CVE ID:	CVE-2022-28739
Description:	There is a buffer over-read in Ruby before 2.6.10, 2.7.x before 2.7.6, 3.x before 3.0.4, and 3.1.x before 3.1.2. It occurs in String-to-Float conversion, including Kernel#Float and String#to_f.
Test IDs:	1.3.6.1.4.1.25623.1.1.2.2022.2261   1.3.6.1.4.1.25623.1.1.2.2022.2634   1.3.6.1.4.1.25623.1.1.2.2022.1980   1.3.6.1.4.1.25623.1.1.2.2022.2010   1.3.6.1.4.1.25623.1.1.2.2022.1915   1.3.6.1.4.1.25623.1.1.1.2.2023.3450   1.3.6.1.4.1.25623.1.1.2.2023.1721   1.3.6.1.4.1.25623.1.1.12.2022.5462.2   1.3.6.1.4.1.25623.1.1.2.2022.2248
Cross References:	Common Vulnerability Exposure (CVE) ID: CVE-2022-28739 https://security.gentoo.org/glsa/202401-27 20221030 APPLE-SA-2022-10-24-2 macOS Ventura 13 http://seclists.org/fulldisclosure/2022/Oct/28 20221030 APPLE-SA-2022-10-24-3 macOS Monterey 12.6.1 http://seclists.org/fulldisclosure/2022/Oct/29 20221030 APPLE-SA-2022-10-24-4 macOS Big Sur 11.7.1 http://seclists.org/fulldisclosure/2022/Oct/30 20221030 APPLE-SA-2022-10-27-5 Additional information for APPLE-SA-2022-10-24-2 macOS Ventura 13 http://seclists.org/fulldisclosure/2022/Oct/41 20221030 APPLE-SA-2022-10-27-6 Additional information for APPLE-SA-2022-10-24-3 macOS Monterey 12.6.1 http://seclists.org/fulldisclosure/2022/Oct/42 https://hackerone.com/reports/1248108 https://hackerone.com/reports/1248108 https://security-tracker.debian.org/tracker/CVE-2022-28739 https://security-tracker.debian.org/tracker/CVE-2022-28739 https://security.netapp.com/advisory/ntap-20220624-0002/ https://security.netapp.com/advisory/ntap-20220624-0002/ https://support.apple.com/kb/HT213488 https://support.apple.com/kb/HT213488 https://support.apple.com/kb/HT213493 https://support.apple.com/kb/HT213493 https://support.apple.com/kb/HT213494 https://support.apple.com/kb/HT213494 https://www.ruby-lang.org/en/news/2022/04/12/buffer-overrun-in-string-to-float-cve-2022-28739/ https://www.ruby-lang.org/en/news/2022/04/12/buffer-overrun-in-string-to-float-cve-2022-28739/ https://lists.debian.org/debian-lts-announce/2023/06/msg00012.html