CVE-2022-28738
Fixed in a distro release EPSS 3%
A double free was found in the Regexp compiler in Ruby 3.x before 3.0.4 and 3.1.x before 3.1.2. If a victim attempts to create a Regexp from untrusted user input, an attacker may be able to write to unexpected memory locations.
Products: ruby-lang ruby
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| AlmaLinux 8 | ruby | 3.0.4-141.module_el8.6.0+3263+41cde0c0 |
| AlmaLinux 8 | ruby-default-gems | 3.0.4-141.module_el8.6.0+3263+41cde0c0 |
| AlmaLinux 8 | ruby-devel | 3.0.4-141.module_el8.6.0+3263+41cde0c0 |
| AlmaLinux 8 | ruby-doc | 3.0.4-141.module_el8.6.0+3263+41cde0c0 |
| AlmaLinux 8 | ruby-libs | 3.0.4-141.module_el8.6.0+3263+41cde0c0 |
| AlmaLinux 8 | rubygem-abrt | 0.4.0-1.module_el8.5.0+2595+0c654ebc |
| AlmaLinux 8 | rubygem-abrt-doc | 0.4.0-1.module_el8.5.0+2595+0c654ebc |
| AlmaLinux 8 | rubygem-bigdecimal | 3.0.0-141.module_el8.6.0+3263+41cde0c0 |
| AlmaLinux 8 | rubygem-bundler | 2.2.33-141.module_el8.6.0+3263+41cde0c0 |
| AlmaLinux 8 | rubygem-io-console | 0.5.7-141.module_el8.6.0+3263+41cde0c0 |
| AlmaLinux 8 | rubygem-irb | 1.3.5-141.module_el8.6.0+3263+41cde0c0 |
| AlmaLinux 8 | rubygem-json | 2.5.1-141.module_el8.6.0+3263+41cde0c0 |
| AlmaLinux 8 | rubygem-minitest | 5.14.2-141.module_el8.6.0+3263+41cde0c0 |
| AlmaLinux 8 | rubygem-mysql2 | 0.5.3-1.module_el8.5.0+2595+0c654ebc |
| AlmaLinux 8 | rubygem-mysql2 | 0.5.3-1.module_el8.6.0+3144+d138acf1 |
| AlmaLinux 8 | rubygem-mysql2 | 0.5.3-1.module_el8.5.0+118+1ab773e1 |
| AlmaLinux 8 | rubygem-mysql2-doc | 0.5.3-1.module_el8.5.0+2595+0c654ebc |
| AlmaLinux 8 | rubygem-pg | 1.2.3-1.module_el8.5.0+2595+0c654ebc |
| AlmaLinux 8 | rubygem-pg | 1.2.3-1.module_el8.5.0+118+1ab773e1 |
| AlmaLinux 8 | rubygem-pg | 1.2.3-1.module_el8.6.0+3144+d138acf1 |
| AlmaLinux 8 | rubygem-pg-doc | 1.2.3-1.module_el8.5.0+2595+0c654ebc |
| AlmaLinux 8 | rubygem-power_assert | 1.2.0-141.module_el8.6.0+3263+41cde0c0 |
| AlmaLinux 8 | rubygem-psych | 3.3.2-141.module_el8.6.0+3263+41cde0c0 |
| AlmaLinux 8 | rubygem-rake | 13.0.3-141.module_el8.6.0+3263+41cde0c0 |
| AlmaLinux 8 | rubygem-rbs | 1.4.0-141.module_el8.6.0+3263+41cde0c0 |
| AlmaLinux 8 | rubygem-rdoc | 6.3.3-141.module_el8.6.0+3263+41cde0c0 |
| AlmaLinux 8 | rubygem-rexml | 3.2.5-141.module_el8.6.0+3263+41cde0c0 |
| AlmaLinux 8 | rubygem-rss | 0.2.9-141.module_el8.6.0+3263+41cde0c0 |
| AlmaLinux 8 | rubygem-test-unit | 3.3.7-141.module_el8.6.0+3263+41cde0c0 |
| AlmaLinux 8 | rubygem-typeprof | 0.15.2-141.module_el8.6.0+3263+41cde0c0 |
| AlmaLinux 8 | rubygems | 3.2.33-141.module_el8.6.0+3263+41cde0c0 |
| AlmaLinux 8 | rubygems-devel | 3.2.33-141.module_el8.6.0+3263+41cde0c0 |
| AlmaLinux 9 | ruby | 3.0.4-160.el9_0 |
| AlmaLinux 9 | ruby-default-gems | 3.0.4-160.el9_0 |
| AlmaLinux 9 | ruby-devel | 3.0.4-160.el9_0 |
| AlmaLinux 9 | ruby-doc | 3.0.4-160.el9_0 |
| AlmaLinux 9 | ruby-libs | 3.0.4-160.el9_0 |
| AlmaLinux 9 | rubygem-bigdecimal | 3.0.0-160.el9_0 |
| AlmaLinux 9 | rubygem-bundler | 2.2.33-160.el9_0 |
| AlmaLinux 9 | rubygem-io-console | 0.5.7-160.el9_0 |
| AlmaLinux 9 | rubygem-irb | 1.3.5-160.el9_0 |
| AlmaLinux 9 | rubygem-json | 2.5.1-160.el9_0 |
| AlmaLinux 9 | rubygem-minitest | 5.14.2-160.el9_0 |
| AlmaLinux 9 | rubygem-power_assert | 1.2.0-160.el9_0 |
| AlmaLinux 9 | rubygem-psych | 3.3.2-160.el9_0 |
| AlmaLinux 9 | rubygem-rake | 13.0.3-160.el9_0 |
| AlmaLinux 9 | rubygem-rbs | 1.4.0-160.el9_0 |
| AlmaLinux 9 | rubygem-rdoc | 6.3.3-160.el9_0 |
| AlmaLinux 9 | rubygem-rexml | 3.2.5-160.el9_0 |
| AlmaLinux 9 | rubygem-rss | 0.2.9-160.el9_0 |
| AlmaLinux 9 | rubygem-test-unit | 3.3.7-160.el9_0 |
| AlmaLinux 9 | rubygem-typeprof | 0.15.2-160.el9_0 |
| AlmaLinux 9 | rubygems | 3.2.33-160.el9_0 |
| AlmaLinux 9 | rubygems-devel | 3.2.33-160.el9_0 |
| Alpine 3.15 | ruby | 3.0.4-r0 |
| Alpine 3.16 | ruby | 3.1.2-r0 |
| Alpine 3.17 | ruby | 3.1.2-r0 |
| Alpine 3.18 | ruby | 3.1.2-r0 |
| Alpine 3.19 | ruby | 3.1.2-r0 |
| Alpine 3.20 | ruby | 3.1.2-r0 |
| Alpine 3.21 | ruby | 3.1.2-r0 |
| Alpine 3.22 | ruby | 3.1.2-r0 |
| Alpine 3.23 | ruby | 3.1.2-r0 |
| Alpine 3.24 | ruby | 3.1.2-r0 |
| Arch Linux | ruby | 3.0.4-1 |
| Red Hat Enterprise Linux 8 | ruby | 0:3.0.4-141.module+el8.6.0+16311+3e5e17e9 |
| Red Hat Enterprise Linux 8 | ruby-debuginfo | 0:3.0.4-141.module+el8.6.0+16311+3e5e17e9 |
| Red Hat Enterprise Linux 8 | ruby-debugsource | 0:3.0.4-141.module+el8.6.0+16311+3e5e17e9 |
| Red Hat Enterprise Linux 8 | ruby-default-gems | 0:3.0.4-141.module+el8.6.0+16311+3e5e17e9 |
| Red Hat Enterprise Linux 8 | ruby-devel | 0:3.0.4-141.module+el8.6.0+16311+3e5e17e9 |
| Red Hat Enterprise Linux 8 | ruby-doc | 0:3.0.4-141.module+el8.6.0+16311+3e5e17e9 |
| Red Hat Enterprise Linux 8 | ruby-libs | 0:3.0.4-141.module+el8.6.0+16311+3e5e17e9 |
| Red Hat Enterprise Linux 8 | ruby-libs-debuginfo | 0:3.0.4-141.module+el8.6.0+16311+3e5e17e9 |
| Red Hat Enterprise Linux 8 | rubygem-abrt | 0:0.4.0-1.module+el8.5.0+11580+845038eb |
| Red Hat Enterprise Linux 8 | rubygem-abrt-doc | 0:0.4.0-1.module+el8.5.0+11580+845038eb |
| Red Hat Enterprise Linux 8 | rubygem-bigdecimal | 0:3.0.0-141.module+el8.6.0+16311+3e5e17e9 |
| Red Hat Enterprise Linux 8 | rubygem-bigdecimal-debuginfo | 0:3.0.0-141.module+el8.6.0+16311+3e5e17e9 |
| Red Hat Enterprise Linux 8 | rubygem-bundler | 0:2.2.33-141.module+el8.6.0+16311+3e5e17e9 |
| Red Hat Enterprise Linux 8 | rubygem-io-console | 0:0.5.7-141.module+el8.6.0+16311+3e5e17e9 |
| Red Hat Enterprise Linux 8 | rubygem-io-console-debuginfo | 0:0.5.7-141.module+el8.6.0+16311+3e5e17e9 |
| Red Hat Enterprise Linux 8 | rubygem-irb | 0:1.3.5-141.module+el8.6.0+16311+3e5e17e9 |
| Red Hat Enterprise Linux 8 | rubygem-json | 0:2.5.1-141.module+el8.6.0+16311+3e5e17e9 |
| Red Hat Enterprise Linux 8 | rubygem-json-debuginfo | 0:2.5.1-141.module+el8.6.0+16311+3e5e17e9 |
| Red Hat Enterprise Linux 8 | rubygem-minitest | 0:5.14.2-141.module+el8.6.0+16311+3e5e17e9 |
| Red Hat Enterprise Linux 8 | rubygem-mysql2 | 0:0.5.3-1.module+el8.5.0+11580+845038eb |
| Red Hat Enterprise Linux 8 | rubygem-mysql2-debuginfo | 0:0.5.3-1.module+el8.5.0+11580+845038eb |
| Red Hat Enterprise Linux 8 | rubygem-mysql2-debugsource | 0:0.5.3-1.module+el8.5.0+11580+845038eb |
| Red Hat Enterprise Linux 8 | rubygem-mysql2-doc | 0:0.5.3-1.module+el8.5.0+11580+845038eb |
| Red Hat Enterprise Linux 8 | rubygem-pg | 0:1.2.3-1.module+el8.5.0+11580+845038eb |
| Red Hat Enterprise Linux 8 | rubygem-pg-debuginfo | 0:1.2.3-1.module+el8.5.0+11580+845038eb |
| Red Hat Enterprise Linux 8 | rubygem-pg-debugsource | 0:1.2.3-1.module+el8.5.0+11580+845038eb |
| Red Hat Enterprise Linux 8 | rubygem-pg-doc | 0:1.2.3-1.module+el8.5.0+11580+845038eb |
| Red Hat Enterprise Linux 8 | rubygem-power_assert | 0:1.2.0-141.module+el8.6.0+16311+3e5e17e9 |
| Red Hat Enterprise Linux 8 | rubygem-psych | 0:3.3.2-141.module+el8.6.0+16311+3e5e17e9 |
| Red Hat Enterprise Linux 8 | rubygem-psych-debuginfo | 0:3.3.2-141.module+el8.6.0+16311+3e5e17e9 |
| Red Hat Enterprise Linux 8 | rubygem-rake | 0:13.0.3-141.module+el8.6.0+16311+3e5e17e9 |
| Red Hat Enterprise Linux 8 | rubygem-rbs | 0:1.4.0-141.module+el8.6.0+16311+3e5e17e9 |
| Red Hat Enterprise Linux 8 | rubygem-rdoc | 0:6.3.3-141.module+el8.6.0+16311+3e5e17e9 |
| Red Hat Enterprise Linux 8 | rubygem-rexml | 0:3.2.5-141.module+el8.6.0+16311+3e5e17e9 |
| Red Hat Enterprise Linux 8 | rubygem-rss | 0:0.2.9-141.module+el8.6.0+16311+3e5e17e9 |
| Red Hat Enterprise Linux 8 | rubygem-test-unit | 0:3.3.7-141.module+el8.6.0+16311+3e5e17e9 |
| Red Hat Enterprise Linux 8 | rubygem-typeprof | 0:0.15.2-141.module+el8.6.0+16311+3e5e17e9 |
| Red Hat Enterprise Linux 8 | rubygems | 0:3.2.33-141.module+el8.6.0+16311+3e5e17e9 |
| Red Hat Enterprise Linux 8 | rubygems-devel | 0:3.2.33-141.module+el8.6.0+16311+3e5e17e9 |
| Red Hat Enterprise Linux 9 | ruby | 0:3.0.4-160.el9_0 |
| Red Hat Enterprise Linux 9 | ruby-debuginfo | 0:3.0.4-160.el9_0 |
| Red Hat Enterprise Linux 9 | ruby-debugsource | 0:3.0.4-160.el9_0 |
| Red Hat Enterprise Linux 9 | ruby-default-gems | 0:3.0.4-160.el9_0 |
| Red Hat Enterprise Linux 9 | ruby-devel | 0:3.0.4-160.el9_0 |
| Red Hat Enterprise Linux 9 | ruby-doc | 0:3.0.4-160.el9_0 |
| Red Hat Enterprise Linux 9 | ruby-libs | 0:3.0.4-160.el9_0 |
| Red Hat Enterprise Linux 9 | ruby-libs-debuginfo | 0:3.0.4-160.el9_0 |
| Red Hat Enterprise Linux 9 | rubygem-bigdecimal | 0:3.0.0-160.el9_0 |
| Red Hat Enterprise Linux 9 | rubygem-bigdecimal-debuginfo | 0:3.0.0-160.el9_0 |
| Red Hat Enterprise Linux 9 | rubygem-bundler | 0:2.2.33-160.el9_0 |
| Red Hat Enterprise Linux 9 | rubygem-io-console | 0:0.5.7-160.el9_0 |
| Red Hat Enterprise Linux 9 | rubygem-io-console-debuginfo | 0:0.5.7-160.el9_0 |
| Red Hat Enterprise Linux 9 | rubygem-irb | 0:1.3.5-160.el9_0 |
| Red Hat Enterprise Linux 9 | rubygem-json | 0:2.5.1-160.el9_0 |
| Red Hat Enterprise Linux 9 | rubygem-json-debuginfo | 0:2.5.1-160.el9_0 |
| Red Hat Enterprise Linux 9 | rubygem-minitest | 0:5.14.2-160.el9_0 |
| Red Hat Enterprise Linux 9 | rubygem-power_assert | 0:1.2.0-160.el9_0 |
| Red Hat Enterprise Linux 9 | rubygem-psych | 0:3.3.2-160.el9_0 |
| Red Hat Enterprise Linux 9 | rubygem-psych-debuginfo | 0:3.3.2-160.el9_0 |
| Red Hat Enterprise Linux 9 | rubygem-rake | 0:13.0.3-160.el9_0 |
| Red Hat Enterprise Linux 9 | rubygem-rbs | 0:1.4.0-160.el9_0 |
| Red Hat Enterprise Linux 9 | rubygem-rdoc | 0:6.3.3-160.el9_0 |
| Red Hat Enterprise Linux 9 | rubygem-rexml | 0:3.2.5-160.el9_0 |
| Red Hat Enterprise Linux 9 | rubygem-rss | 0:0.2.9-160.el9_0 |
| Red Hat Enterprise Linux 9 | rubygem-test-unit | 0:3.3.7-160.el9_0 |
| Red Hat Enterprise Linux 9 | rubygem-typeprof | 0:0.15.2-160.el9_0 |
| Red Hat Enterprise Linux 9 | rubygems | 0:3.2.33-160.el9_0 |
| Red Hat Enterprise Linux 9 | rubygems-devel | 0:3.2.33-160.el9_0 |
| Red Hat rhel software collections 3 | rh-ruby30-ruby | 0:3.0.4-149.el7 |
| Red Hat rhel software collections 3 | rh-ruby30-ruby-debuginfo | 0:3.0.4-149.el7 |
| Red Hat rhel software collections 3 | rh-ruby30-ruby-default-gems | 0:3.0.4-149.el7 |
| Red Hat rhel software collections 3 | rh-ruby30-ruby-devel | 0:3.0.4-149.el7 |
| Red Hat rhel software collections 3 | rh-ruby30-ruby-doc | 0:3.0.4-149.el7 |
| Red Hat rhel software collections 3 | rh-ruby30-ruby-libs | 0:3.0.4-149.el7 |
| Red Hat rhel software collections 3 | rh-ruby30-rubygem-bigdecimal | 0:3.0.0-149.el7 |
| Red Hat rhel software collections 3 | rh-ruby30-rubygem-bundler | 0:2.2.33-149.el7 |
| Red Hat rhel software collections 3 | rh-ruby30-rubygem-io-console | 0:0.5.7-149.el7 |
| Red Hat rhel software collections 3 | rh-ruby30-rubygem-irb | 0:1.3.5-149.el7 |
| Red Hat rhel software collections 3 | rh-ruby30-rubygem-json | 0:2.5.1-149.el7 |
| Red Hat rhel software collections 3 | rh-ruby30-rubygem-minitest | 0:5.14.2-149.el7 |
| Red Hat rhel software collections 3 | rh-ruby30-rubygem-power_assert | 0:1.2.0-149.el7 |
| Red Hat rhel software collections 3 | rh-ruby30-rubygem-psych | 0:3.3.2-149.el7 |
| Red Hat rhel software collections 3 | rh-ruby30-rubygem-rake | 0:13.0.3-149.el7 |
| Red Hat rhel software collections 3 | rh-ruby30-rubygem-rbs | 0:1.4.0-149.el7 |
| Red Hat rhel software collections 3 | rh-ruby30-rubygem-rexml | 0:3.2.5-149.el7 |
| Red Hat rhel software collections 3 | rh-ruby30-rubygem-rss | 0:0.2.9-149.el7 |
| Red Hat rhel software collections 3 | rh-ruby30-rubygem-test-unit | 0:3.3.7-149.el7 |
| Red Hat rhel software collections 3 | rh-ruby30-rubygem-typeprof | 0:0.15.2-149.el7 |
| Red Hat rhel software collections 3 | rh-ruby30-rubygems | 0:3.2.33-149.el7 |
| Red Hat rhel software collections 3 | rh-ruby30-rubygems-devel | 0:3.2.33-149.el7 |
| Rocky Linux 8 | ruby | 0:3.0.4-141.module+el8.6.0+1002+a7dba0ac |
| Rocky Linux 8 | rubygem-abrt | 0:0.4.0-1.module+el8.5.0+668+665814fa |
| Rocky Linux 8 | rubygem-abrt | 0:0.4.0-1.module+el8.4.0+411+b946f28c |
| Rocky Linux 8 | rubygem-abrt | 0:0.4.0-1.module+el8.4.0+594+11b6673a |
| Rocky Linux 8 | rubygem-mysql2 | 0:0.5.3-1.module+el8.5.0+668+665814fa |
| Rocky Linux 8 | rubygem-mysql2 | 0:0.5.3-1.module+el8.4.0+411+b946f28c |
| Rocky Linux 8 | rubygem-mysql2 | 0:0.5.3-1.module+el8.4.0+594+11b6673a |
| Rocky Linux 8 | rubygem-pg | 0:1.2.3-1.module+el8.5.0+668+665814fa |
| Rocky Linux 8 | rubygem-pg | 0:1.2.3-1.module+el8.4.0+411+b946f28c |
| Rocky Linux 8 | rubygem-pg | 0:1.2.3-1.module+el8.4.0+594+11b6673a |
| Rocky Linux 9 | ruby | 0:3.0.4-160.el9_0 |
| Ubuntu 18.04 LTS | ruby2.5 | 2.5.1-1ubuntu1.12 |
| Ubuntu 20.04 LTS | ruby2.7 | 2.7.0-5ubuntu1.7 |
| Ubuntu 22.04 LTS | ruby3.0 | 3.0.2-7ubuntu2.1 |
| openSUSE Tumbleweed | ruby3.1 | 3.1.2-1.1 |
| openSUSE Tumbleweed | ruby3.2 | 3.2.1-1.1 |
| openSUSE Tumbleweed | ruby3.3 | 3.3.0-1.2 |
| openSUSE Tumbleweed | ruby3.4 | 3.4.1-1.1 |
| openSUSE Tumbleweed | ruby4.0 | 4.0.0~preview2-1.1 |