Schwachstellen / CVE-2022-28738

kritisch

CVE-2022-28738

Ruby: Double free in Regexp compilation

Veröffentlicht Geändert CWE 415
In der Trivy Database seit spätestens 24. Okt. 2026, 07:11 UTCWann der Eintrag vor diesem Build hinzukam, ist nicht erfasst.

Einstufung nach Quelle

NVD9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Red Hat7.7CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
Bitnami9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Trivys eigenes Label ist CRITICAL. Kritisch laut NVD, Bitnami. Niedriger laut Red Hat (mittel), AlmaLinux (mittel), Oracle (mittel), Rocky Linux (mittel), Ubuntu (mittel).

Beschreibung

A double free was found in the Regexp compiler in Ruby 3.x before 3.0.4 and 3.1.x before 3.1.2. If a victim attempts to create a Regexp from untrusted user input, an attacker may be able to write to unexpected memory locations.

Betroffene Pakete und behobene Versionen

QuellePaketBehoben in
bitnami::Bitnami Vulnerability Databaseruby, ruby-min3.0.4, 3.1.2
alma 8ruby:3.0::ruby, ruby:3.0::ruby-default-gems, ruby:3.0::ruby-devel und 25 weitere3.0.4-141.module_el8.6.0+3263+41cde0c0 und 19 weitere
alma 9ruby, ruby-default-gems, ruby-devel und 19 weitere3.0.4-160.el9_0 und 16 weitere
alpine 3.15ruby3.0.4-r0
alpine 3.16ruby3.1.2-r0
alpine 3.17ruby3.1.2-r0
alpine 3.18ruby3.1.2-r0
alpine 3.19ruby3.1.2-r0
alpine 3.20ruby3.1.2-r0
alpine 3.21ruby3.1.2-r0
alpine 3.22ruby3.1.2-r0
alpine 3.23ruby3.1.2-r0
Alle 216 Einträge aus 24 Quellen zeigen
QuellePaketBehoben in
bitnami::Bitnami Vulnerability Databaseruby3.0.4, 3.1.2
bitnami::Bitnami Vulnerability Databaseruby-min3.0.4, 3.1.2
alma 8ruby:3.0::ruby3.0.4-141.module_el8.6.0+3263+41cde0c0
alma 8ruby:3.0::ruby-default-gems3.0.4-141.module_el8.6.0+3263+41cde0c0
alma 8ruby:3.0::ruby-devel3.0.4-141.module_el8.6.0+3263+41cde0c0
alma 8ruby:3.0::ruby-doc3.0.4-141.module_el8.6.0+3263+41cde0c0
alma 8ruby:3.0::ruby-libs3.0.4-141.module_el8.6.0+3263+41cde0c0
alma 8ruby:3.0::rubygem-abrt0.4.0-1.module_el8.5.0+2595+0c654ebc
alma 8ruby:3.0::rubygem-abrt-doc0.4.0-1.module_el8.5.0+2595+0c654ebc
alma 8ruby:3.0::rubygem-bigdecimal3.0.0-141.module_el8.6.0+3263+41cde0c0
alma 8ruby:3.0::rubygem-bundler2.2.33-141.module_el8.6.0+3263+41cde0c0
alma 8ruby:3.0::rubygem-io-console0.5.7-141.module_el8.6.0+3263+41cde0c0
alma 8ruby:3.0::rubygem-irb1.3.5-141.module_el8.6.0+3263+41cde0c0
alma 8ruby:3.0::rubygem-json2.5.1-141.module_el8.6.0+3263+41cde0c0
alma 8ruby:3.0::rubygem-minitest5.14.2-141.module_el8.6.0+3263+41cde0c0
alma 8ruby:3.0::rubygem-mysql20.5.3-1.module_el8.5.0+2595+0c654ebc
alma 8ruby:3.0::rubygem-mysql2-doc0.5.3-1.module_el8.5.0+2595+0c654ebc
alma 8ruby:3.0::rubygem-pg1.2.3-1.module_el8.5.0+2595+0c654ebc
alma 8ruby:3.0::rubygem-pg-doc1.2.3-1.module_el8.5.0+2595+0c654ebc
alma 8ruby:3.0::rubygem-power_assert1.2.0-141.module_el8.6.0+3263+41cde0c0
alma 8ruby:3.0::rubygem-psych3.3.2-141.module_el8.6.0+3263+41cde0c0
alma 8ruby:3.0::rubygem-rake13.0.3-141.module_el8.6.0+3263+41cde0c0
alma 8ruby:3.0::rubygem-rbs1.4.0-141.module_el8.6.0+3263+41cde0c0
alma 8ruby:3.0::rubygem-rdoc6.3.3-141.module_el8.6.0+3263+41cde0c0
alma 8ruby:3.0::rubygem-rexml3.2.5-141.module_el8.6.0+3263+41cde0c0
alma 8ruby:3.0::rubygem-rss0.2.9-141.module_el8.6.0+3263+41cde0c0
alma 8ruby:3.0::rubygem-test-unit3.3.7-141.module_el8.6.0+3263+41cde0c0
alma 8ruby:3.0::rubygem-typeprof0.15.2-141.module_el8.6.0+3263+41cde0c0
alma 8ruby:3.0::rubygems3.2.33-141.module_el8.6.0+3263+41cde0c0
alma 8ruby:3.0::rubygems-devel3.2.33-141.module_el8.6.0+3263+41cde0c0
alma 9ruby3.0.4-160.el9_0
alma 9ruby-default-gems3.0.4-160.el9_0
alma 9ruby-devel3.0.4-160.el9_0
alma 9ruby-doc3.0.4-160.el9_0
alma 9ruby-libs3.0.4-160.el9_0
alma 9rubygem-bigdecimal3.0.0-160.el9_0
alma 9rubygem-bundler2.2.33-160.el9_0
alma 9rubygem-io-console0.5.7-160.el9_0
alma 9rubygem-irb1.3.5-160.el9_0
alma 9rubygem-json2.5.1-160.el9_0
alma 9rubygem-minitest5.14.2-160.el9_0
alma 9rubygem-power_assert1.2.0-160.el9_0
alma 9rubygem-psych3.3.2-160.el9_0
alma 9rubygem-rake13.0.3-160.el9_0
alma 9rubygem-rbs1.4.0-160.el9_0
alma 9rubygem-rdoc6.3.3-160.el9_0
alma 9rubygem-rexml3.2.5-160.el9_0
alma 9rubygem-rss0.2.9-160.el9_0
alma 9rubygem-test-unit3.3.7-160.el9_0
alma 9rubygem-typeprof0.15.2-160.el9_0
alma 9rubygems3.2.33-160.el9_0
alma 9rubygems-devel3.2.33-160.el9_0
alpine 3.15ruby3.0.4-r0
alpine 3.16ruby3.1.2-r0
alpine 3.17ruby3.1.2-r0
alpine 3.18ruby3.1.2-r0
alpine 3.19ruby3.1.2-r0
alpine 3.20ruby3.1.2-r0
alpine 3.21ruby3.1.2-r0
alpine 3.22ruby3.1.2-r0
alpine 3.23ruby3.1.2-r0
alpine 3.24ruby3.1.2-r0
alpine edgeruby3.1.2-r0
Oracle Linux 8ruby3.0.4-141.module+el8.6.0+20741+4fdba061
Oracle Linux 8ruby-default-gems3.0.4-141.module+el8.6.0+20741+4fdba061
Oracle Linux 8ruby-devel3.0.4-141.module+el8.6.0+20741+4fdba061
Oracle Linux 8ruby-doc3.0.4-141.module+el8.6.0+20741+4fdba061
Oracle Linux 8ruby-libs3.0.4-141.module+el8.6.0+20741+4fdba061
Oracle Linux 8rubygem-abrt0.4.0-1.module+el8.5.0+20321+0ba6c954
Oracle Linux 8rubygem-abrt-doc0.4.0-1.module+el8.5.0+20321+0ba6c954
Oracle Linux 8rubygem-bigdecimal3.0.0-141.module+el8.6.0+20741+4fdba061
Oracle Linux 8rubygem-bundler2.2.33-141.module+el8.6.0+20741+4fdba061
Oracle Linux 8rubygem-io-console0.5.7-141.module+el8.6.0+20741+4fdba061
Oracle Linux 8rubygem-irb1.3.5-141.module+el8.6.0+20741+4fdba061
Oracle Linux 8rubygem-json2.5.1-141.module+el8.6.0+20741+4fdba061
Oracle Linux 8rubygem-minitest5.14.2-141.module+el8.6.0+20741+4fdba061
Oracle Linux 8rubygem-mysql20.5.3-1.module+el8.5.0+20321+0ba6c954
Oracle Linux 8rubygem-mysql2-doc0.5.3-1.module+el8.5.0+20321+0ba6c954
Oracle Linux 8rubygem-pg1.2.3-1.module+el8.5.0+20321+0ba6c954
Oracle Linux 8rubygem-pg-doc1.2.3-1.module+el8.5.0+20321+0ba6c954
Oracle Linux 8rubygem-power_assert1.2.0-141.module+el8.6.0+20741+4fdba061
Oracle Linux 8rubygem-psych3.3.2-141.module+el8.6.0+20741+4fdba061
Oracle Linux 8rubygem-rake13.0.3-141.module+el8.6.0+20741+4fdba061
Oracle Linux 8rubygem-rbs1.4.0-141.module+el8.6.0+20741+4fdba061
Oracle Linux 8rubygem-rdoc6.3.3-141.module+el8.6.0+20741+4fdba061
Oracle Linux 8rubygem-rexml3.2.5-141.module+el8.6.0+20741+4fdba061
Oracle Linux 8rubygem-rss0.2.9-141.module+el8.6.0+20741+4fdba061
Oracle Linux 8rubygem-test-unit3.3.7-141.module+el8.6.0+20741+4fdba061
Oracle Linux 8rubygem-typeprof0.15.2-141.module+el8.6.0+20741+4fdba061
Oracle Linux 8rubygems3.2.33-141.module+el8.6.0+20741+4fdba061
Oracle Linux 8rubygems-devel3.2.33-141.module+el8.6.0+20741+4fdba061
Oracle Linux 9ruby3.0.4-160.el9_0
Oracle Linux 9ruby-default-gems3.0.4-160.el9_0
Oracle Linux 9ruby-devel3.0.4-160.el9_0
Oracle Linux 9ruby-doc3.0.4-160.el9_0
Oracle Linux 9ruby-libs3.0.4-160.el9_0
Oracle Linux 9rubygem-bigdecimal3.0.0-160.el9_0
Oracle Linux 9rubygem-bundler2.2.33-160.el9_0
Oracle Linux 9rubygem-io-console0.5.7-160.el9_0
Oracle Linux 9rubygem-irb1.3.5-160.el9_0
Oracle Linux 9rubygem-json2.5.1-160.el9_0
Oracle Linux 9rubygem-minitest5.14.2-160.el9_0
Oracle Linux 9rubygem-power_assert1.2.0-160.el9_0
Oracle Linux 9rubygem-psych3.3.2-160.el9_0
Oracle Linux 9rubygem-rake13.0.3-160.el9_0
Oracle Linux 9rubygem-rbs1.4.0-160.el9_0
Oracle Linux 9rubygem-rdoc6.3.3-160.el9_0
Oracle Linux 9rubygem-rexml3.2.5-160.el9_0
Oracle Linux 9rubygem-rss0.2.9-160.el9_0
Oracle Linux 9rubygem-test-unit3.3.7-160.el9_0
Oracle Linux 9rubygem-typeprof0.15.2-160.el9_0
Oracle Linux 9rubygems3.2.33-160.el9_0
Oracle Linux 9rubygems-devel3.2.33-160.el9_0
rapidfort Oracle Linux 9ruby0:3.0.4-160.el9_0
rapidfort Oracle Linux 9ruby-default-gems0:3.0.4-160.el9_0
rapidfort Oracle Linux 9ruby-devel0:3.0.4-160.el9_0
rapidfort Oracle Linux 9ruby-libs0:3.0.4-160.el9_0
rapidfort Oracle Linux 9rubygem-bigdecimal0:3.0.0-160.el9_0
rapidfort Oracle Linux 9rubygem-bundler0:2.2.33-160.el9_0
rapidfort Oracle Linux 9rubygem-io-console0:0.5.7-160.el9_0
rapidfort Oracle Linux 9rubygem-irb0:1.3.5-160.el9_0
rapidfort Oracle Linux 9rubygem-json0:2.5.1-160.el9_0
rapidfort Oracle Linux 9rubygem-minitest0:5.14.2-160.el9_0
rapidfort Oracle Linux 9rubygem-power_assert0:1.2.0-160.el9_0
rapidfort Oracle Linux 9rubygem-psych0:3.3.2-160.el9_0
rapidfort Oracle Linux 9rubygem-rake0:13.0.3-160.el9_0
rapidfort Oracle Linux 9rubygem-rbs0:1.4.0-160.el9_0
rapidfort Oracle Linux 9rubygem-rdoc0:6.3.3-160.el9_0
rapidfort Oracle Linux 9rubygem-rexml0:3.2.5-160.el9_0
rapidfort Oracle Linux 9rubygem-rss0:0.2.9-160.el9_0
rapidfort Oracle Linux 9rubygem-test-unit0:3.3.7-160.el9_0
rapidfort Oracle Linux 9rubygem-typeprof0:0.15.2-160.el9_0
rapidfort Oracle Linux 9rubygems0:3.2.33-160.el9_0
rapidfort Oracle Linux 9rubygems-devel0:3.2.33-160.el9_0
rapidfort rocky 9ruby0:3.0.4-160.el9_0
rapidfort ubuntu 20.04ruby3.00:3.0.2-7ubuntu2.1
rapidfort ubuntu 22.04ruby3.00:3.0.2-7ubuntu2.1
rapidfort ubuntu 24.04ruby3.00:3.0.2-7ubuntu2.1
rocky 8ruby3.0.4-141.module+el8.6.0+1002+a7dba0ac
rocky 8ruby-default-gems3.0.4-141.module+el8.6.0+1002+a7dba0ac
rocky 8ruby-devel3.0.4-141.module+el8.6.0+1002+a7dba0ac
rocky 8ruby-doc3.0.4-141.module+el8.6.0+1002+a7dba0ac
rocky 8ruby-libs3.0.4-141.module+el8.6.0+1002+a7dba0ac
rocky 8ruby:3.0::ruby3.0.4-141.module+el8.6.0+1002+a7dba0ac
rocky 8ruby:3.0::ruby-default-gems3.0.4-141.module+el8.6.0+1002+a7dba0ac
rocky 8ruby:3.0::ruby-devel3.0.4-141.module+el8.6.0+1002+a7dba0ac
rocky 8ruby:3.0::ruby-doc3.0.4-141.module+el8.6.0+1002+a7dba0ac
rocky 8ruby:3.0::ruby-libs3.0.4-141.module+el8.6.0+1002+a7dba0ac
rocky 8ruby:3.0::rubygem-abrt0.4.0-1.module+el8.5.0+668+665814fa
rocky 8ruby:3.0::rubygem-abrt-doc0.4.0-1.module+el8.5.0+668+665814fa
rocky 8ruby:3.0::rubygem-bigdecimal3.0.0-141.module+el8.6.0+1002+a7dba0ac
rocky 8ruby:3.0::rubygem-bundler2.2.33-141.module+el8.6.0+1002+a7dba0ac
rocky 8ruby:3.0::rubygem-io-console0.5.7-141.module+el8.6.0+1002+a7dba0ac
rocky 8ruby:3.0::rubygem-irb1.3.5-141.module+el8.6.0+1002+a7dba0ac
rocky 8ruby:3.0::rubygem-json2.5.1-141.module+el8.6.0+1002+a7dba0ac
rocky 8ruby:3.0::rubygem-minitest5.14.2-141.module+el8.6.0+1002+a7dba0ac
rocky 8ruby:3.0::rubygem-mysql20.5.3-1.module+el8.5.0+668+665814fa
rocky 8ruby:3.0::rubygem-mysql2-doc0.5.3-1.module+el8.5.0+668+665814fa
rocky 8ruby:3.0::rubygem-pg1.2.3-1.module+el8.5.0+668+665814fa
rocky 8ruby:3.0::rubygem-pg-doc1.2.3-1.module+el8.5.0+668+665814fa
rocky 8ruby:3.0::rubygem-power_assert1.2.0-141.module+el8.6.0+1002+a7dba0ac
rocky 8ruby:3.0::rubygem-psych3.3.2-141.module+el8.6.0+1002+a7dba0ac
rocky 8ruby:3.0::rubygem-rake13.0.3-141.module+el8.6.0+1002+a7dba0ac
rocky 8ruby:3.0::rubygem-rbs1.4.0-141.module+el8.6.0+1002+a7dba0ac
rocky 8ruby:3.0::rubygem-rdoc6.3.3-141.module+el8.6.0+1002+a7dba0ac
rocky 8ruby:3.0::rubygem-rexml3.2.5-141.module+el8.6.0+1002+a7dba0ac
rocky 8ruby:3.0::rubygem-rss0.2.9-141.module+el8.6.0+1002+a7dba0ac
rocky 8ruby:3.0::rubygem-test-unit3.3.7-141.module+el8.6.0+1002+a7dba0ac
rocky 8ruby:3.0::rubygem-typeprof0.15.2-141.module+el8.6.0+1002+a7dba0ac
rocky 8ruby:3.0::rubygems3.2.33-141.module+el8.6.0+1002+a7dba0ac
rocky 8ruby:3.0::rubygems-devel3.2.33-141.module+el8.6.0+1002+a7dba0ac
rocky 8rubygem-abrt0.4.0-1.module+el8.6.0+1001+b5678180
rocky 8rubygem-abrt-doc0.4.0-1.module+el8.6.0+1001+b5678180
rocky 8rubygem-bigdecimal3.0.0-141.module+el8.6.0+1002+a7dba0ac
rocky 8rubygem-bundler2.2.33-141.module+el8.6.0+1002+a7dba0ac
rocky 8rubygem-io-console0.5.7-141.module+el8.6.0+1002+a7dba0ac
rocky 8rubygem-irb1.3.5-141.module+el8.6.0+1002+a7dba0ac
rocky 8rubygem-json2.5.1-141.module+el8.6.0+1002+a7dba0ac
rocky 8rubygem-minitest5.14.2-141.module+el8.6.0+1002+a7dba0ac
rocky 8rubygem-mysql20.5.3-1.module+el8.6.0+1001+b5678180
rocky 8rubygem-mysql2-doc0.5.3-1.module+el8.6.0+1001+b5678180
rocky 8rubygem-pg1.2.3-1.module+el8.6.0+1001+b5678180
rocky 8rubygem-pg-doc1.2.3-1.module+el8.6.0+1001+b5678180
rocky 8rubygem-power_assert1.2.0-141.module+el8.6.0+1002+a7dba0ac
rocky 8rubygem-psych3.3.2-141.module+el8.6.0+1002+a7dba0ac
rocky 8rubygem-rake13.0.3-141.module+el8.6.0+1002+a7dba0ac
rocky 8rubygem-rbs1.4.0-141.module+el8.6.0+1002+a7dba0ac
rocky 8rubygem-rdoc6.3.3-141.module+el8.6.0+1002+a7dba0ac
rocky 8rubygem-rexml3.2.5-141.module+el8.6.0+1002+a7dba0ac
rocky 8rubygem-rss0.2.9-141.module+el8.6.0+1002+a7dba0ac
rocky 8rubygem-test-unit3.3.7-141.module+el8.6.0+1002+a7dba0ac
rocky 8rubygem-typeprof0.15.2-141.module+el8.6.0+1002+a7dba0ac
rocky 8rubygems3.2.33-141.module+el8.6.0+1002+a7dba0ac
rocky 8rubygems-devel3.2.33-141.module+el8.6.0+1002+a7dba0ac
rocky 9ruby3.0.4-160.el9_0
rocky 9ruby-default-gems3.0.4-160.el9_0
rocky 9ruby-devel3.0.4-160.el9_0
rocky 9ruby-libs3.0.4-160.el9_0
rocky 9rubygem-bigdecimal3.0.0-160.el9_0
rocky 9rubygem-bundler2.2.33-160.el9_0
rocky 9rubygem-io-console0.5.7-160.el9_0
rocky 9rubygem-irb1.3.5-160.el9_0
rocky 9rubygem-json2.5.1-160.el9_0
rocky 9rubygem-minitest5.14.2-160.el9_0
rocky 9rubygem-power_assert1.2.0-160.el9_0
rocky 9rubygem-psych3.3.2-160.el9_0
rocky 9rubygem-rake13.0.3-160.el9_0
rocky 9rubygem-rbs1.4.0-160.el9_0
rocky 9rubygem-rdoc6.3.3-160.el9_0
rocky 9rubygem-rexml3.2.5-160.el9_0
rocky 9rubygem-rss0.2.9-160.el9_0
rocky 9rubygem-test-unit3.3.7-160.el9_0
rocky 9rubygem-typeprof0.15.2-160.el9_0
rocky 9rubygems3.2.33-160.el9_0
rocky 9rubygems-devel3.2.33-160.el9_0
ubuntu 22.04ruby3.03.0.2-7ubuntu2.1

Referenzen

Alle 25 Referenzen

Vulnerability data compiled from the Trivy vulnerability database (trivy-db, Aqua Security, Apache License 2.0), which aggregates third-party advisories. CVE records are published by The MITRE Corporation under the CVE Terms of Use; CVE is a trademark of MITRE. This product uses data from the NVD API but is not endorsed or certified by the NVD. Severity, titles and advisory data from the GitHub Advisory Database (CC BY 4.0), Red Hat security data (CC BY 4.0) and the other sources linked on each entry. Entries may be summarised or re-formatted; the linked original is the authoritative record.