Date.parse in the date gem through 3.2.0 for Ruby allows ReDoS (regular expression Denial of Service) via a long string. The fixed versions are 3.2.1, 3.1.2, 3.0.2, and 2.0.1.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade rubygem-mysql2-docUpgrade rubygem-irbUpgrade ruby-irbUpgrade rubygem-opensslUpgrade rubygem-did_you_meanUpgrade ruby-develUpgrade rubygem-abrtUpgrade rubygem-bigdecimalUpgrade rubygem-rexmlUpgrade rubygem-bundlerUpgrade rubygem-rakeUpgrade rubyUpgrade ruby-default-gemsUpgrade rubygem-pg-docUpgrade rubygem-mongo-docUpgrade rubygem-io-consoleUpgrade rubygems-develUpgrade ruby-docUpgrade rubygem-rdocUpgrade rubygem-rbsUpgrade rubygem-abrt-docUpgrade rubygem-bson-docUpgrade rubygem-minitestUpgrade rubygem-power_assertUpgrade rubygem-rssUpgrade rubygem-xmlrpcUpgrade rubygem-psychUpgrade rubygem-typeprofUpgrade rubygem-jsonUpgrade rubygem-net-telnetUpgrade rubygem-bsonUpgrade rubygem-mysql2Upgrade rubygem-mongoUpgrade rubygemsUpgrade ruby-libsUpgrade rubygem-test-unitUpgrade rubygem-pgUpgrade rubygem-bundler-doc | May 4, 2022 | Jan 1, 2022 |
| Alpine Linux | — | Upgrade ruby | Aug 22, 2024 | Jan 1, 2022 |
| Amazon Linux Ami 2 | — | Upgrade rubygem-psychUpgrade rubygem-irbUpgrade rubygem-opensslUpgrade rubygem-bundlerUpgrade rubygem-rbsUpgrade ruby-libsUpgrade ruby-docUpgrade rubygem-jsonUpgrade rubyUpgrade ruby-default-gemsUpgrade rubygem-rakeUpgrade rubygem-did_you_meanUpgrade rubygem-rssUpgrade rubygem-rexmlUpgrade ruby-tcltkUpgrade ruby-develUpgrade rubygem-test-unitUpgrade rubygem-bigdecimalUpgrade rubygem-io-consoleUpgrade rubygem-typeprofUpgrade rubygem-power_assertUpgrade ruby-debuginfoUpgrade rubygems-develUpgrade rubygem-rdocUpgrade rubygem-minitestUpgrade rubygem-net-telnetUpgrade rubygemsUpgrade rubygem-xmlrpcUpgrade ruby-irb | Sep 28, 2023 | Jan 1, 2022 |
| Centos_linux | — | Upgrade rubygemsUpgrade rubygem-net-telnetUpgrade rubygem-typeprofUpgrade ruby-debugsourceUpgrade rubygem-bundler-docUpgrade rubygem-bsonUpgrade rubygem-minitestUpgrade ruby-libsUpgrade rubygem-json-debuginfoUpgrade rubygem-openssl-debuginfoUpgrade rubygems-develUpgrade rubygem-jsonUpgrade rubygem-psych-debuginfoUpgrade rubygem-mysql2-debugsourceUpgrade rubygem-power_assertUpgrade rubygem-pgUpgrade rubygem-rssUpgrade rubygem-mongoUpgrade rubygem-abrt-docUpgrade rubygem-bigdecimalUpgrade ruby-libs-debuginfoUpgrade rubygem-bson-debuginfoUpgrade rubygem-bson-docUpgrade rubygem-psychUpgrade ruby-debuginfoUpgrade rubygem-bundlerUpgrade ruby-irbUpgrade rubygem-xmlrpcUpgrade rubygem-mysql2Upgrade rubygem-mysql2-docUpgrade rubygem-abrtUpgrade rubyUpgrade rubygem-rexmlUpgrade rubygem-pg-debugsourceUpgrade rubygem-pg-debuginfoUpgrade rubygem-mongo-docUpgrade rubygem-io-consoleUpgrade rubygem-rbsUpgrade rubygem-pg-docUpgrade rubygem-did_you_meanUpgrade rubygem-bson-debugsourceUpgrade ruby-docUpgrade rubygem-rdocUpgrade rubygem-irbUpgrade rubygem-mysql2-debuginfoUpgrade ruby-develUpgrade rubygem-test-unitUpgrade rubygem-io-console-debuginfoUpgrade ruby-default-gemsUpgrade rubygem-rakeUpgrade rubygem-bigdecimal-debuginfoUpgrade rubygem-openssl | Feb 17, 2022 | Jan 1, 2022 |
| Debian | — | Upgrade ruby2.7 | Dec 28, 2021 | Dec 28, 2021 |
| Freebsd | — | Upgrade ruby30Upgrade ruby26Upgrade rubyUpgrade ruby27Upgrade rubygem-date | Nov 4, 2022 | Nov 15, 2021 |
| Gentoo Linux | — | Upgrade dev-lang/ruby. | Jan 25, 2024 | Jan 1, 2022 |
| Huawei Euleros 2_0_sp8 | — | Upgrade rubyUpgrade ruby-libsUpgrade ruby-irb | Jun 22, 2022 | Jan 1, 2022 |
| Oracle_linux | — | Upgrade rubygem-rbsUpgrade rubygem-typeprofUpgrade rubygem-opensslUpgrade rubygem-xmlrpcUpgrade rubygem-irbUpgrade rubygem-abrtUpgrade ruby-default-gemsUpgrade rubygem-bundlerUpgrade rubygem-abrt-docUpgrade rubygem-pg-docUpgrade rubyUpgrade rubygem-pgUpgrade rubygem-mongoUpgrade rubygem-bson-docUpgrade rubygem-mysql2-docUpgrade rubygem-psychUpgrade rubygem-power_assertUpgrade rubygem-mysql2Upgrade rubygem-rdocUpgrade rubygem-bundler-docUpgrade rubygemsUpgrade rubygem-minitestUpgrade rubygem-rssUpgrade rubygem-net-telnetUpgrade rubygem-mongo-docUpgrade rubygem-rexmlUpgrade rubygem-test-unitUpgrade ruby-develUpgrade ruby-docUpgrade rubygem-io-consoleUpgrade rubygem-bigdecimalUpgrade ruby-irbUpgrade rubygems-develUpgrade ruby-libsUpgrade rubygem-rakeUpgrade rubygem-bsonUpgrade rubygem-did_you_meanUpgrade rubygem-json | Feb 17, 2022 | Nov 15, 2021 |
| Redhat_linux | — | Upgrade rubygem-json-debuginfoUpgrade ruby-debugsourceUpgrade rubygem-rexmlUpgrade rubygem-jsonUpgrade rubygem-bigdecimal-debuginfoUpgrade rubygem-bson-docUpgrade rubygem-bson-debuginfoUpgrade rubygem-mongo-docUpgrade rubygem-abrt-docUpgrade rubygem-openssl-debuginfoUpgrade rubygem-mysql2-debugsourceUpgrade rubygem-typeprofUpgrade rubygem-did_you_meanUpgrade rubygem-bsonUpgrade rubygem-pg-debuginfoUpgrade rubygem-rakeUpgrade rubygem-io-consoleNo solution existsUpgrade ruby-libsUpgrade rubygem-bson-debugsourceUpgrade rubygem-psychUpgrade ruby-irbUpgrade rubygem-mysql2Upgrade rubygem-bigdecimalUpgrade rubygem-pg-docUpgrade rubygem-rssUpgrade rubygem-rbsUpgrade rubygem-irbUpgrade rubygem-bundler-docUpgrade rubygem-psych-debuginfoUpgrade rubygem-opensslUpgrade rubygem-minitestUpgrade ruby-default-gemsUpgrade rubygem-abrtUpgrade ruby-docUpgrade rubygem-mongoUpgrade ruby-develUpgrade rubygem-power_assertUpgrade rubygem-mysql2-debuginfoUpgrade rubygem-test-unitUpgrade rubygem-xmlrpcUpgrade rubyUpgrade rubygem-bundlerUpgrade ruby-libs-debuginfoUpgrade rubygem-io-console-debuginfoUpgrade rubygem-pg-debugsourceUpgrade rubygemsUpgrade rubygem-rdocUpgrade rubygem-mysql2-docUpgrade ruby-debuginfoUpgrade rubygems-develUpgrade rubygem-net-telnetUpgrade rubygem-pg | Feb 17, 2022 | Jan 1, 2022 |
| Rocky_linux | — | Upgrade rubyUpgrade rubygem-json-debuginfoUpgrade rubygem-mysql2-debuginfoUpgrade ruby-libs-debuginfoUpgrade rubygem-pgUpgrade ruby-debuginfoUpgrade ruby-develUpgrade rubygem-bigdecimal-debuginfoUpgrade rubygem-io-console-debuginfoUpgrade rubygem-opensslUpgrade rubygem-psychUpgrade ruby-libsUpgrade rubygem-bigdecimalUpgrade rubygem-pg-debugsourceUpgrade rubygem-psych-debuginfoUpgrade rubygem-bson-debuginfoUpgrade rubygem-jsonUpgrade rubygem-mysql2-debugsourceUpgrade ruby-debugsourceUpgrade rubygem-openssl-debuginfoUpgrade rubygem-io-consoleUpgrade rubygem-bson-debugsourceUpgrade rubygem-bsonUpgrade rubygem-pg-debuginfoUpgrade rubygem-mysql2 | Mar 5, 2024 | Jan 1, 2022 |
| Suse | — | Upgrade ruby2.5-develUpgrade ruby2.5Upgrade ruby2.5-devel-extraUpgrade libruby2_5-2_5Upgrade ruby2.5-doc-riUpgrade ruby2.5-stdlibUpgrade ruby2.5-doc | Oct 26, 2022 | Jan 1, 2022 |
| Ubuntu | — | Upgrade ruby2.7Upgrade ruby2.5Upgrade ruby2.3 (Ubuntu Pro) | Jan 19, 2022 | Jan 1, 2022 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Jan 1, 2022 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub