[USN-6838-1] Ruby vulnerabilities
Severity
Medium
Affected Packages
16
CVEs
2
Several security issues were fixed in Ruby.
It was discovered that Ruby RDoc incorrectly parsed certain YAML files. If
a user or automated system were tricked into parsing a specially crafted
.rdoc_options file, a remote attacker could possibly use this issue to
execute arbitrary code. (CVE-2024-27281)
It was discovered that the Ruby regex compiler incorrectly handled certain
memory operations. A remote attacker could possibly use this issue to
obtain sensitive memory contents. (CVE-2024-27282)
Package | Affected Version |
---|---|
![]() |
< 3.2.3-1ubuntu0.24.04.1 |
![]() |
< 3.2.3-1ubuntu0.24.04.1 |
![]() |
< 3.2.3-1ubuntu0.24.04.1 |
![]() |
< 3.1.2-7ubuntu3.2 |
![]() |
< 3.1.2-7ubuntu3.2 |
![]() |
< 3.1.2-7ubuntu3.2 |
![]() |
< 3.0.2-7ubuntu2.6 |
![]() |
< 3.0.2-7ubuntu2.6 |
![]() |
< 3.0.2-7ubuntu2.6 |
![]() |
< 2.7.0-5ubuntu1.13 |
![]() |
< 2.7.0-5ubuntu1.13 |
![]() |
< 2.7.0-5ubuntu1.13 |
![]() |
< 3.2.3-1ubuntu0.24.04.1 |
![]() |
< 3.1.2-7ubuntu3.2 |
![]() |
< 3.0.2-7ubuntu2.6 |
![]() |
< 2.7.0-5ubuntu1.13 |
- ID
- USN-6838-1
- Severity
- medium
- Severity from
- CVE-2024-27281
- URL
- https://ubuntu.com/security/notices/USN-6838-1
- Published
-
2024-06-17T14:24:17
(2 months ago) - Modified
-
2024-06-17T14:24:17
(2 months ago) - Other Advisories
-
-
ALPINE:CVE-2024-27281
-
ALPINE:CVE-2024-27282
-
ALSA-2024:3500
-
ALSA-2024:3546
-
ALSA-2024:3668
-
ALSA-2024:3670
-
ALSA-2024:3671
-
ALSA-2024:3838
-
ALSA-2024:4499
-
DSA-5677-1
-
ELSA-2024-3500
-
ELSA-2024-3546
-
ELSA-2024-3668
-
ELSA-2024-3670
-
ELSA-2024-3671
-
ELSA-2024-3838
-
ELSA-2024-4499
-
FEDORA-2024-14db7b21a2
-
FEDORA-2024-31cac8b8ec
-
FEDORA-2024-48bdd3abbf
-
FREEBSD:2CE1A2F1-0177-11EF-A45E-08002784C58D
-
GLSA-202406-03
-
RHSA-2024:3500
-
RHSA-2024:3546
-
RHSA-2024:3668
-
RHSA-2024:3670
-
RHSA-2024:3671
-
RHSA-2024:3838
-
RHSA-2024:4499
-
RUBYSEC:RDOC-2024-27281
-
SSA:2024-114-01
-
Type | Package URL | Namespace | Name / Product | Version | Distribution / Platform | Arch | Patch / Fix |
---|---|---|---|---|---|---|---|
Affected | pkg:deb/ubuntu/ruby3.2?distro=noble | ubuntu |
![]() |
< 3.2.3-1ubuntu0.24.04.1 | noble | ||
Affected | pkg:deb/ubuntu/ruby3.2-doc?distro=noble | ubuntu |
![]() |
< 3.2.3-1ubuntu0.24.04.1 | noble | ||
Affected | pkg:deb/ubuntu/ruby3.2-dev?distro=noble | ubuntu |
![]() |
< 3.2.3-1ubuntu0.24.04.1 | noble | ||
Affected | pkg:deb/ubuntu/ruby3.1?distro=mantic | ubuntu |
![]() |
< 3.1.2-7ubuntu3.2 | mantic | ||
Affected | pkg:deb/ubuntu/ruby3.1-doc?distro=mantic | ubuntu |
![]() |
< 3.1.2-7ubuntu3.2 | mantic | ||
Affected | pkg:deb/ubuntu/ruby3.1-dev?distro=mantic | ubuntu |
![]() |
< 3.1.2-7ubuntu3.2 | mantic | ||
Affected | pkg:deb/ubuntu/ruby3.0?distro=jammy | ubuntu |
![]() |
< 3.0.2-7ubuntu2.6 | jammy | ||
Affected | pkg:deb/ubuntu/ruby3.0-doc?distro=jammy | ubuntu |
![]() |
< 3.0.2-7ubuntu2.6 | jammy | ||
Affected | pkg:deb/ubuntu/ruby3.0-dev?distro=jammy | ubuntu |
![]() |
< 3.0.2-7ubuntu2.6 | jammy | ||
Affected | pkg:deb/ubuntu/ruby2.7?distro=focal | ubuntu |
![]() |
< 2.7.0-5ubuntu1.13 | focal | ||
Affected | pkg:deb/ubuntu/ruby2.7-doc?distro=focal | ubuntu |
![]() |
< 2.7.0-5ubuntu1.13 | focal | ||
Affected | pkg:deb/ubuntu/ruby2.7-dev?distro=focal | ubuntu |
![]() |
< 2.7.0-5ubuntu1.13 | focal | ||
Affected | pkg:deb/ubuntu/libruby3.2?distro=noble | ubuntu |
![]() |
< 3.2.3-1ubuntu0.24.04.1 | noble | ||
Affected | pkg:deb/ubuntu/libruby3.1?distro=mantic | ubuntu |
![]() |
< 3.1.2-7ubuntu3.2 | mantic | ||
Affected | pkg:deb/ubuntu/libruby3.0?distro=jammy | ubuntu |
![]() |
< 3.0.2-7ubuntu2.6 | jammy | ||
Affected | pkg:deb/ubuntu/libruby2.7?distro=focal | ubuntu |
![]() |
< 2.7.0-5ubuntu1.13 | focal |
# CVE | Description | CVSS | EPSS | EPSS Trend (30 days) | Affected Products | Weaknesses | Security Advisories | Exploits | PoC | Pubblication Date | Modification Date |
---|---|---|---|---|---|---|---|---|---|---|---|
# CVE | Description | CVSS | EPSS | EPSS Trend (30 days) | Affected Products | Weaknesses | Security Advisories | PoC | Pubblication Date | Modification Date |