A double free was found in the Regexp compiler in Ruby 3.x before 3.0.4 and 3.1.x before 3.1.2. If a victim attempts to create a Regexp from untrusted user input, an attacker may be able to write to unexpected memory locations.
CVSS Details
- CVSS 3.1 Base Score: 9.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade rubygem-rakeUpgrade rubygem-rexmlUpgrade rubygem-bigdecimalUpgrade rubygem-psychUpgrade rubygems-develUpgrade ruby-docUpgrade rubygem-rssUpgrade rubygem-io-consoleUpgrade rubygem-pg-docUpgrade rubygem-jsonUpgrade ruby-libsUpgrade rubygem-bundlerUpgrade rubygem-irbUpgrade rubygem-abrt-docUpgrade rubygem-power_assertUpgrade rubyUpgrade rubygemsUpgrade rubygem-test-unitUpgrade rubygem-pgUpgrade rubygem-abrtUpgrade rubygem-typeprofUpgrade rubygem-mysql2-docUpgrade rubygem-mysql2Upgrade rubygem-minitestUpgrade ruby-develUpgrade rubygem-rdocUpgrade rubygem-rbsUpgrade ruby-default-gems | Oct 20, 2022 | May 9, 2022 |
| Alpine Linux | — | Upgrade ruby | Aug 22, 2024 | May 9, 2022 |
| Amazon Linux Ami 2 | — | Upgrade rubygem-io-consoleUpgrade rubygem-bigdecimalUpgrade rubygem-test-unitUpgrade rubygem-rakeUpgrade ruby-docUpgrade ruby-debuginfoUpgrade rubygem-rexmlUpgrade ruby-libsUpgrade rubygems-develUpgrade rubygem-jsonUpgrade rubygemsUpgrade rubygem-typeprofUpgrade rubygem-psychUpgrade rubygem-irbUpgrade rubygem-bundlerUpgrade ruby-develUpgrade ruby-default-gemsUpgrade rubygem-rdocUpgrade rubyUpgrade rubygem-rbsUpgrade rubygem-rssUpgrade rubygem-minitestUpgrade rubygem-power_assert | Sep 28, 2023 | May 9, 2022 |
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | May 9, 2022 |
| Centos_linux | — | Upgrade ruby-debuginfoUpgrade rubygem-bigdecimalUpgrade rubygem-typeprofUpgrade rubygem-minitestUpgrade rubygem-rakeUpgrade rubygem-mysql2-debugsourceUpgrade rubygem-mysql2-docUpgrade rubygems-develUpgrade rubygem-rdocUpgrade rubygem-abrt-docUpgrade rubygem-io-consoleUpgrade rubygem-json-debuginfoUpgrade rubygem-test-unitUpgrade rubygem-io-console-debuginfoUpgrade rubygemsUpgrade rubygem-bigdecimal-debuginfoUpgrade rubygem-mysql2Upgrade ruby-libsUpgrade rubygem-pg-debugsourceUpgrade rubygem-jsonUpgrade rubygem-irbUpgrade ruby-default-gemsUpgrade rubygem-mysql2-debuginfoUpgrade rubygem-pgUpgrade rubygem-psychUpgrade rubygem-pg-debuginfoUpgrade ruby-docUpgrade rubygem-psych-debuginfoUpgrade rubyUpgrade rubygem-power_assertUpgrade rubygem-abrtUpgrade ruby-develUpgrade rubygem-rexmlUpgrade rubygem-rbsUpgrade ruby-libs-debuginfoUpgrade ruby-debugsourceUpgrade rubygem-pg-docUpgrade rubygem-bundlerUpgrade rubygem-rss | Oct 20, 2022 | May 9, 2022 |
| Freebsd | — | Upgrade ruby31Upgrade ruby30Upgrade rubyUpgrade ruby32 | Nov 4, 2022 | Apr 13, 2022 |
| Gentoo Linux | — | Upgrade dev-lang/ruby. | Jan 25, 2024 | May 9, 2022 |
| Oracle_linux | — | Upgrade rubygem-bundlerUpgrade rubygem-rbsUpgrade rubygem-abrtUpgrade rubygem-io-consoleUpgrade ruby-docUpgrade rubygem-mysql2Upgrade rubygem-irbUpgrade rubygem-bigdecimalUpgrade rubygem-rexmlUpgrade rubyUpgrade ruby-develUpgrade rubygem-rakeUpgrade rubygem-test-unitUpgrade rubygem-rdocUpgrade rubygems-develUpgrade rubygem-typeprofUpgrade rubygem-minitestUpgrade rubygem-abrt-docUpgrade ruby-default-gemsUpgrade rubygem-pg-docUpgrade rubygem-jsonUpgrade rubygem-psychUpgrade rubygem-rssUpgrade ruby-libsUpgrade rubygem-pgUpgrade rubygem-power_assertUpgrade rubygemsUpgrade rubygem-mysql2-doc | Sep 15, 2022 | Apr 14, 2022 |
| Redhat_linux | — | Upgrade rubygem-abrt-docUpgrade rubygemsUpgrade rubygems-develUpgrade rubygem-bigdecimalUpgrade rubygem-minitestUpgrade rubygem-mysql2-docUpgrade rubygem-pg-debuginfoUpgrade rubygem-rdocUpgrade ruby-libs-debuginfoUpgrade rubygem-io-consoleUpgrade ruby-debuginfoUpgrade rubygem-test-unitUpgrade rubygem-mysql2-debugsourceUpgrade rubygem-typeprofUpgrade rubygem-mysql2-debuginfoUpgrade rubygem-bigdecimal-debuginfoUpgrade rubygem-power_assertUpgrade rubygem-io-console-debuginfoUpgrade rubygem-json-debuginfoUpgrade rubygem-mysql2Upgrade rubygem-pg-debugsourceUpgrade rubygem-psychUpgrade rubygem-psych-debuginfoUpgrade ruby-develUpgrade ruby-default-gemsUpgrade rubygem-bundlerUpgrade rubygem-irbUpgrade rubygem-rssUpgrade rubygem-pg-docUpgrade ruby-debugsourceUpgrade rubygem-pgUpgrade ruby-docUpgrade rubyUpgrade ruby-libsUpgrade rubygem-rakeUpgrade rubygem-jsonUpgrade rubygem-rexmlUpgrade rubygem-rbsUpgrade rubygem-abrt | Oct 20, 2022 | May 9, 2022 |
| Rocky_linux | — | Upgrade ruby-libs-debuginfoUpgrade rubygem-psychUpgrade ruby-debugsourceUpgrade rubygem-psych-debuginfoUpgrade rubygem-pgUpgrade ruby-libsUpgrade rubygem-bigdecimal-debuginfoUpgrade rubygem-jsonUpgrade rubygem-pg-debugsourceUpgrade rubygem-io-consoleUpgrade rubygem-mysql2Upgrade rubygem-mysql2-debugsourceUpgrade rubygem-bigdecimalUpgrade rubygem-pg-debuginfoUpgrade ruby-debuginfoUpgrade rubygem-mysql2-debuginfoUpgrade rubygem-json-debuginfoUpgrade rubyUpgrade rubygem-io-console-debuginfoUpgrade ruby-devel | Mar 12, 2024 | May 9, 2022 |
| Ubuntu | — | Upgrade ruby3.0Upgrade libruby3.0 | Jun 7, 2022 | May 9, 2022 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub