Out-of-bounds read in Ruby - CVE-2024-27282

Vulnerability identifier: #VU88970

CSH Severity: Medium

CVSS v4: 6.9 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N]

CVE-ID: CVE-2024-27282

CWE-ID: CWE-125

Exploitation vector: Remote access

Exploit availability: No public exploit available

The vulnerability allows a remote attacker to gain access to potentially sensitive information.

The vulnerability exists due to a boundary condition in Regex search. A remote attacker can pass specially crafted string to the application, trigger an out-of-bounds read error and read contents of heap memory on the system.

Ruby
Debian Linux
Red Hat Enterprise Linux for IBM z Systems
Red Hat Enterprise Linux for ARM 64
Red Hat Enterprise Linux for Power, little endian
Red Hat Enterprise Linux for x86_64
Anolis OS
Slackware Linux
Ubuntu
openEuler
Fedora
rubygem-net-telnet
rubygem-rss
rubygem-abrt-doc
rubygem-abrt
rubygem-xmlrpc
rubygem-io-console
rubygem-mysql2
rubygem-mysql2-doc
rubygem-typeprof
rubygem-pg-doc
rubygem-pg
rubygem-power_assert
rubygem-did_you_mean
rubygem-bigdecimal
rubygem-irb
rubygem-rbs
rubygem-racc
rubygem-bundler
rubygem-bundler-doc
rubygem-json
rubygem-openssl
ruby2.5 (Ubuntu package)
rubygem-mongo-doc
rubygem-mongo
ruby-debuginfo
ruby-help
ruby-irb
ruby
ruby-debugsource
ruby-devel
ruby-doc
ruby-libs
ruby2.7 (Ubuntu package)
libruby2.7 (Ubuntu package)
rubygems
rubygems-devel
rubygem-psych
ruby-default-gems
ruby3.1 (Debian package)
libruby3.1 (Ubuntu package)
ruby3.1 (Ubuntu package)
ruby3.2 (Ubuntu package)
libruby3.2 (Ubuntu package)
rubygem-rexml
rubygem-test-unit
ruby-bundled-gems
rubygem-bson
rubygem-bson-doc
rubygem-minitest
rubygem-rdoc
rubygem-rake
ruby3.0 (Ubuntu package)
libruby3.0 (Ubuntu package)
OpenManage Network Integration (OMNI)

Install updates from vendor's website.

Ruby - addressed in versions 3.0.7, 3.1.5, 3.2.4, 3.3.1
rubygem-net-telnet - update to 0.1.1-112.0.1
rubygem-net-telnet - update to 0.1.1-124
rubygem-rss - update to 0.2.9-133
rubygem-rss - addressed in versions 0.2.9-143.0.1, 0.3.1-3
rubygem-abrt-doc - addressed in versions 0.3.0-4, 0.4.0-1
rubygem-abrt - addressed in versions 0.3.0-4, 0.4.0-1
rubygem-xmlrpc - update to 0.3.0-112.0.1
rubygem-xmlrpc - update to 0.3.0-124
rubygem-io-console - addressed in versions 0.4.6-112.0.1, 0.5.7-143.0.1, 0.7.1-3
rubygem-io-console - addressed in versions 0.4.6-124, 0.5.7-133
rubygem-mysql2 - addressed in versions 0.4.10-4, 0.5.3-2.0.1, 0.5.5-1
rubygem-mysql2-doc - addressed in versions 0.4.10-4, 0.5.3-2.0.1, 0.5.5-1
rubygem-typeprof - update to 0.15.2-133
rubygem-typeprof - addressed in versions 0.15.2-143.0.1, 0.21.9-3
rubygem-pg-doc - addressed in versions 1.0.0-3.0.1, 1.2.3-1, 1.5.4-1
rubygem-pg - addressed in versions 1.0.0-3.0.1, 1.2.3-1, 1.5.4-1
rubygem-power_assert - addressed in versions 1.1.1-112.0.1, 1.2.1-143.0.1, 2.0.3-3
rubygem-power_assert - update to 1.1.1-124
rubygem-did_you_mean - update to 1.2.0-112.0.1
rubygem-did_you_mean - addressed in versions 1.2.0-124, 1.5.0-133
rubygem-bigdecimal - addressed in versions 1.3.4-112.0.1, 3.0.0-143.0.1, 3.1.5-3
rubygem-bigdecimal - addressed in versions 1.3.4-124, 3.0.0-133
rubygem-irb - addressed in versions 1.3.5-143.0.1, 1.13.1-3
rubygem-rbs - update to 1.4.0-133
rubygem-rbs - addressed in versions 1.4.0-143.0.1, 3.4.0-3
rubygem-racc - update to 1.7.3-3
rubygem-bundler - addressed in versions 1.16.1-4, 2.2.33-143.0.1, 2.5.16-3
rubygem-bundler-doc - update to 1.16.1-4
rubygem-json - addressed in versions 2.1.0-112.0.1, 2.5.1-143.0.1, 2.7.1-3
rubygem-json - addressed in versions 2.1.0-124, 2.5.1-133
rubygem-openssl - update to 2.1.2-112.0.1
rubygem-openssl - addressed in versions 2.1.2-124, 2.2.1-133
rubygem-bundler - update to 2.2.32-133
ruby2.5 (Ubuntu package) - addressed in versions 2.5.1-1ubuntu1.16+esm5, 2.7.0-5ubuntu1.18+esm1, 3.0.2-7ubuntu2.11, 3.2.3-1ubuntu0.24.04.6, 3.3.7-1ubuntu2.1
rubygem-mongo-doc - update to 2.5.1-2
rubygem-mongo - update to 2.5.1-2
ruby-debuginfo - addressed in versions 2.5.8-124, 3.0.3-133
ruby-help - addressed in versions 2.5.8-124, 3.0.3-133
ruby-irb - addressed in versions 2.5.8-124, 3.0.3-133
ruby - addressed in versions 2.5.8-124, 3.0.3-133
ruby-debugsource - addressed in versions 2.5.8-124, 3.0.3-133
ruby-devel - addressed in versions 2.5.8-124, 3.0.3-133
ruby-irb - update to 2.5.9-112.0.1
ruby-doc - addressed in versions 2.5.9-112.0.1, 3.0.7-143.0.1, 3.3.5-3
ruby-libs - addressed in versions 2.5.9-112.0.1, 3.0.7-143.0.1, 3.3.5-3
ruby-devel - addressed in versions 2.5.9-112.0.1, 3.0.7-143.0.1, 3.3.5-3
ruby - addressed in versions 2.5.9-112.0.1, 3.0.7-143.0.1, 3.3.5-3
ruby2.7 (Ubuntu package) - update to 2.7.0-5ubuntu1.13
libruby2.7 (Ubuntu package) - update to 2.7.0-5ubuntu1.13
rubygems - addressed in versions 2.7.6.3-112.0.1, 3.2.33-143.0.1, 3.5.16-3
rubygems-devel - addressed in versions 2.7.6.3-112.0.1, 3.2.33-143.0.1, 3.5.16-3
rubygems - addressed in versions 2.7.6-124, 3.2.32-133
rubygems-devel - addressed in versions 2.7.6-124, 3.2.32-133
ruby3.0 (Ubuntu package) - update to 3.0.2-7ubuntu2.6
libruby3.0 (Ubuntu package) - update to 3.0.2-7ubuntu2.6
rubygem-psych - addressed in versions 3.0.2-112.0.1, 3.3.2-143.0.1, 5.1.2-3
rubygem-psych - addressed in versions 3.0.2-124, 3.3.2-133
ruby - update to 3.0.7
ruby-default-gems - addressed in versions 3.0.7-143.0.1, 3.3.5-3
ruby3.1 (Debian package) - update to 3.1.2-7+deb12u1
libruby3.1 (Ubuntu package) - update to 3.1.2-7ubuntu3.2
ruby3.1 (Ubuntu package) - update to 3.1.2-7ubuntu3.2
ruby3.2 (Ubuntu package) - update to 3.2.3-1ubuntu0.24.04.1
libruby3.2 (Ubuntu package) - update to 3.2.3-1ubuntu0.24.04.1
ruby - addressed in versions 3.2.4-182.fc38, 3.2.4-182.fc39, 3.3.1-7.fc40
rubygem-rexml - update to 3.2.5-133
rubygem-rexml - addressed in versions 3.2.5-143.0.1, 3.3.6-3
rubygem-test-unit - addressed in versions 3.2.7-112.0.1, 3.3.7-143.0.1, 3.6.1-3
rubygem-test-unit - addressed in versions 3.2.7-124, 3.3.7-133
ruby-bundled-gems - update to 3.3.5-3
OpenManage Network Integration (OMNI) - update to 3.7
rubygem-bson - update to 4.3.0-2
rubygem-bson-doc - update to 4.3.0-2
rubygem-minitest - addressed in versions 5.10.3-112.0.1, 5.14.2-143.0.1, 5.20.0-3
rubygem-minitest - addressed in versions 5.10.3-124, 5.14.2-133
rubygem-rdoc - addressed in versions 6.0.1.1-112.0.1, 6.3.4.1-143.0.1, 6.6.3.1-3
rubygem-rdoc - addressed in versions 6.0.1.1-124, 6.3.3-133
rubygem-rake - addressed in versions 12.3.0-124, 13.0.3-133
rubygem-rake - addressed in versions 12.3.3-112.0.1, 13.0.3-143.0.1, 13.1.0-3

• https://www.ruby-lang.org/en/news/2024/04/23/arbitrary-memory-address-read-regexp-cve-2024-27282/

• Information disclosure in Ruby Regex search
• Slackware Linux update for ruby
• Fedora 40 update for ruby
• Fedora 39 update for ruby
• Fedora 38 update for ruby
• openEuler 20.03 LTS SP1 update for ruby
• openEuler 22.03 LTS SP3 update for ruby
• openEuler 20.03 LTS SP4 update for ruby
• openEuler 22.03 LTS update for ruby
• openEuler 22.03 LTS SP1 update for ruby
• openEuler 22.03 LTS SP2 update for ruby
• Red Hat Enterprise Linux 9 update for the ruby:3.1 module
• Red Hat Enterprise Linux 8 update for the ruby:3.3 module
• Red Hat Enterprise Linux 9 update for the ruby:3.3 module
• Red Hat Enterprise Linux 8 update for the ruby:3.1 module
• Red Hat Enterprise Linux 8 update for the ruby:3.0 module
• Ubuntu update for ruby2.7
• Debian update for ruby3.1
• Red Hat Enterprise Linux 8 update for ruby module
• Multiple vulnerabilities in Dell OpenManage Network Integration (OMNI)
• Anolis OS update for ruby:3.0 module
• Anolis OS update for ruby:2.5 module
• Anolis OS update for ruby:3.3 module
• Ubuntu update for ruby2.5