A double free was found in the Regexp compiler in Ruby 3.x before 3.0.4 and 3.1.x before 3.1.2. If a victim attempts to create a Regexp from untrusted user input, an attacker may be able to write to unexpected memory locations.
CVSS Details
- CVSS 3.1 Base Score: 9.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade rubygem-abrt-docUpgrade rubygem-mysql2Upgrade ruby-develUpgrade rubygem-rbsUpgrade rubygem-power_assertUpgrade rubygem-pgUpgrade rubygemsUpgrade rubygem-irbUpgrade rubygem-bundlerUpgrade rubygem-rdocUpgrade ruby-default-gemsUpgrade rubygem-test-unitUpgrade rubygem-mysql2-docUpgrade rubygem-typeprofUpgrade rubygem-abrtUpgrade rubyUpgrade rubygem-minitestUpgrade rubygem-rssUpgrade rubygems-develUpgrade rubygem-psychUpgrade rubygem-rexmlUpgrade rubygem-io-consoleUpgrade rubygem-rakeUpgrade rubygem-pg-docUpgrade ruby-docUpgrade ruby-libsUpgrade rubygem-bigdecimalUpgrade rubygem-json | Oct 20, 2022 | May 9, 2022 |
| Alpine Linux | — | Upgrade ruby | Aug 22, 2024 | May 9, 2022 |
| Amazon Linux Ami 2 | — | Upgrade rubygem-rbsUpgrade rubygem-irbUpgrade rubygemsUpgrade rubygem-typeprofUpgrade rubygem-bundlerUpgrade rubygem-rdocUpgrade rubygem-rssUpgrade rubygem-minitestUpgrade rubyUpgrade ruby-default-gemsUpgrade ruby-develUpgrade rubygem-jsonUpgrade rubygem-power_assertUpgrade rubygem-psychUpgrade ruby-debuginfoUpgrade ruby-docUpgrade rubygem-bigdecimalUpgrade rubygem-rakeUpgrade rubygem-test-unitUpgrade rubygems-develUpgrade ruby-libsUpgrade rubygem-rexmlUpgrade rubygem-io-console | Sep 28, 2023 | May 9, 2022 |
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | May 9, 2022 |
| Centos_linux | — | Upgrade rubygem-mysql2-debugsourceUpgrade rubygem-io-consoleUpgrade rubygems-develUpgrade rubygem-rdocUpgrade rubygem-bigdecimal-debuginfoUpgrade rubygem-rakeUpgrade rubygem-minitestUpgrade rubygem-io-console-debuginfoUpgrade ruby-debuginfoUpgrade rubygemsUpgrade rubygem-bigdecimalUpgrade rubygem-json-debuginfoUpgrade rubygem-typeprofUpgrade rubygem-mysql2-docUpgrade rubygem-abrt-docUpgrade rubygem-test-unitUpgrade rubygem-bundlerUpgrade rubygem-psych-debuginfoUpgrade ruby-libs-debuginfoUpgrade rubygem-rexmlUpgrade rubygem-rbsUpgrade ruby-develUpgrade rubygem-psychUpgrade ruby-libsUpgrade ruby-docUpgrade rubygem-rssUpgrade ruby-debugsourceUpgrade rubygem-pg-debuginfoUpgrade rubygem-power_assertUpgrade rubygem-pg-docUpgrade rubygem-pg-debugsourceUpgrade rubygem-abrtUpgrade rubyUpgrade rubygem-pgUpgrade rubygem-mysql2Upgrade rubygem-jsonUpgrade rubygem-irbUpgrade ruby-default-gemsUpgrade rubygem-mysql2-debuginfo | Oct 20, 2022 | May 9, 2022 |
| Freebsd | — | Upgrade ruby30Upgrade ruby31Upgrade rubyUpgrade ruby32 | Nov 4, 2022 | Apr 13, 2022 |
| Gentoo Linux | — | Upgrade dev-lang/ruby. | Jan 25, 2024 | May 9, 2022 |
| Oracle_linux | — | Upgrade rubygem-mysql2-docUpgrade rubygemsUpgrade rubygem-typeprofUpgrade rubygem-pgUpgrade rubygem-pg-docUpgrade rubygem-minitestUpgrade rubygem-psychUpgrade rubygem-test-unitUpgrade rubygem-rdocUpgrade ruby-libsUpgrade rubygem-power_assertUpgrade rubygem-jsonUpgrade rubygem-abrt-docUpgrade rubygems-develUpgrade ruby-default-gemsUpgrade rubygem-rssUpgrade rubygem-io-consoleUpgrade rubygem-irbUpgrade ruby-docUpgrade rubygem-abrtUpgrade rubygem-rbsUpgrade rubygem-rakeUpgrade rubygem-rexmlUpgrade rubyUpgrade rubygem-bigdecimalUpgrade ruby-develUpgrade rubygem-mysql2Upgrade rubygem-bundler | Sep 15, 2022 | Apr 14, 2022 |
| Redhat_linux | — | Upgrade ruby-debuginfoUpgrade ruby-libs-debuginfoUpgrade rubygem-io-consoleUpgrade rubygem-bigdecimal-debuginfoUpgrade rubygem-mysql2-debugsourceUpgrade rubygem-typeprofUpgrade rubygem-io-console-debuginfoUpgrade rubygem-mysql2-debuginfoUpgrade rubygem-rdocUpgrade rubygemsUpgrade rubygem-test-unitUpgrade rubygem-abrt-docUpgrade rubygem-bigdecimalUpgrade rubygems-develUpgrade rubygem-mysql2-docUpgrade rubygem-minitestUpgrade rubygem-pg-debuginfoUpgrade rubygem-json-debuginfoUpgrade rubygem-power_assertUpgrade rubyUpgrade rubygem-rbsUpgrade rubygem-irbUpgrade rubygem-pg-debugsourceUpgrade rubygem-mysql2Upgrade rubygem-psych-debuginfoUpgrade ruby-develUpgrade rubygem-abrtUpgrade ruby-debugsourceUpgrade rubygem-bundlerUpgrade rubygem-pgUpgrade rubygem-rssUpgrade rubygem-psychUpgrade rubygem-pg-docUpgrade ruby-default-gemsUpgrade ruby-libsUpgrade rubygem-rakeUpgrade rubygem-jsonUpgrade ruby-docUpgrade rubygem-rexml | Oct 20, 2022 | May 9, 2022 |
| Rocky_linux | — | Upgrade rubyUpgrade rubygem-io-consoleUpgrade rubygem-pg-debuginfoUpgrade ruby-debuginfoUpgrade ruby-develUpgrade rubygem-bigdecimalUpgrade rubygem-pg-debugsourceUpgrade rubygem-io-console-debuginfoUpgrade rubygem-mysql2-debuginfoUpgrade rubygem-mysql2Upgrade rubygem-jsonUpgrade rubygem-mysql2-debugsourceUpgrade rubygem-json-debuginfoUpgrade rubygem-psychUpgrade rubygem-pgUpgrade ruby-libs-debuginfoUpgrade ruby-debugsourceUpgrade rubygem-psych-debuginfoUpgrade ruby-libsUpgrade rubygem-bigdecimal-debuginfo | Mar 12, 2024 | May 9, 2022 |
| Ubuntu | — | Upgrade libruby3.0Upgrade ruby3.0 | Jun 7, 2022 | May 9, 2022 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub