CVE-2022-28738 — Double Free in Ruby

CWE-415 — Double Free10 documents9 sources
Severity
9.8CRITICALNVD
EPSS
0.4%
top 41.04%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
Ruby-lang Ruby
Timeline
PublishedMay 9
Latest updateApr 15

Description

A double free was found in the Regexp compiler in Ruby 3.x before 3.0.4 and 3.1.x before 3.1.2. If a victim attempts to create a Regexp from untrusted user input, an attacker may be able to write to unexpected memory locations.

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:HExploitability: 3.9 | Impact: 5.9

Affected Packages2 packages

▶NVDruby-lang/ruby3.0.0 — 3.0.4+1
▶Alpineruby-lang/ruby< 3.0.4-r0+8

Patches

Patch: security-tracker.debian.org ↗Patch: security-tracker.debian.org ↗

🔴Vulnerability Details

4
OSV
ruby2.5, ruby2.7, ruby3.0 vulnerabilities↗2022-06-06
▶
GHSA
GHSA-8pqg-8p79-j5j8: A double free was found in the Regexp compiler in Ruby 3↗2022-05-10
▶
CVEList
CVE-2022-28738: A double free was found in the Regexp compiler in Ruby 3↗2022-05-09
▶
OSV
CVE-2022-28738: A double free was found in the Regexp compiler in Ruby 3↗2022-05-09
▶

📋Vendor Advisories

4
Oracle
Oracle Oracle JD Edwards Risk Matrix: E1 Dev Platform Tech - Cloud Manager (Ruby) — CVE-2022-28738↗2023-04-15
▶
Ubuntu
Ruby vulnerabilities↗2022-06-06
▶
Red Hat
Ruby: Double free in Regexp compilation↗2022-04-14
▶
Debian
CVE-2022-28738: ruby2.7 - A double free was found in the Regexp compiler in Ruby 3.x before 3.0.4 and 3.1....↗2022
▶

💬Community

1
HackerOne
CVE-2022-28738: Double free in Regexp compilation↗2022-05-28
▶
CVE-2022-28738 — Double Free in Ruby-lang Ruby | cvebase