgrade rubygem-typeprofUpgrade rubygem-mysql2Upgrade rubygem-test-unitUpgrade rubygem-rdocUpgrade rubygem-rbsUpgrade rubygem-power_assertUpgrade rubygem-pgUpgrade rubygem-irbUpgrade rubygem-mysql2-docUpgrade rubygem-bundler | Oct 20, 2022 | May 9, 2022 |
| Alpine Linux | — | Upgrade ruby | Aug 22, 2024 | May 9, 2022 |
| Amazon Linux Ami 2 | — | Upgrade rubygemsUpgrade rubygem-bundlerUpgrade rubyUpgrade rubygem-power_assertUpgrade rubygem-irbUpgrade rubygem-rssUpgrade rubygem-minitestUpgrade rubygem-psychUpgrade rubygem-rbsUpgrade ruby-develUpgrade rubygem-jsonUpgrade rubygem-rdocUpgrade rubygem-typeprofUpgrade ruby-default-gemsUpgrade ruby-docUpgrade ruby-debuginfoUpgrade rubygems-develUpgrade rubygem-io-consoleUpgrade rubygem-bigdecimalUpgrade rubygem-rakeUpgrade rubygem-test-unitUpgrade rubygem-rexmlUpgrade ruby-libs | Sep 28, 2023 | May 9, 2022 |
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | May 9, 2022 |
| Centos_linux | — | Upgrade rubygem-bigdecimalUpgrade ruby-debuginfoUpgrade rubygems-develUpgrade rubygem-mysql2-docUpgrade rubygem-mysql2-debugsourceUpgrade rubygem-rdocUpgrade rubygem-bigdecimal-debuginfoUpgrade rubygemsUpgrade rubygem-minitestUpgrade rubygem-json-debuginfoUpgrade rubygem-typeprofUpgrade rubygem-rakeUpgrade rubygem-io-console-debuginfoUpgrade rubygem-io-consoleUpgrade rubygem-test-unitUpgrade rubygem-abrt-docUpgrade rubygem-mysql2Upgrade rubyUpgrade rubygem-pg-debugsourceUpgrade rubygem-bundlerUpgrade rubygem-pgUpgrade rubygem-jsonUpgrade rubygem-psych-debuginfoUpgrade rubygem-abrtUpgrade ruby-docUpgrade rubygem-irbUpgrade rubygem-power_assertUpgrade rubygem-pg-docUpgrade rubygem-mysql2-debuginfoUpgrade ruby-default-gemsUpgrade ruby-debugsourceUpgrade ruby-libs-debuginfoUpgrade rubygem-rexmlUpgrade rubygem-rbsUpgrade ruby-develUpgrade rubygem-rssUpgrade rubygem-psychUpgrade rubygem-pg-debuginfoUpgrade ruby-libs | Oct 20, 2022 | May 9, 2022 |
| Freebsd | — | Upgrade ruby32Upgrade rubyUpgrade ruby31Upgrade ruby30 | Nov 4, 2022 | Apr 13, 2022 |
| Gentoo Linux | — | Upgrade dev-lang/ruby. | Jan 25, 2024 | May 9, 2022 |
| Oracle_linux | — | Upgrade rubygem-power_assertUpgrade rubygem-rdocUpgrade rubygem-psychUpgrade rubygem-mysql2-docUpgrade rubygem-rssUpgrade rubygemsUpgrade ruby-default-gemsUpgrade rubygem-typeprofUpgrade rubygem-pgUpgrade rubygem-abrt-docUpgrade rubygem-minitestUpgrade rubygem-pg-docUpgrade rubygem-test-unitUpgrade rubygem-jsonUpgrade rubygems-develUpgrade ruby-libsUpgrade rubygem-bigdecimalUpgrade rubygem-rbsUpgrade rubygem-rexmlUpgrade rubyUpgrade rubygem-rakeUpgrade ruby-docUpgrade rubygem-irbUpgrade rubygem-bundlerUpgrade rubygem-mysql2Upgrade ruby-develUpgrade rubygem-io-consoleUpgrade rubygem-abrt | Sep 15, 2022 | Apr 14, 2022 |
| Redhat_linux | — | Upgrade rubygem-mysql2-docUpgrade rubygem-bigdecimalUpgrade rubygem-rdocUpgrade rubygemsUpgrade rubygem-mysql2-debuginfoUpgrade rubygem-io-consoleUpgrade rubygems-develUpgrade rubygem-power_assertUpgrade rubygem-json-debuginfoUpgrade rubygem-typeprofUpgrade ruby-debuginfoUpgrade rubygem-minitestUpgrade rubygem-abrt-docUpgrade rubygem-test-unitUpgrade rubygem-mysql2-debugsourceUpgrade ruby-libs-debuginfoUpgrade rubygem-bigdecimal-debuginfoUpgrade rubygem-pg-debuginfoUpgrade rubygem-io-console-debuginfoUpgrade rubygem-mysql2Upgrade rubygem-rakeUpgrade rubygem-jsonUpgrade ruby-libsUpgrade rubygem-rbsUpgrade rubygem-irbUpgrade rubygem-pg-docUpgrade rubygem-rssUpgrade rubygem-psychUpgrade rubygem-bundlerUpgrade ruby-debugsourceUpgrade rubyUpgrade rubygem-pg-debugsourceUpgrade ruby-default-gemsUpgrade rubygem-abrtUpgrade rubygem-pgUpgrade rubygem-rexmlUpgrade ruby-develUpgrade ruby-docUpgrade rubygem-psych-debuginfo | Oct 20, 2022 | May 9, 2022 |
| Rocky_linux | — | Upgrade ruby-debugsourceUpgrade ruby-libs-debuginfoUpgrade ruby-libsUpgrade rubygem-pgUpgrade rubygem-bigdecimal-debuginfoUpgrade rubygem-psychUpgrade rubygem-psych-debuginfoUpgrade rubyUpgrade rubygem-jsonUpgrade rubygem-io-console-debuginfoUpgrade rubygem-mysql2Upgrade rubygem-pg-debugsourceUpgrade rubygem-bigdecimalUpgrade ruby-develUpgrade rubygem-io-consoleUpgrade rubygem-json-debuginfoUpgrade ruby-debuginfoUpgrade rubygem-pg-debuginfoUpgrade rubygem-mysql2-debuginfoUpgrade rubygem-mysql2-debugsource | Mar 12, 2024 | May 9, 2022 |
| Ubuntu | — | Upgrade ruby3.0Upgrade libruby3.0 | Jun 7, 2022 | May 9, 2022 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub