Количество 20
Количество 20
BDU:2024-03599
Уязвимость интерпретатора языка программирования Ruby, связанная с переполнением буфера в куче, позволяющая нарушителю оказать воздействие на конфиденциальность, целостность и доступность защищаемой информации
CVE-2024-27282
An issue was discovered in Ruby 3.x through 3.3.0. If attacker-supplied data is provided to the Ruby regex compiler, it is possible to extract arbitrary heap data relative to the start of the text, including pointers and sensitive strings. The fixed versions are 3.0.7, 3.1.5, 3.2.4, and 3.3.1.
CVE-2024-27282
An issue was discovered in Ruby 3.x through 3.3.0. If attacker-supplied data is provided to the Ruby regex compiler, it is possible to extract arbitrary heap data relative to the start of the text, including pointers and sensitive strings. The fixed versions are 3.0.7, 3.1.5, 3.2.4, and 3.3.1.
CVE-2024-27282
An issue was discovered in Ruby 3.x through 3.3.0. If attacker-supplied data is provided to the Ruby regex compiler, it is possible to extract arbitrary heap data relative to the start of the text, including pointers and sensitive strings. The fixed versions are 3.0.7, 3.1.5, 3.2.4, and 3.3.1.
CVE-2024-27282
CVE-2024-27282
An issue was discovered in Ruby 3.x through 3.3.0. If attacker-supplie ...
GHSA-63cq-cj6g-qfr2
An issue was discovered in Ruby 3.x through 3.3.0. If attacker-supplied data is provided to the Ruby regex compiler, it is possible to extract arbitrary heap data relative to the start of the text, including pointers and sensitive strings. The fixed versions are 3.0.7, 3.1.5, 3.2.4, and 3.3.1.
RLSA-2024:3671
Moderate: ruby:3.3 security, bug fix, and enhancement update
RLSA-2024:3670
Moderate: ruby:3.3 security, bug fix, and enhancement update
RLSA-2024:3668
Moderate: ruby:3.1 security, bug fix, and enhancement update
RLSA-2024:3546
Moderate: ruby:3.1 security, bug fix, and enhancement update
ELSA-2024-3671
ELSA-2024-3671: ruby:3.3 security, bug fix, and enhancement update (MODERATE)
ELSA-2024-3670
ELSA-2024-3670: ruby:3.3 security, bug fix, and enhancement update (MODERATE)
ELSA-2024-3668
ELSA-2024-3668: ruby:3.1 security, bug fix, and enhancement update (MODERATE)
ELSA-2024-3546
ELSA-2024-3546: ruby:3.1 security, bug fix, and enhancement update (MODERATE)
RLSA-2024:4499
Moderate: ruby security update
ELSA-2024-4499
ELSA-2024-4499: ruby security update (MODERATE)
RLSA-2024:3500
Moderate: ruby:3.0 security update
ELSA-2024-3838
ELSA-2024-3838: ruby security update (MODERATE)
ELSA-2024-3500
ELSA-2024-3500: ruby:3.0 security update (MODERATE)
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | BDU:2024-03599 Уязвимость интерпретатора языка программирования Ruby, связанная с переполнением буфера в куче, позволяющая нарушителю оказать воздействие на конфиденциальность, целостность и доступность защищаемой информации | CVSS3: 6.6 | 1% Низкий | больше 2 лет назад |
 | CVE-2024-27282 An issue was discovered in Ruby 3.x through 3.3.0. If attacker-supplied data is provided to the Ruby regex compiler, it is possible to extract arbitrary heap data relative to the start of the text, including pointers and sensitive strings. The fixed versions are 3.0.7, 3.1.5, 3.2.4, and 3.3.1. | CVSS3: 6.6 | 1% Низкий | больше 2 лет назад |
 | CVE-2024-27282 An issue was discovered in Ruby 3.x through 3.3.0. If attacker-supplied data is provided to the Ruby regex compiler, it is possible to extract arbitrary heap data relative to the start of the text, including pointers and sensitive strings. The fixed versions are 3.0.7, 3.1.5, 3.2.4, and 3.3.1. | CVSS3: 6.6 | 1% Низкий | больше 2 лет назад |
 | CVE-2024-27282 An issue was discovered in Ruby 3.x through 3.3.0. If attacker-supplied data is provided to the Ruby regex compiler, it is possible to extract arbitrary heap data relative to the start of the text, including pointers and sensitive strings. The fixed versions are 3.0.7, 3.1.5, 3.2.4, and 3.3.1. | CVSS3: 6.6 | 1% Низкий | больше 2 лет назад |
 | CVSS3: 6.6 | 1% Низкий | больше 2 лет назад | |
| CVE-2024-27282 An issue was discovered in Ruby 3.x through 3.3.0. If attacker-supplie ... | CVSS3: 6.6 | 1% Низкий | больше 2 лет назад |
| GHSA-63cq-cj6g-qfr2 An issue was discovered in Ruby 3.x through 3.3.0. If attacker-supplied data is provided to the Ruby regex compiler, it is possible to extract arbitrary heap data relative to the start of the text, including pointers and sensitive strings. The fixed versions are 3.0.7, 3.1.5, 3.2.4, and 3.3.1. | CVSS3: 6.6 | 1% Низкий | больше 2 лет назад |
 | RLSA-2024:3671 Moderate: ruby:3.3 security, bug fix, and enhancement update | больше 2 лет назад | ||
| RLSA-2024:3670 Moderate: ruby:3.3 security, bug fix, and enhancement update | больше 2 лет назад | ||
| RLSA-2024:3668 Moderate: ruby:3.1 security, bug fix, and enhancement update | больше 2 лет назад | ||
| RLSA-2024:3546 Moderate: ruby:3.1 security, bug fix, and enhancement update | больше 2 лет назад | ||
| ELSA-2024-3671 ELSA-2024-3671: ruby:3.3 security, bug fix, and enhancement update (MODERATE) | больше 2 лет назад | ||
| ELSA-2024-3670 ELSA-2024-3670: ruby:3.3 security, bug fix, and enhancement update (MODERATE) | больше 2 лет назад | ||
| ELSA-2024-3668 ELSA-2024-3668: ruby:3.1 security, bug fix, and enhancement update (MODERATE) | больше 2 лет назад | ||
| ELSA-2024-3546 ELSA-2024-3546: ruby:3.1 security, bug fix, and enhancement update (MODERATE) | больше 2 лет назад | ||
| RLSA-2024:4499 Moderate: ruby security update | около 2 лет назад | ||
| ELSA-2024-4499 ELSA-2024-4499: ruby security update (MODERATE) | около 2 лет назад | ||
| RLSA-2024:3500 Moderate: ruby:3.0 security update | больше 1 года назад | ||
| ELSA-2024-3838 ELSA-2024-3838: ruby security update (MODERATE) | больше 2 лет назад | ||
| ELSA-2024-3500 ELSA-2024-3500: ruby:3.0 security update (MODERATE) | больше 2 лет назад |
Уязвимостей на страницу