A ReDoS issue was discovered in the URI component through 0.12.0 in Ruby through 3.2.1. The URI parser mishandles invalid URLs that have specific characters. It causes an increase in execution time for parsing strings to URI objects. The fixed versions are 0.12.1, 0.11.1, 0.10.2 and 0.10.0.1.
CVSS Details
- CVSS 3.1 Base Score: 5.3
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade rubygem-bundler-docUpgrade rubygem-rssUpgrade rubygem-mongo-docUpgrade rubygem-mysql2Upgrade ruby-bundled-gemsUpgrade ruby-irbUpgrade rubyUpgrade rubygem-mysql2-docUpgrade rubygem-rbsUpgrade rubygem-irbUpgrade ruby-develUpgrade rubygem-bsonUpgrade rubygem-bundlerUpgrade rubygem-rexmlUpgrade ruby-docUpgrade rubygem-did_you_meanUpgrade rubygem-jsonUpgrade rubygem-opensslUpgrade rubygem-pg-docUpgrade rubygem-rdocUpgrade rubygem-rakeUpgrade ruby-default-gemsUpgrade rubygem-abrtUpgrade rubygem-minitestUpgrade rubygem-typeprofUpgrade rubygem-net-telnetUpgrade rubygem-bson-docUpgrade ruby-libsUpgrade rubygem-mongoUpgrade rubygem-test-unitUpgrade rubygem-io-consoleUpgrade rubygem-bigdecimalUpgrade rubygem-pgUpgrade rubygem-abrt-docUpgrade rubygemsUpgrade rubygem-power_assertUpgrade rubygem-xmlrpcUpgrade rubygem-psychUpgrade rubygems-devel | Jul 4, 2023 | Mar 31, 2023 |
| Alpine Linux | — | Upgrade ruby | Mar 26, 2024 | Mar 31, 2023 |
| Amazon Linux Ami 2 | — | Upgrade rubygem-irbUpgrade rubygem-bigdecimalUpgrade rubygem-psychUpgrade rubygem-jsonUpgrade ruby-libsUpgrade rubyUpgrade rubygem-rssUpgrade rubygem-bundlerUpgrade rubygem-test-unitUpgrade rubygem-rexmlUpgrade ruby-docUpgrade ruby-default-gemsUpgrade ruby-debuginfoUpgrade rubygem-rbsUpgrade rubygemsUpgrade rubygem-rdocUpgrade rubygem-minitestUpgrade rubygems-develUpgrade rubygem-typeprofUpgrade rubygem-power_assertUpgrade ruby-develUpgrade rubygem-rakeUpgrade rubygem-io-console | Sep 28, 2023 | Mar 31, 2023 |
| Amazon_linux_2023 | — | Upgrade ruby3.2-rubygems-develUpgrade ruby3.2-rubygem-typeprofUpgrade ruby3.2-libs-debuginfoUpgrade ruby3.2-rubygem-io-consoleUpgrade ruby3.2-rubygem-rakeUpgrade ruby3.2-bundled-gemsUpgrade ruby3.2-rubygem-json-debuginfoUpgrade ruby3.2-rubygem-rbsUpgrade ruby3.2-rubygem-irbUpgrade ruby3.2-rubygem-jsonUpgrade ruby3.2-rubygem-rbs-debuginfoUpgrade ruby3.2-bundled-gems-debuginfoUpgrade ruby3.2-default-gemsUpgrade ruby3.2-develUpgrade ruby3.2Upgrade ruby3.2-debugsourceUpgrade ruby3.2-rubygem-bigdecimal-debuginfoUpgrade ruby3.2-rubygem-test-unitUpgrade ruby3.2-rubygem-bigdecimalUpgrade ruby3.2-rubygem-power_assertUpgrade ruby3.2-rubygem-psych-debuginfoUpgrade ruby3.2-debuginfoUpgrade ruby3.2-rubygem-rexmlUpgrade ruby3.2-rubygem-io-console-debuginfoUpgrade ruby3.2-rubygemsUpgrade ruby3.2-rubygem-minitestUpgrade ruby3.2-rubygem-psychUpgrade ruby3.2-libsUpgrade ruby3.2-docUpgrade ruby3.2-rubygem-rssUpgrade ruby3.2-rubygem-bundlerUpgrade ruby3.2-rubygem-rdoc | Feb 17, 2025 | Mar 21, 2023 |
| Centos_linux | — | Upgrade rubygem-minitestUpgrade rubygem-pg-debugsourceUpgrade rubygem-abrtUpgrade rubygem-bundler-docUpgrade rubygem-mysql2-docUpgrade rubygem-opensslUpgrade rubygem-psych-debuginfoUpgrade rubygem-mysql2Upgrade rubygem-rdocUpgrade rubygem-bundlerUpgrade rubygem-irbUpgrade ruby-develUpgrade rubygem-test-unitUpgrade rubygem-xmlrpcUpgrade ruby-docUpgrade rubygem-mongoUpgrade rubygem-io-console-debuginfoUpgrade rubygem-mysql2-debuginfoUpgrade rubygem-power_assertUpgrade rubygem-pgUpgrade ruby-libs-debuginfoUpgrade rubygem-mongo-docUpgrade rubyUpgrade rubygemsUpgrade ruby-debuginfoUpgrade ruby-irbUpgrade ruby-default-gemsUpgrade rubygem-pg-debuginfoUpgrade rubygem-io-consoleUpgrade rubygem-jsonUpgrade rubygem-bson-docUpgrade rubygem-bsonUpgrade rubygem-bigdecimalUpgrade ruby-libsUpgrade rubygem-net-telnetUpgrade rubygem-rakeUpgrade rubygem-pg-docUpgrade rubygem-bson-debuginfoUpgrade rubygem-bson-debugsourceUpgrade rubygem-json-debuginfoUpgrade ruby-debugsourceUpgrade rubygems-develUpgrade rubygem-openssl-debuginfoUpgrade rubygem-abrt-docUpgrade rubygem-did_you_meanUpgrade rubygem-bigdecimal-debuginfoUpgrade rubygem-psychUpgrade rubygem-mysql2-debugsource | Jun 28, 2023 | Mar 31, 2023 |
| Debian | — | Upgrade ruby2.7Upgrade rubygemsUpgrade jruby | May 2, 2023 | Mar 31, 2023 |
| Dell Powerstore Dsa2024158 | — | Upgrade Dell PowerStoreOS to the latest version | Jan 13, 2026 | Apr 4, 2024 |
| Dell Powerstore Dsa2024225 | — | Upgrade Dell PowerStoreOS to the latest version | Oct 23, 2025 | May 29, 2024 |
| Freebsd | — | Upgrade rubygem-uriUpgrade ruby30Upgrade ruby32Upgrade rubyUpgrade ruby27Upgrade ruby31 | Apr 1, 2023 | Mar 30, 2023 |
| Gentoo Linux | — | Upgrade dev-lang/ruby. | Jan 25, 2024 | Mar 31, 2023 |
| Huawei Euleros 2_0_sp10 | — | Upgrade ruby-helpUpgrade rubyUpgrade ruby-irb | Jul 18, 2023 | Mar 31, 2023 |
| Huawei Euleros 2_0_sp11 | — | Upgrade rubyUpgrade ruby-helpUpgrade ruby-irb | Jan 10, 2024 | Mar 31, 2023 |
| Nutanix Ahv | — | Upgrade Nutanix AHV to the latest version | Jun 5, 2026 | Sep 22, 2023 |
| Oracle_linux | — | Upgrade rubygem-rexmlUpgrade ruby-default-gemsUpgrade rubygem-opensslUpgrade rubygem-net-telnetUpgrade rubyUpgrade rubygem-pgUpgrade rubygem-rssUpgrade rubygem-bundlerUpgrade rubygemsUpgrade rubygem-rbsUpgrade rubygem-bundler-docUpgrade rubygem-psychUpgrade ruby-docUpgrade rubygem-abrt-docUpgrade rubygem-mongo-docUpgrade rubygem-test-unitUpgrade rubygem-mysql2Upgrade rubygem-xmlrpcUpgrade rubygem-did_you_meanUpgrade rubygem-rdocUpgrade ruby-libsUpgrade ruby-bundled-gemsUpgrade rubygem-jsonUpgrade rubygem-bsonUpgrade rubygem-abrtUpgrade ruby-develUpgrade rubygem-minitestUpgrade rubygem-pg-docUpgrade rubygem-power_assertUpgrade rubygem-mongoUpgrade rubygem-rakeUpgrade rubygem-typeprofUpgrade rubygems-develUpgrade rubygem-bigdecimalUpgrade rubygem-irbUpgrade ruby-irbUpgrade rubygem-mysql2-docUpgrade rubygem-bson-docUpgrade rubygem-io-console | Jul 8, 2023 | Mar 21, 2023 |
| Redhat_linux | — | Upgrade rubygem-bson-debuginfoUpgrade rubygem-mysql2-debugsourceUpgrade rubygem-abrt-docUpgrade rubygem-rbs-debuginfoUpgrade rubygem-jsonUpgrade rubygem-mongoUpgrade rubygem-bson-docUpgrade rubygem-psych-debuginfoUpgrade rubygem-minitestUpgrade rubygem-bsonUpgrade rubygem-json-debuginfoNo solution existsUpgrade rubygemsUpgrade ruby-debugsourceUpgrade rubygem-typeprofUpgrade ruby-debuginfoUpgrade rubygems-develUpgrade ruby-libsUpgrade rubygem-io-consoleUpgrade rubygem-bigdecimal-debuginfoUpgrade rubygem-power_assertUpgrade rubygem-rssUpgrade rubygem-bigdecimalUpgrade rubygem-net-telnetUpgrade rubygem-openssl-debuginfoUpgrade rubygem-psychUpgrade rubygem-bson-debugsourceUpgrade rubygem-rexmlUpgrade rubygem-rbsUpgrade rubygem-io-console-debuginfoUpgrade rubygem-abrtUpgrade rubygem-mongo-docUpgrade rubygem-rakeUpgrade rubygem-xmlrpcUpgrade ruby-docUpgrade ruby-bundled-gemsUpgrade rubygem-pg-debuginfoUpgrade rubygem-mysql2Upgrade ruby-develUpgrade ruby-irbUpgrade rubygem-irbUpgrade rubygem-mysql2-docUpgrade rubygem-bundlerUpgrade rubygem-rdocUpgrade rubygem-pgUpgrade rubyUpgrade rubygem-pg-debugsourceUpgrade rubygem-bundler-docUpgrade rubygem-test-unitUpgrade rubygem-opensslUpgrade ruby-default-gemsUpgrade ruby-libs-debuginfoUpgrade rubygem-mysql2-debuginfoUpgrade rubygem-pg-docUpgrade ruby-bundled-gems-debuginfoUpgrade rubygem-did_you_mean | Jun 28, 2023 | Mar 31, 2023 |
| Rocky_linux | — | Upgrade rubygem-pg-debugsourceUpgrade rubygem-mysql2-debugsourceUpgrade rubygem-rbsUpgrade ruby-debugsourceUpgrade rubygem-pgUpgrade ruby-libs-debuginfoUpgrade ruby-libsUpgrade rubygem-json-debuginfoUpgrade rubygem-psych-debuginfoUpgrade ruby-bundled-gemsUpgrade rubygem-bsonUpgrade rubygem-openssl-debuginfoUpgrade rubygem-jsonUpgrade rubygem-psychUpgrade ruby-debuginfoUpgrade rubygem-mysql2Upgrade rubygem-io-consoleUpgrade rubygem-mysql2-debuginfoUpgrade rubygem-bson-debuginfoUpgrade ruby-bundled-gems-debuginfoUpgrade rubygem-io-console-debuginfoUpgrade rubygem-pg-debuginfoUpgrade rubygem-bigdecimalUpgrade rubygem-bigdecimal-debuginfoUpgrade rubygem-rbs-debuginfoUpgrade rubygem-bson-debugsourceUpgrade rubyUpgrade rubygem-opensslUpgrade ruby-devel | Mar 5, 2024 | Mar 31, 2023 |
| Suse | — | Upgrade ruby2.5-devel-extraUpgrade ruby2.5-docUpgrade ruby2.5-develUpgrade ruby2.5Upgrade ruby2.5-stdlibUpgrade libruby2_5-2_5Upgrade ruby2.5-doc-ri | Oct 25, 2023 | Mar 31, 2023 |
| Ubuntu | — | Upgrade libruby2.7Upgrade ruby3.1Upgrade libruby3.1Upgrade libruby2.3 (Ubuntu Pro)Upgrade ruby2.5Upgrade ruby2.7Upgrade ruby-rubygemsUpgrade libruby2.5Upgrade ruby2.3 (Ubuntu Pro) | May 5, 2023 | Mar 31, 2023 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Mar 31, 2023 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub