Zafiyetler / CVE-2022-28738

kritik

CVE-2022-28738

Ruby: Double free in Regexp compilation

Yayın Değişiklik CWE 415
En geç 24 Eki 2026, 07:11 UTC tarihinden beri Trivy database'indeO derlemeden önce ne zaman girdiği kayıtlı değil.

Kaynağa göre önem derecesi

NVD9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Red Hat7.7CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
Bitnami9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Trivy'nin kendi etiketi CRITICAL. Kritik diyenler: NVD, Bitnami. Daha düşük diyenler: Red Hat (orta), AlmaLinux (orta), Oracle (orta), Rocky Linux (orta), Ubuntu (orta).

Açıklama

A double free was found in the Regexp compiler in Ruby 3.x before 3.0.4 and 3.1.x before 3.1.2. If a victim attempts to create a Regexp from untrusted user input, an attacker may be able to write to unexpected memory locations.

Etkilenen paketler ve düzeltilmiş sürümler

KaynakPaketDüzeltildiği sürüm
bitnami::Bitnami Vulnerability Databaseruby, ruby-min3.0.4, 3.1.2
alma 8ruby:3.0::ruby, ruby:3.0::ruby-default-gems, ruby:3.0::ruby-devel ve 25 tane daha3.0.4-141.module_el8.6.0+3263+41cde0c0 ve 19 tane daha
alma 9ruby, ruby-default-gems, ruby-devel ve 19 tane daha3.0.4-160.el9_0 ve 16 tane daha
alpine 3.15ruby3.0.4-r0
alpine 3.16ruby3.1.2-r0
alpine 3.17ruby3.1.2-r0
alpine 3.18ruby3.1.2-r0
alpine 3.19ruby3.1.2-r0
alpine 3.20ruby3.1.2-r0
alpine 3.21ruby3.1.2-r0
alpine 3.22ruby3.1.2-r0
alpine 3.23ruby3.1.2-r0
24 kaynaktaki 216 kaydın hepsini göster
KaynakPaketDüzeltildiği sürüm
bitnami::Bitnami Vulnerability Databaseruby3.0.4, 3.1.2
bitnami::Bitnami Vulnerability Databaseruby-min3.0.4, 3.1.2
alma 8ruby:3.0::ruby3.0.4-141.module_el8.6.0+3263+41cde0c0
alma 8ruby:3.0::ruby-default-gems3.0.4-141.module_el8.6.0+3263+41cde0c0
alma 8ruby:3.0::ruby-devel3.0.4-141.module_el8.6.0+3263+41cde0c0
alma 8ruby:3.0::ruby-doc3.0.4-141.module_el8.6.0+3263+41cde0c0
alma 8ruby:3.0::ruby-libs3.0.4-141.module_el8.6.0+3263+41cde0c0
alma 8ruby:3.0::rubygem-abrt0.4.0-1.module_el8.5.0+2595+0c654ebc
alma 8ruby:3.0::rubygem-abrt-doc0.4.0-1.module_el8.5.0+2595+0c654ebc
alma 8ruby:3.0::rubygem-bigdecimal3.0.0-141.module_el8.6.0+3263+41cde0c0
alma 8ruby:3.0::rubygem-bundler2.2.33-141.module_el8.6.0+3263+41cde0c0
alma 8ruby:3.0::rubygem-io-console0.5.7-141.module_el8.6.0+3263+41cde0c0
alma 8ruby:3.0::rubygem-irb1.3.5-141.module_el8.6.0+3263+41cde0c0
alma 8ruby:3.0::rubygem-json2.5.1-141.module_el8.6.0+3263+41cde0c0
alma 8ruby:3.0::rubygem-minitest5.14.2-141.module_el8.6.0+3263+41cde0c0
alma 8ruby:3.0::rubygem-mysql20.5.3-1.module_el8.5.0+2595+0c654ebc
alma 8ruby:3.0::rubygem-mysql2-doc0.5.3-1.module_el8.5.0+2595+0c654ebc
alma 8ruby:3.0::rubygem-pg1.2.3-1.module_el8.5.0+2595+0c654ebc
alma 8ruby:3.0::rubygem-pg-doc1.2.3-1.module_el8.5.0+2595+0c654ebc
alma 8ruby:3.0::rubygem-power_assert1.2.0-141.module_el8.6.0+3263+41cde0c0
alma 8ruby:3.0::rubygem-psych3.3.2-141.module_el8.6.0+3263+41cde0c0
alma 8ruby:3.0::rubygem-rake13.0.3-141.module_el8.6.0+3263+41cde0c0
alma 8ruby:3.0::rubygem-rbs1.4.0-141.module_el8.6.0+3263+41cde0c0
alma 8ruby:3.0::rubygem-rdoc6.3.3-141.module_el8.6.0+3263+41cde0c0
alma 8ruby:3.0::rubygem-rexml3.2.5-141.module_el8.6.0+3263+41cde0c0
alma 8ruby:3.0::rubygem-rss0.2.9-141.module_el8.6.0+3263+41cde0c0
alma 8ruby:3.0::rubygem-test-unit3.3.7-141.module_el8.6.0+3263+41cde0c0
alma 8ruby:3.0::rubygem-typeprof0.15.2-141.module_el8.6.0+3263+41cde0c0
alma 8ruby:3.0::rubygems3.2.33-141.module_el8.6.0+3263+41cde0c0
alma 8ruby:3.0::rubygems-devel3.2.33-141.module_el8.6.0+3263+41cde0c0
alma 9ruby3.0.4-160.el9_0
alma 9ruby-default-gems3.0.4-160.el9_0
alma 9ruby-devel3.0.4-160.el9_0
alma 9ruby-doc3.0.4-160.el9_0
alma 9ruby-libs3.0.4-160.el9_0
alma 9rubygem-bigdecimal3.0.0-160.el9_0
alma 9rubygem-bundler2.2.33-160.el9_0
alma 9rubygem-io-console0.5.7-160.el9_0
alma 9rubygem-irb1.3.5-160.el9_0
alma 9rubygem-json2.5.1-160.el9_0
alma 9rubygem-minitest5.14.2-160.el9_0
alma 9rubygem-power_assert1.2.0-160.el9_0
alma 9rubygem-psych3.3.2-160.el9_0
alma 9rubygem-rake13.0.3-160.el9_0
alma 9rubygem-rbs1.4.0-160.el9_0
alma 9rubygem-rdoc6.3.3-160.el9_0
alma 9rubygem-rexml3.2.5-160.el9_0
alma 9rubygem-rss0.2.9-160.el9_0
alma 9rubygem-test-unit3.3.7-160.el9_0
alma 9rubygem-typeprof0.15.2-160.el9_0
alma 9rubygems3.2.33-160.el9_0
alma 9rubygems-devel3.2.33-160.el9_0
alpine 3.15ruby3.0.4-r0
alpine 3.16ruby3.1.2-r0
alpine 3.17ruby3.1.2-r0
alpine 3.18ruby3.1.2-r0
alpine 3.19ruby3.1.2-r0
alpine 3.20ruby3.1.2-r0
alpine 3.21ruby3.1.2-r0
alpine 3.22ruby3.1.2-r0
alpine 3.23ruby3.1.2-r0
alpine 3.24ruby3.1.2-r0
alpine edgeruby3.1.2-r0
Oracle Linux 8ruby3.0.4-141.module+el8.6.0+20741+4fdba061
Oracle Linux 8ruby-default-gems3.0.4-141.module+el8.6.0+20741+4fdba061
Oracle Linux 8ruby-devel3.0.4-141.module+el8.6.0+20741+4fdba061
Oracle Linux 8ruby-doc3.0.4-141.module+el8.6.0+20741+4fdba061
Oracle Linux 8ruby-libs3.0.4-141.module+el8.6.0+20741+4fdba061
Oracle Linux 8rubygem-abrt0.4.0-1.module+el8.5.0+20321+0ba6c954
Oracle Linux 8rubygem-abrt-doc0.4.0-1.module+el8.5.0+20321+0ba6c954
Oracle Linux 8rubygem-bigdecimal3.0.0-141.module+el8.6.0+20741+4fdba061
Oracle Linux 8rubygem-bundler2.2.33-141.module+el8.6.0+20741+4fdba061
Oracle Linux 8rubygem-io-console0.5.7-141.module+el8.6.0+20741+4fdba061
Oracle Linux 8rubygem-irb1.3.5-141.module+el8.6.0+20741+4fdba061
Oracle Linux 8rubygem-json2.5.1-141.module+el8.6.0+20741+4fdba061
Oracle Linux 8rubygem-minitest5.14.2-141.module+el8.6.0+20741+4fdba061
Oracle Linux 8rubygem-mysql20.5.3-1.module+el8.5.0+20321+0ba6c954
Oracle Linux 8rubygem-mysql2-doc0.5.3-1.module+el8.5.0+20321+0ba6c954
Oracle Linux 8rubygem-pg1.2.3-1.module+el8.5.0+20321+0ba6c954
Oracle Linux 8rubygem-pg-doc1.2.3-1.module+el8.5.0+20321+0ba6c954
Oracle Linux 8rubygem-power_assert1.2.0-141.module+el8.6.0+20741+4fdba061
Oracle Linux 8rubygem-psych3.3.2-141.module+el8.6.0+20741+4fdba061
Oracle Linux 8rubygem-rake13.0.3-141.module+el8.6.0+20741+4fdba061
Oracle Linux 8rubygem-rbs1.4.0-141.module+el8.6.0+20741+4fdba061
Oracle Linux 8rubygem-rdoc6.3.3-141.module+el8.6.0+20741+4fdba061
Oracle Linux 8rubygem-rexml3.2.5-141.module+el8.6.0+20741+4fdba061
Oracle Linux 8rubygem-rss0.2.9-141.module+el8.6.0+20741+4fdba061
Oracle Linux 8rubygem-test-unit3.3.7-141.module+el8.6.0+20741+4fdba061
Oracle Linux 8rubygem-typeprof0.15.2-141.module+el8.6.0+20741+4fdba061
Oracle Linux 8rubygems3.2.33-141.module+el8.6.0+20741+4fdba061
Oracle Linux 8rubygems-devel3.2.33-141.module+el8.6.0+20741+4fdba061
Oracle Linux 9ruby3.0.4-160.el9_0
Oracle Linux 9ruby-default-gems3.0.4-160.el9_0
Oracle Linux 9ruby-devel3.0.4-160.el9_0
Oracle Linux 9ruby-doc3.0.4-160.el9_0
Oracle Linux 9ruby-libs3.0.4-160.el9_0
Oracle Linux 9rubygem-bigdecimal3.0.0-160.el9_0
Oracle Linux 9rubygem-bundler2.2.33-160.el9_0
Oracle Linux 9rubygem-io-console0.5.7-160.el9_0
Oracle Linux 9rubygem-irb1.3.5-160.el9_0
Oracle Linux 9rubygem-json2.5.1-160.el9_0
Oracle Linux 9rubygem-minitest5.14.2-160.el9_0
Oracle Linux 9rubygem-power_assert1.2.0-160.el9_0
Oracle Linux 9rubygem-psych3.3.2-160.el9_0
Oracle Linux 9rubygem-rake13.0.3-160.el9_0
Oracle Linux 9rubygem-rbs1.4.0-160.el9_0
Oracle Linux 9rubygem-rdoc6.3.3-160.el9_0
Oracle Linux 9rubygem-rexml3.2.5-160.el9_0
Oracle Linux 9rubygem-rss0.2.9-160.el9_0
Oracle Linux 9rubygem-test-unit3.3.7-160.el9_0
Oracle Linux 9rubygem-typeprof0.15.2-160.el9_0
Oracle Linux 9rubygems3.2.33-160.el9_0
Oracle Linux 9rubygems-devel3.2.33-160.el9_0
rapidfort Oracle Linux 9ruby0:3.0.4-160.el9_0
rapidfort Oracle Linux 9ruby-default-gems0:3.0.4-160.el9_0
rapidfort Oracle Linux 9ruby-devel0:3.0.4-160.el9_0
rapidfort Oracle Linux 9ruby-libs0:3.0.4-160.el9_0
rapidfort Oracle Linux 9rubygem-bigdecimal0:3.0.0-160.el9_0
rapidfort Oracle Linux 9rubygem-bundler0:2.2.33-160.el9_0
rapidfort Oracle Linux 9rubygem-io-console0:0.5.7-160.el9_0
rapidfort Oracle Linux 9rubygem-irb0:1.3.5-160.el9_0
rapidfort Oracle Linux 9rubygem-json0:2.5.1-160.el9_0
rapidfort Oracle Linux 9rubygem-minitest0:5.14.2-160.el9_0
rapidfort Oracle Linux 9rubygem-power_assert0:1.2.0-160.el9_0
rapidfort Oracle Linux 9rubygem-psych0:3.3.2-160.el9_0
rapidfort Oracle Linux 9rubygem-rake0:13.0.3-160.el9_0
rapidfort Oracle Linux 9rubygem-rbs0:1.4.0-160.el9_0
rapidfort Oracle Linux 9rubygem-rdoc0:6.3.3-160.el9_0
rapidfort Oracle Linux 9rubygem-rexml0:3.2.5-160.el9_0
rapidfort Oracle Linux 9rubygem-rss0:0.2.9-160.el9_0
rapidfort Oracle Linux 9rubygem-test-unit0:3.3.7-160.el9_0
rapidfort Oracle Linux 9rubygem-typeprof0:0.15.2-160.el9_0
rapidfort Oracle Linux 9rubygems0:3.2.33-160.el9_0
rapidfort Oracle Linux 9rubygems-devel0:3.2.33-160.el9_0
rapidfort rocky 9ruby0:3.0.4-160.el9_0
rapidfort ubuntu 20.04ruby3.00:3.0.2-7ubuntu2.1
rapidfort ubuntu 22.04ruby3.00:3.0.2-7ubuntu2.1
rapidfort ubuntu 24.04ruby3.00:3.0.2-7ubuntu2.1
rocky 8ruby3.0.4-141.module+el8.6.0+1002+a7dba0ac
rocky 8ruby-default-gems3.0.4-141.module+el8.6.0+1002+a7dba0ac
rocky 8ruby-devel3.0.4-141.module+el8.6.0+1002+a7dba0ac
rocky 8ruby-doc3.0.4-141.module+el8.6.0+1002+a7dba0ac
rocky 8ruby-libs3.0.4-141.module+el8.6.0+1002+a7dba0ac
rocky 8ruby:3.0::ruby3.0.4-141.module+el8.6.0+1002+a7dba0ac
rocky 8ruby:3.0::ruby-default-gems3.0.4-141.module+el8.6.0+1002+a7dba0ac
rocky 8ruby:3.0::ruby-devel3.0.4-141.module+el8.6.0+1002+a7dba0ac
rocky 8ruby:3.0::ruby-doc3.0.4-141.module+el8.6.0+1002+a7dba0ac
rocky 8ruby:3.0::ruby-libs3.0.4-141.module+el8.6.0+1002+a7dba0ac
rocky 8ruby:3.0::rubygem-abrt0.4.0-1.module+el8.5.0+668+665814fa
rocky 8ruby:3.0::rubygem-abrt-doc0.4.0-1.module+el8.5.0+668+665814fa
rocky 8ruby:3.0::rubygem-bigdecimal3.0.0-141.module+el8.6.0+1002+a7dba0ac
rocky 8ruby:3.0::rubygem-bundler2.2.33-141.module+el8.6.0+1002+a7dba0ac
rocky 8ruby:3.0::rubygem-io-console0.5.7-141.module+el8.6.0+1002+a7dba0ac
rocky 8ruby:3.0::rubygem-irb1.3.5-141.module+el8.6.0+1002+a7dba0ac
rocky 8ruby:3.0::rubygem-json2.5.1-141.module+el8.6.0+1002+a7dba0ac
rocky 8ruby:3.0::rubygem-minitest5.14.2-141.module+el8.6.0+1002+a7dba0ac
rocky 8ruby:3.0::rubygem-mysql20.5.3-1.module+el8.5.0+668+665814fa
rocky 8ruby:3.0::rubygem-mysql2-doc0.5.3-1.module+el8.5.0+668+665814fa
rocky 8ruby:3.0::rubygem-pg1.2.3-1.module+el8.5.0+668+665814fa
rocky 8ruby:3.0::rubygem-pg-doc1.2.3-1.module+el8.5.0+668+665814fa
rocky 8ruby:3.0::rubygem-power_assert1.2.0-141.module+el8.6.0+1002+a7dba0ac
rocky 8ruby:3.0::rubygem-psych3.3.2-141.module+el8.6.0+1002+a7dba0ac
rocky 8ruby:3.0::rubygem-rake13.0.3-141.module+el8.6.0+1002+a7dba0ac
rocky 8ruby:3.0::rubygem-rbs1.4.0-141.module+el8.6.0+1002+a7dba0ac
rocky 8ruby:3.0::rubygem-rdoc6.3.3-141.module+el8.6.0+1002+a7dba0ac
rocky 8ruby:3.0::rubygem-rexml3.2.5-141.module+el8.6.0+1002+a7dba0ac
rocky 8ruby:3.0::rubygem-rss0.2.9-141.module+el8.6.0+1002+a7dba0ac
rocky 8ruby:3.0::rubygem-test-unit3.3.7-141.module+el8.6.0+1002+a7dba0ac
rocky 8ruby:3.0::rubygem-typeprof0.15.2-141.module+el8.6.0+1002+a7dba0ac
rocky 8ruby:3.0::rubygems3.2.33-141.module+el8.6.0+1002+a7dba0ac
rocky 8ruby:3.0::rubygems-devel3.2.33-141.module+el8.6.0+1002+a7dba0ac
rocky 8rubygem-abrt0.4.0-1.module+el8.6.0+1001+b5678180
rocky 8rubygem-abrt-doc0.4.0-1.module+el8.6.0+1001+b5678180
rocky 8rubygem-bigdecimal3.0.0-141.module+el8.6.0+1002+a7dba0ac
rocky 8rubygem-bundler2.2.33-141.module+el8.6.0+1002+a7dba0ac
rocky 8rubygem-io-console0.5.7-141.module+el8.6.0+1002+a7dba0ac
rocky 8rubygem-irb1.3.5-141.module+el8.6.0+1002+a7dba0ac
rocky 8rubygem-json2.5.1-141.module+el8.6.0+1002+a7dba0ac
rocky 8rubygem-minitest5.14.2-141.module+el8.6.0+1002+a7dba0ac
rocky 8rubygem-mysql20.5.3-1.module+el8.6.0+1001+b5678180
rocky 8rubygem-mysql2-doc0.5.3-1.module+el8.6.0+1001+b5678180
rocky 8rubygem-pg1.2.3-1.module+el8.6.0+1001+b5678180
rocky 8rubygem-pg-doc1.2.3-1.module+el8.6.0+1001+b5678180
rocky 8rubygem-power_assert1.2.0-141.module+el8.6.0+1002+a7dba0ac
rocky 8rubygem-psych3.3.2-141.module+el8.6.0+1002+a7dba0ac
rocky 8rubygem-rake13.0.3-141.module+el8.6.0+1002+a7dba0ac
rocky 8rubygem-rbs1.4.0-141.module+el8.6.0+1002+a7dba0ac
rocky 8rubygem-rdoc6.3.3-141.module+el8.6.0+1002+a7dba0ac
rocky 8rubygem-rexml3.2.5-141.module+el8.6.0+1002+a7dba0ac
rocky 8rubygem-rss0.2.9-141.module+el8.6.0+1002+a7dba0ac
rocky 8rubygem-test-unit3.3.7-141.module+el8.6.0+1002+a7dba0ac
rocky 8rubygem-typeprof0.15.2-141.module+el8.6.0+1002+a7dba0ac
rocky 8rubygems3.2.33-141.module+el8.6.0+1002+a7dba0ac
rocky 8rubygems-devel3.2.33-141.module+el8.6.0+1002+a7dba0ac
rocky 9ruby3.0.4-160.el9_0
rocky 9ruby-default-gems3.0.4-160.el9_0
rocky 9ruby-devel3.0.4-160.el9_0
rocky 9ruby-libs3.0.4-160.el9_0
rocky 9rubygem-bigdecimal3.0.0-160.el9_0
rocky 9rubygem-bundler2.2.33-160.el9_0
rocky 9rubygem-io-console0.5.7-160.el9_0
rocky 9rubygem-irb1.3.5-160.el9_0
rocky 9rubygem-json2.5.1-160.el9_0
rocky 9rubygem-minitest5.14.2-160.el9_0
rocky 9rubygem-power_assert1.2.0-160.el9_0
rocky 9rubygem-psych3.3.2-160.el9_0
rocky 9rubygem-rake13.0.3-160.el9_0
rocky 9rubygem-rbs1.4.0-160.el9_0
rocky 9rubygem-rdoc6.3.3-160.el9_0
rocky 9rubygem-rexml3.2.5-160.el9_0
rocky 9rubygem-rss0.2.9-160.el9_0
rocky 9rubygem-test-unit3.3.7-160.el9_0
rocky 9rubygem-typeprof0.15.2-160.el9_0
rocky 9rubygems3.2.33-160.el9_0
rocky 9rubygems-devel3.2.33-160.el9_0
ubuntu 22.04ruby3.03.0.2-7ubuntu2.1

Referanslar

25 referansın hepsi

Vulnerability data compiled from the Trivy vulnerability database (trivy-db, Aqua Security, Apache License 2.0), which aggregates third-party advisories. CVE records are published by The MITRE Corporation under the CVE Terms of Use; CVE is a trademark of MITRE. This product uses data from the NVD API but is not endorsed or certified by the NVD. Severity, titles and advisory data from the GitHub Advisory Database (CC BY 4.0), Red Hat security data (CC BY 4.0) and the other sources linked on each entry. Entries may be summarised or re-formatted; the linked original is the authoritative record.