Ruby has released versions 4.0.9, 3.4.12, and 3.3.13 to fix three bugs in Onigmo, the regular expression engine built into the language. The bugs lie behind four critical security flaws that GitLab patched over the past month. GitLab found that a specially crafted pattern could corrupt memory while Ruby compiles it, potentially leading to code... Weiterlesen: Ruby Fixes Three Regex Engine Bugs Responsible for Four Critical GitL…
Intelligence View
⚡ tsecurity.de Intelligence
Ruby Fixes Three Regex Engine Bugs Responsible for Four Critical GitLab RCE Flaws
Ruby has released versions 4.0.9, 3.4.12, and 3.3.13 to fix three bugs in Onigmo, the regular expression engine built into the language. The bugs lie behind…
Social ReaktionenReagiere als Erste:r — dein Feedback zählt!
🔍 CTI & Forensik
2
Cyber Threat Intelligence & Forensik
ATT&CK-Navigator · IoC-Radar · Exploit-Belege
MITRE ATT&CK Matrix Navigator
T1190TA0001 · Initial Access
Exploit Public-Facing Application
Mitigation: M1042 Network Segmentation & WAF Rule Enforcement
Quelle: Kontext-Klassifikation des Artikeltextes
Initial Access
CTI Threat Relationship Graph
Akteure · Techniken · Beziehungen
CVE / Incident Threat Actor Software MITRE ATT&CK CWE Weakness IoC
Powered by tsecurity.de
tsecurity.de Hub
Intelligence Digest — free The top security news daily · unsubscribe anytime
Community Rating & Social Proof
⭐ Leser-Wertung
–
Ø / 5.0
★★★★★
No reader ratings yet
Was this page helpful?
0
Powered by tsecurity.de
tsecurity.de Hub
This story across other sources
Related story clusters & sources (vector AI)
11 sources
CVE-2022-47698 | Comfast CF-WR623N 2.3.0.1 URL Filtering cross site scripting (EUVD-2022-50457)
10 more sources
VVulDB Updates37 min. agoCVE-2022-47699 | Comfast CF-WR623N 2.3.0.1 access control (EUVD-2022-50458) VVulDB Updates37 min. agoCVE-2022-47700 | Comfast CF-WR623N up to 2.3.0.1 improper authentication (EUVD-2022-50459) VVulDB Updates37 min. agoCVE-2022-47701 | Comfast CF-WR623N 2.3.0.1 cross site scripting (EUVD-2022-50460) VVulDB Updates3 hours agoCVE-2025-58611 | Tickera Plugin up to 3.5.5.6 on WordPress cross-site request forgery VVulDB Updates3 hours agoCVE-2025-9823 | Mautic up to 4.4.16/5.2.7/6.0.4 ajax?action=lead:addLeadTags cross site scripting VVulDB Updates3 hours agoCVE-2025-58605 | WP Delicious Plugin up to 1.8.7 on WordPress cross site scripting
+4
10 sources
CVE-2022-47653 | GPAC 2.1-DEV-rev593-g007bf61a0 MP4box media_tools/av_parsers.c eac3_update_channels buffer overflow (Issue 2349 / EUVD-2022-50412)
9 more sources
VVulDB Updates4 hours agoCVE-2022-47654 | GPAC 2.1-DEV-rev593-g007bf61a0 MP4box media_tools/av_parsers.c gf_hevc_read_sps_bs_internal buffer overflow (Issue 2350 / EUVD-2022-50413) VVulDB Updates4 hours agoCVE-2022-47656 | GPAC 2.1-DEV-rev617-g85ce76efd MP4box media_tools/av_parsers.c gf_hevc_read_sps_bs_internal buffer overflow (Issue 2353 / EUVD-2022-50415) VVulDB Updates3 hours agoCVE-2022-47659 | GPAC 2.1-DEV-rev644-g5c4df2a67 MP4box gf_bs_read_data buffer overflow (Issue 2354 / EUVD-2022-50418) VVulDB Updates3 hours agoCVE-2022-47658 | GPAC 2.1-DEV-rev644-g5c4df2a67 MP4Box media_tools/av_parsers.c gf_hevc_read_vps_bs_internal buffer overflow (Issue 2356 / EUVD-2022-50417) VVulDB Updates3 hours agoCVE-2022-47657 | GPAC 2.1-DEV-rev644-g5c4df2a67 MP4Box media_tools/av_parsers.c hevc_parse_vps_extension buffer overflow (Issue 2355 / EUVD-2022-50416) VVulDB Updates3 hours agoCVE-2022-47660 | GPAC 2.1-DEV-rev644-g5c4df2a67 MP4Box isomedia/isom_write.c integer overflow (Issue 2357 / EUVD-2022-50419)
+3
8 sources
CVE-2025-68729 | Linux Kernel up to 6.17.12/6.18.1 wifi ath12k_hal_desc_reo_parse_err buffer overflow (Nessus ID 279834 / WID-SEC-2025-2920)
7 more sources
VVulDB Updates2 hours agoCVE-2025-68374 | Linux Kernel up to 6.12.62/6.17.12/6.18.1 md_wakeup_thread use after free (Nessus ID 279706 / WID-SEC-2025-2920) VVulDB Updates2 hours agoCVE-2025-68359 | Linux Kernel up to 6.17.12/6.18.1 btrfs kfree double free (Nessus ID 279727 / WID-SEC-2025-2920) VVulDB Updates2 hours agoCVE-2025-68360 | Linux Kernel up to 6.17.12/6.18.1 wed_hif2 state issue (Nessus ID 279699 / WID-SEC-2025-2920) VVulDB Updates2 hours agoCVE-2025-68368 | Linux Kernel up to 6.18.1 md_run null pointer dereference (Nessus ID 279769 / WID-SEC-2025-2920) VVulDB Updates2 hours agoCVE-2025-68356 | Linux Kernel up to 6.12.62/6.17.12/6.18.1 new_inode allocation of resources (Nessus ID 279734 / WID-SEC-2025-2920) VVulDB Updates2 hours agoCVE-2025-68353 | Linux Kernel up to 6.18.1 net vxlan_xmit_one null pointer dereference (Nessus ID 279713 / WID-SEC-2025-2920)
+1
Mehr aus dieser Kategorie
Blättern: Pfeiltasten [ ← ] [ → ] · Tasten j / k · mobil: Wischen
HAND-OFF
Auf Smartphone übergeben (ADVISORY)
Scannen Sie den QR-Code mit der Smartphone-Kamera für sofortigen mobilen Zugriff:
https://tsecurity.de/en/4293301/vulnerabilities-cve/ruby-fixes-three-regex-engine-bugs-responsible-for-four-critical-gitlab-rce-flaws/