Vulnerability · Published May 9, 2022 · Assigned by mitre
CVE-2022-28739
High 7.5
In plain English
A high-severity security flaw in the ruby package (AlmaLinux). There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 4.4% (higher than 91% of all known vulnerabilities). Fixed versions are available - upgrade the affected package.
Severity (CVSS NVD)7.5High
Exploit odds (30 days)4.4%top 8.7% of all CVEs
Exploited in the wildNo reportsnot in CISA KEV
Attack toolingNoneno public tooling known
Official description
There is a buffer over-read in Ruby before 2.6.10, 2.7.x before 2.7.6, 3.x before 3.0.4, and 3.1.x before 3.1.2. It occurs in String-to-Float conversion, including Kernel#Float and String#to_f.
Affected packages & fixed versions
| Ecosystem | Package | Fixed in | Advisory |
|---|---|---|---|
| AlmaLinux:8 | ruby | 3.0.4-141.module_el8.6.0+3263+41cde0c0 | ALSA-2022:6450 |
| AlmaLinux:8 | ruby | 2.5.9-111.module_el8.9.0+3635+c6f99506 | ALSA-2023:7025 |
| AlmaLinux:8 | ruby | 2.7.6-138.module_el8.6.0+3263+904da987 | ALSA-2022:6447 |
| AlmaLinux:9 | ruby | 3.0.4-160.el9_0 | ALSA-2022:6585 |
| AlmaLinux:8 | ruby-default-gems | 3.0.4-141.module_el8.6.0+3263+41cde0c0 | ALSA-2022:6450 |
| AlmaLinux:8 | ruby-default-gems | 2.7.6-138.module_el8.6.0+3263+904da987 | ALSA-2022:6447 |
| AlmaLinux:9 | ruby-default-gems | 3.0.4-160.el9_0 | ALSA-2022:6585 |
| AlmaLinux:8 | ruby-devel | 3.0.4-141.module_el8.6.0+3263+41cde0c0 | ALSA-2022:6450 |
| AlmaLinux:8 | ruby-devel | 2.7.6-138.module_el8.6.0+3263+904da987 | ALSA-2022:6447 |
| AlmaLinux:8 | ruby-devel | 2.5.9-111.module_el8.9.0+3635+c6f99506 | ALSA-2023:7025 |
| AlmaLinux:9 | ruby-devel | 3.0.4-160.el9_0 | ALSA-2022:6585 |
| AlmaLinux:8 | ruby-doc | 3.0.4-141.module_el8.6.0+3263+41cde0c0 | ALSA-2022:6450 |
| AlmaLinux:8 | ruby-doc | 2.7.6-138.module_el8.6.0+3263+904da987 | ALSA-2022:6447 |
| AlmaLinux:8 | ruby-doc | 2.5.9-111.module_el8.9.0+3635+c6f99506 | ALSA-2023:7025 |
| AlmaLinux:9 | ruby-doc | 3.0.4-160.el9_0 | ALSA-2022:6585 |
| AlmaLinux:8 | ruby-irb | 2.5.9-111.module_el8.9.0+3635+c6f99506 | ALSA-2023:7025 |
| AlmaLinux:8 | ruby-libs | 2.5.9-111.module_el8.9.0+3635+c6f99506 | ALSA-2023:7025 |
| AlmaLinux:8 | ruby-libs | 2.7.6-138.module_el8.6.0+3263+904da987 | ALSA-2022:6447 |
| AlmaLinux:8 | ruby-libs | 3.0.4-141.module_el8.6.0+3263+41cde0c0 | ALSA-2022:6450 |
| AlmaLinux:9 | ruby-libs | 3.0.4-160.el9_0 | ALSA-2022:6585 |
| AlmaLinux:8 | rubygem-abrt | 0.4.0-1.module_el8.5.0+2595+0c654ebc | ALSA-2022:6450 |
| AlmaLinux:8 | rubygem-abrt | 0.3.0-4.module_el8.5.0+2625+ec418553 | ALSA-2023:7025 |
| AlmaLinux:8 | rubygem-abrt | 0.4.0-1.module_el8.5.0+2595+0c654ebc | ALSA-2022:6447 |
| AlmaLinux:8 | rubygem-abrt-doc | 0.3.0-4.module_el8.5.0+2625+ec418553 | ALSA-2023:7025 |
| AlmaLinux:8 | rubygem-abrt-doc | 0.4.0-1.module_el8.5.0+2595+0c654ebc | ALSA-2022:6447 |
| AlmaLinux:8 | rubygem-abrt-doc | 0.4.0-1.module_el8.5.0+2595+0c654ebc | ALSA-2022:6450 |
| AlmaLinux:8 | rubygem-bigdecimal | 3.0.0-141.module_el8.6.0+3263+41cde0c0 | ALSA-2022:6450 |
| AlmaLinux:8 | rubygem-bigdecimal | 2.0.0-138.module_el8.6.0+3263+904da987 | ALSA-2022:6447 |
| AlmaLinux:8 | rubygem-bigdecimal | 1.3.4-111.module_el8.9.0+3635+c6f99506 | ALSA-2023:7025 |
| AlmaLinux:9 | rubygem-bigdecimal | 3.0.0-160.el9_0 | ALSA-2022:6585 |
| AlmaLinux:8 | rubygem-bson | 4.3.0-2.module_el8.5.0+259+8cec6917 | ALSA-2023:7025 |
| AlmaLinux:8 | rubygem-bson | 4.8.1-1.module_el8.5.0+117+35d1289b | ALSA-2022:6447 |
| AlmaLinux:8 | rubygem-bson | 4.8.1-1.module_el8.6.0+3167+957ef55e | ALSA-2022:6447 |
| AlmaLinux:8 | rubygem-bson | 4.8.1-1.module_el8.4.0+2399+4e3a532a | ALSA-2022:6447 |
| AlmaLinux:8 | rubygem-bson | 4.8.1-1.module_el8.3.0+6147+d0dfc1e4 | ALSA-2022:6447 |
| AlmaLinux:8 | rubygem-bson | 4.3.0-2.module_el8.6.0+3170+4b08f9d4 | ALSA-2023:7025 |
| AlmaLinux:8 | rubygem-bson | 4.3.0-2.module_el8.5.0+2625+ec418553 | ALSA-2023:7025 |
| AlmaLinux:8 | rubygem-bson-doc | 4.8.1-1.module_el8.3.0+6147+d0dfc1e4 | ALSA-2022:6447 |
| AlmaLinux:8 | rubygem-bson-doc | 4.3.0-2.module_el8.5.0+2625+ec418553 | ALSA-2023:7025 |
| AlmaLinux:8 | rubygem-bundler | 2.2.33-141.module_el8.6.0+3263+41cde0c0 | ALSA-2022:6450 |
| AlmaLinux:8 | rubygem-bundler | 2.2.24-138.module_el8.6.0+3263+904da987 | ALSA-2022:6447 |
| AlmaLinux:8 | rubygem-bundler | 1.16.1-4.module_el8.5.0+2625+ec418553 | ALSA-2023:7025 |
| AlmaLinux:9 | rubygem-bundler | 2.2.33-160.el9_0 | ALSA-2022:6585 |
| AlmaLinux:8 | rubygem-bundler-doc | 1.16.1-4.module_el8.5.0+2625+ec418553 | ALSA-2023:7025 |
| AlmaLinux:8 | rubygem-did_you_mean | 1.2.0-111.module_el8.9.0+3635+c6f99506 | ALSA-2023:7025 |
| AlmaLinux:8 | rubygem-io-console | 0.5.7-141.module_el8.6.0+3263+41cde0c0 | ALSA-2022:6450 |
| AlmaLinux:8 | rubygem-io-console | 0.4.6-111.module_el8.9.0+3635+c6f99506 | ALSA-2023:7025 |
| AlmaLinux:8 | rubygem-io-console | 0.5.6-138.module_el8.6.0+3263+904da987 | ALSA-2022:6447 |
| AlmaLinux:9 | rubygem-io-console | 0.5.7-160.el9_0 | ALSA-2022:6585 |
| AlmaLinux:8 | rubygem-irb | 1.3.5-141.module_el8.6.0+3263+41cde0c0 | ALSA-2022:6450 |
| AlmaLinux:8 | rubygem-irb | 1.2.6-138.module_el8.6.0+3263+904da987 | ALSA-2022:6447 |
| AlmaLinux:9 | rubygem-irb | 1.3.5-160.el9_0 | ALSA-2022:6585 |
| AlmaLinux:8 | rubygem-json | 2.5.1-141.module_el8.6.0+3263+41cde0c0 | ALSA-2022:6450 |
| AlmaLinux:8 | rubygem-json | 2.3.0-138.module_el8.6.0+3263+904da987 | ALSA-2022:6447 |
| AlmaLinux:8 | rubygem-json | 2.1.0-111.module_el8.9.0+3635+c6f99506 | ALSA-2023:7025 |
| AlmaLinux:9 | rubygem-json | 2.5.1-160.el9_0 | ALSA-2022:6585 |
| AlmaLinux:8 | rubygem-minitest | 5.14.2-141.module_el8.6.0+3263+41cde0c0 | ALSA-2022:6450 |
| AlmaLinux:8 | rubygem-minitest | 5.10.3-111.module_el8.9.0+3635+c6f99506 | ALSA-2023:7025 |
| AlmaLinux:8 | rubygem-minitest | 5.13.0-138.module_el8.6.0+3263+904da987 | ALSA-2022:6447 |
| AlmaLinux:9 | rubygem-minitest | 5.14.2-160.el9_0 | ALSA-2022:6585 |
| AlmaLinux:8 | rubygem-mongo | 2.5.1-2.module_el8.5.0+2625+ec418553 | ALSA-2023:7025 |
| AlmaLinux:8 | rubygem-mongo | 2.11.3-1.module_el8.3.0+6147+d0dfc1e4 | ALSA-2022:6447 |
| AlmaLinux:8 | rubygem-mongo-doc | 2.5.1-2.module_el8.5.0+2625+ec418553 | ALSA-2023:7025 |
| AlmaLinux:8 | rubygem-mongo-doc | 2.11.3-1.module_el8.3.0+6147+d0dfc1e4 | ALSA-2022:6447 |
| AlmaLinux:8 | rubygem-mysql2 | 0.5.3-1.module_el8.6.0+3167+957ef55e | ALSA-2022:6447 |
| AlmaLinux:8 | rubygem-mysql2 | 0.5.3-1.module_el8.5.0+2595+0c654ebc | ALSA-2022:6447 |
| AlmaLinux:8 | rubygem-mysql2 | 0.5.3-1.module_el8.5.0+117+35d1289b | ALSA-2022:6447 |
| AlmaLinux:8 | rubygem-mysql2 | 0.4.10-4.module_el8.6.0+3170+4b08f9d4 | ALSA-2023:7025 |
| AlmaLinux:8 | rubygem-mysql2 | 0.5.3-1.module_el8.5.0+118+1ab773e1 | ALSA-2022:6450 |
| AlmaLinux:8 | rubygem-mysql2 | 0.5.3-1.module_el8.6.0+3144+d138acf1 | ALSA-2022:6450 |
| AlmaLinux:8 | rubygem-mysql2 | 0.5.3-1.module_el8.5.0+2595+0c654ebc | ALSA-2022:6450 |
| AlmaLinux:8 | rubygem-mysql2 | 0.4.10-4.module_el8.5.0+2625+ec418553 | ALSA-2023:7025 |
| AlmaLinux:8 | rubygem-mysql2 | 0.4.10-4.module_el8.5.0+259+8cec6917 | ALSA-2023:7025 |
| AlmaLinux:8 | rubygem-mysql2 | 0.5.3-1.module_el8.4.0+2399+4e3a532a | ALSA-2022:6447 |
| AlmaLinux:8 | rubygem-mysql2-doc | 0.4.10-4.module_el8.5.0+2625+ec418553 | ALSA-2023:7025 |
| AlmaLinux:8 | rubygem-mysql2-doc | 0.5.3-1.module_el8.5.0+2595+0c654ebc | ALSA-2022:6447 |
| AlmaLinux:8 | rubygem-mysql2-doc | 0.5.3-1.module_el8.5.0+2595+0c654ebc | ALSA-2022:6450 |
| AlmaLinux:8 | rubygem-net-telnet | 0.2.0-138.module_el8.6.0+3263+904da987 | ALSA-2022:6447 |
| AlmaLinux:8 | rubygem-net-telnet | 0.1.1-111.module_el8.9.0+3635+c6f99506 | ALSA-2023:7025 |
| AlmaLinux:8 | rubygem-openssl | 2.1.2-111.module_el8.9.0+3635+c6f99506 | ALSA-2023:7025 |
| AlmaLinux:8 | rubygem-openssl | 2.1.3-138.module_el8.6.0+3263+904da987 | ALSA-2022:6447 |
| AlmaLinux:8 | rubygem-pg | 1.2.3-1.module_el8.6.0+3167+957ef55e | ALSA-2022:6447 |
| AlmaLinux:8 | rubygem-pg | 1.2.3-1.module_el8.5.0+2595+0c654ebc | ALSA-2022:6450 |
| AlmaLinux:8 | rubygem-pg | 1.2.3-1.module_el8.5.0+118+1ab773e1 | ALSA-2022:6450 |
| AlmaLinux:8 | rubygem-pg | 1.2.3-1.module_el8.6.0+3144+d138acf1 | ALSA-2022:6450 |
| AlmaLinux:8 | rubygem-pg | 1.0.0-3.module_el8.9.0+3635+c6f99506 | ALSA-2023:7025 |
| AlmaLinux:8 | rubygem-pg | 1.2.3-1.module_el8.5.0+2595+0c654ebc | ALSA-2022:6447 |
| AlmaLinux:8 | rubygem-pg | 1.2.3-1.module_el8.5.0+117+35d1289b | ALSA-2022:6447 |
| AlmaLinux:8 | rubygem-pg | 1.2.3-1.module_el8.4.0+2399+4e3a532a | ALSA-2022:6447 |
| AlmaLinux:8 | rubygem-pg-doc | 1.2.3-1.module_el8.5.0+2595+0c654ebc | ALSA-2022:6450 |
| AlmaLinux:8 | rubygem-pg-doc | 1.2.3-1.module_el8.5.0+2595+0c654ebc | ALSA-2022:6447 |
| AlmaLinux:8 | rubygem-pg-doc | 1.0.0-3.module_el8.9.0+3635+c6f99506 | ALSA-2023:7025 |
| AlmaLinux:8 | rubygem-power_assert | 1.2.0-141.module_el8.6.0+3263+41cde0c0 | ALSA-2022:6450 |
| AlmaLinux:8 | rubygem-power_assert | 1.1.1-111.module_el8.9.0+3635+c6f99506 | ALSA-2023:7025 |
| AlmaLinux:8 | rubygem-power_assert | 1.1.7-138.module_el8.6.0+3263+904da987 | ALSA-2022:6447 |
| AlmaLinux:9 | rubygem-power_assert | 1.2.0-160.el9_0 | ALSA-2022:6585 |
| AlmaLinux:8 | rubygem-psych | 3.0.2-111.module_el8.9.0+3635+c6f99506 | ALSA-2023:7025 |
| AlmaLinux:8 | rubygem-psych | 3.3.2-141.module_el8.6.0+3263+41cde0c0 | ALSA-2022:6450 |
| AlmaLinux:8 | rubygem-psych | 3.1.0-138.module_el8.6.0+3263+904da987 | ALSA-2022:6447 |
| AlmaLinux:9 | rubygem-psych | 3.3.2-160.el9_0 | ALSA-2022:6585 |
| AlmaLinux:8 | rubygem-rake | 13.0.1-138.module_el8.6.0+3263+904da987 | ALSA-2022:6447 |
| AlmaLinux:8 | rubygem-rake | 12.3.3-111.module_el8.9.0+3635+c6f99506 | ALSA-2023:7025 |
| AlmaLinux:8 | rubygem-rake | 13.0.3-141.module_el8.6.0+3263+41cde0c0 | ALSA-2022:6450 |
| AlmaLinux:9 | rubygem-rake | 13.0.3-160.el9_0 | ALSA-2022:6585 |
| AlmaLinux:8 | rubygem-rbs | 1.4.0-141.module_el8.6.0+3263+41cde0c0 | ALSA-2022:6450 |
| AlmaLinux:9 | rubygem-rbs | 1.4.0-160.el9_0 | ALSA-2022:6585 |
| AlmaLinux:8 | rubygem-rdoc | 6.2.1.1-138.module_el8.6.0+3263+904da987 | ALSA-2022:6447 |
| AlmaLinux:8 | rubygem-rdoc | 6.0.1.1-111.module_el8.9.0+3635+c6f99506 | ALSA-2023:7025 |
| AlmaLinux:8 | rubygem-rdoc | 6.3.3-141.module_el8.6.0+3263+41cde0c0 | ALSA-2022:6450 |
| AlmaLinux:9 | rubygem-rdoc | 6.3.3-160.el9_0 | ALSA-2022:6585 |
| AlmaLinux:8 | rubygem-rexml | 3.2.5-141.module_el8.6.0+3263+41cde0c0 | ALSA-2022:6450 |
| AlmaLinux:9 | rubygem-rexml | 3.2.5-160.el9_0 | ALSA-2022:6585 |
| AlmaLinux:8 | rubygem-rss | 0.2.9-141.module_el8.6.0+3263+41cde0c0 | ALSA-2022:6450 |
| AlmaLinux:9 | rubygem-rss | 0.2.9-160.el9_0 | ALSA-2022:6585 |
| AlmaLinux:8 | rubygem-test-unit | 3.3.7-141.module_el8.6.0+3263+41cde0c0 | ALSA-2022:6450 |
| AlmaLinux:8 | rubygem-test-unit | 3.2.7-111.module_el8.9.0+3635+c6f99506 | ALSA-2023:7025 |
| AlmaLinux:8 | rubygem-test-unit | 3.3.4-138.module_el8.6.0+3263+904da987 | ALSA-2022:6447 |
| AlmaLinux:9 | rubygem-test-unit | 3.3.7-160.el9_0 | ALSA-2022:6585 |
| AlmaLinux:8 | rubygem-typeprof | 0.15.2-141.module_el8.6.0+3263+41cde0c0 | ALSA-2022:6450 |
| AlmaLinux:9 | rubygem-typeprof | 0.15.2-160.el9_0 | ALSA-2022:6585 |
| AlmaLinux:8 | rubygem-xmlrpc | 0.3.0-138.module_el8.6.0+3263+904da987 | ALSA-2022:6447 |
| AlmaLinux:8 | rubygem-xmlrpc | 0.3.0-111.module_el8.9.0+3635+c6f99506 | ALSA-2023:7025 |
| AlmaLinux:8 | rubygems | 2.7.6.3-111.module_el8.9.0+3635+c6f99506 | ALSA-2023:7025 |
| AlmaLinux:8 | rubygems | 3.2.33-141.module_el8.6.0+3263+41cde0c0 | ALSA-2022:6450 |
| AlmaLinux:8 | rubygems | 3.1.6-138.module_el8.6.0+3263+904da987 | ALSA-2022:6447 |
| AlmaLinux:9 | rubygems | 3.2.33-160.el9_0 | ALSA-2022:6585 |
| AlmaLinux:8 | rubygems-devel | 2.7.6.3-111.module_el8.9.0+3635+c6f99506 | ALSA-2023:7025 |
| AlmaLinux:8 | rubygems-devel | 3.1.6-138.module_el8.6.0+3263+904da987 | ALSA-2022:6447 |
| AlmaLinux:8 | rubygems-devel | 3.2.33-141.module_el8.6.0+3263+41cde0c0 | ALSA-2022:6450 |
| AlmaLinux:9 | rubygems-devel | 3.2.33-160.el9_0 | ALSA-2022:6585 |
| Alpine:v3.20 | ruby | 3.1.2-r0 | ALPINE-CVE-2022-28739 |
| Alpine:v3.21 | ruby | 3.1.2-r0 | ALPINE-CVE-2022-28739 |
| Alpine:v3.22 | ruby | 3.1.2-r0 | ALPINE-CVE-2022-28739 |
| Alpine:v3.23 | ruby | 3.1.2-r0 | ALPINE-CVE-2022-28739 |
| Alpine:v3.24 | ruby | 3.1.2-r0 | ALPINE-CVE-2022-28739 |
| Rocky Linux:8 | ruby | 0:2.7.6-138.module+el8.6.0+1001+b5678180 | RLSA-2022:6447 |
| Rocky Linux:8 | ruby | 0:2.6.10-109.module+el8.6.0+988+8031c193 | RLSA-2022:5338 |
| Rocky Linux:8 | ruby | 0:2.5.9-111.module+el8.9.0+1536+5f79634e | RLSA-2023:7025 |
| Rocky Linux:8 | ruby | 0:3.0.4-141.module+el8.6.0+1002+a7dba0ac | RLSA-2022:6450 |
| Rocky Linux:9 | ruby | 0:3.0.4-160.el9_0 | RLSA-2022:6585 |
| Rocky Linux:8 | rubygem-abrt | 0:0.4.0-1.module+el8.4.0+411+b946f28c | RLSA-2022:6450 |
| Rocky Linux:8 | rubygem-abrt | 0:0.3.0-4.module+el8.3.0+167+5c390590 | RLSA-2022:5338 |
| Rocky Linux:8 | rubygem-abrt | 0:0.3.0-4.module+el8.5.0+738+032c9c02 | RLSA-2023:7025 |
| Rocky Linux:8 | rubygem-abrt | 0:0.3.0-4.module+el8.9.0+1536+5f79634e | RLSA-2023:7025 |
| Rocky Linux:8 | rubygem-abrt | 0:0.4.0-1.module+el8.5.0+668+665814fa | RLSA-2022:6450 |
| Rocky Linux:8 | rubygem-abrt | 0:0.4.0-1.module+el8.5.0+668+665814fa | RLSA-2022:6447 |
| Rocky Linux:8 | rubygem-abrt | 0:0.4.0-1.module+el8.4.0+411+b946f28c | RLSA-2022:6447 |
| Rocky Linux:8 | rubygem-abrt | 0:0.4.0-1.module+el8.4.0+594+11b6673a | RLSA-2022:6447 |
| Rocky Linux:8 | rubygem-abrt | 0:0.3.0-4.module+el8.4.0+592+03ff458a | RLSA-2022:5338 |
| Rocky Linux:8 | rubygem-abrt | 0:0.4.0-1.module+el8.4.0+594+11b6673a | RLSA-2022:6450 |
| Rocky Linux:8 | rubygem-abrt | 0:0.3.0-4.module+el8.5.0+738+032c9c02 | RLSA-2022:5338 |
| Rocky Linux:8 | rubygem-bson | 0:4.8.1-1.module+el8.4.0+594+11b6673a | RLSA-2022:6447 |
| Rocky Linux:8 | rubygem-bson | 0:4.5.0-1.module+el8.4.0+593+8d7f9f0c | RLSA-2022:5338 |
| Rocky Linux:8 | rubygem-bson | 0:4.5.0-1.module+el8.4.0+446+80b53620 | RLSA-2022:5338 |
| Rocky Linux:8 | rubygem-bson | 0:4.8.1-1.module+el8.4.0+411+b946f28c | RLSA-2022:6447 |
| Rocky Linux:8 | rubygem-bson | 0:4.3.0-2.module+el8.9.0+1536+5f79634e | RLSA-2023:7025 |
| Rocky Linux:8 | rubygem-bundler | 0:1.16.1-4.module+el8.9.0+1536+5f79634e | RLSA-2023:7025 |
| Rocky Linux:8 | rubygem-mongo | 0:2.11.3-1.module+el8.4.0+411+b946f28c | RLSA-2022:6447 |
| Rocky Linux:8 | rubygem-mongo | 0:2.8.0-1.module+el8.4.0+593+8d7f9f0c | RLSA-2022:5338 |
| Rocky Linux:8 | rubygem-mongo | 0:2.8.0-1.module+el8.4.0+446+80b53620 | RLSA-2022:5338 |
| Rocky Linux:8 | rubygem-mongo | 0:2.11.3-1.module+el8.4.0+594+11b6673a | RLSA-2022:6447 |
| Rocky Linux:8 | rubygem-mongo | 0:2.5.1-2.module+el8.9.0+1536+5f79634e | RLSA-2023:7025 |
| Rocky Linux:8 | rubygem-mysql2 | 0:0.5.3-1.module+el8.5.0+668+665814fa | RLSA-2022:6450 |
| Rocky Linux:8 | rubygem-mysql2 | 0:0.5.3-1.module+el8.4.0+411+b946f28c | RLSA-2022:6450 |
| Rocky Linux:8 | rubygem-mysql2 | 0:0.5.3-1.module+el8.4.0+594+11b6673a | RLSA-2022:6450 |
| Rocky Linux:8 | rubygem-mysql2 | 0:0.4.10-4.module+el8.9.0+1536+5f79634e | RLSA-2023:7025 |
| Rocky Linux:8 | rubygem-mysql2 | 0:0.5.3-1.module+el8.4.0+594+11b6673a | RLSA-2022:6447 |
| Rocky Linux:8 | rubygem-mysql2 | 0:0.5.3-1.module+el8.4.0+411+b946f28c | RLSA-2022:6447 |
| Rocky Linux:8 | rubygem-mysql2 | 0:0.5.3-1.module+el8.5.0+668+665814fa | RLSA-2022:6447 |
| Rocky Linux:8 | rubygem-mysql2 | 0:0.5.2-1.module+el8.4.0+593+8d7f9f0c | RLSA-2022:5338 |
| Rocky Linux:8 | rubygem-mysql2 | 0:0.5.2-1.module+el8.4.0+446+80b53620 | RLSA-2022:5338 |
| Rocky Linux:8 | rubygem-mysql2 | 0:0.5.2-1.module+el8.5.0+738+032c9c02 | RLSA-2022:5338 |
| Rocky Linux:8 | rubygem-pg | 0:1.2.3-1.module+el8.5.0+668+665814fa | RLSA-2022:6447 |
| Rocky Linux:8 | rubygem-pg | 0:1.1.4-1.module+el8.5.0+738+032c9c02 | RLSA-2022:5338 |
| Rocky Linux:8 | rubygem-pg | 0:1.2.3-1.module+el8.4.0+594+11b6673a | RLSA-2022:6447 |
| Rocky Linux:8 | rubygem-pg | 0:1.1.4-1.module+el8.4.0+593+8d7f9f0c | RLSA-2022:5338 |
| Rocky Linux:8 | rubygem-pg | 0:1.0.0-3.module+el8.9.0+1536+5f79634e | RLSA-2023:7025 |
| Rocky Linux:8 | rubygem-pg | 0:1.2.3-1.module+el8.5.0+668+665814fa | RLSA-2022:6450 |
| Rocky Linux:8 | rubygem-pg | 0:1.2.3-1.module+el8.4.0+411+b946f28c | RLSA-2022:6450 |
| Rocky Linux:8 | rubygem-pg | 0:1.2.3-1.module+el8.4.0+594+11b6673a | RLSA-2022:6450 |
| Rocky Linux:8 | rubygem-pg | 0:1.2.3-1.module+el8.4.0+411+b946f28c | RLSA-2022:6447 |
| Rocky Linux:8 | rubygem-pg | 0:1.1.4-1.module+el8.4.0+446+80b53620 | RLSA-2022:5338 |
| Ubuntu:22.04:LTS | ruby3.0 | 3.0.2-7ubuntu2.1 | USN-5462-1 |
| Ubuntu:22.04:LTS | ruby3.0 | 3.0.2-7ubuntu2.1 | UBUNTU-CVE-2022-28739 |
Affected products (as reported)
References
- https://hackerone.com/reports/1248108
- https://security-tracker.debian.org/tracker/CVE-2022-28739
- https://www.ruby-lang.org/en/news/2022/04/12/buffer-overrun-in-string-to-float-cve-2022-28739/
- https://security.netapp.com/advisory/ntap-20220624-0002/
- https://support.apple.com/kb/HT213488
- https://support.apple.com/kb/HT213494
- https://support.apple.com/kb/HT213493
- 20221030 APPLE-SA-2022-10-27-5 Additional information for APPLE-SA-2022-10-24-2 macOS Ventura 13 mailing-list
- 20221030 APPLE-SA-2022-10-24-2 macOS Ventura 13 mailing-list
- 20221030 APPLE-SA-2022-10-24-4 macOS Big Sur 11.7.1 mailing-list
- 20221030 APPLE-SA-2022-10-24-3 macOS Monterey 12.6.1 mailing-list
- 20221030 APPLE-SA-2022-10-27-6 Additional information for APPLE-SA-2022-10-24-3 macOS Monterey 12.6.1 mailing-list
- https://lists.debian.org/debian-lts-announce/2023/06/msg00012.html
- https://security.gentoo.org/glsa/202401-27
- https://lists.debian.org/debian-lts-announce/2024/09/msg00000.html