A ReDoS issue was discovered in the Time component through 0.2.1 in Ruby through 3.2.1. The Time parser mishandles invalid URLs that have specific characters. It causes an increase in execution time for parsing strings to Time objects. The fixed versions are 0.1.1 and 0.2.2.
CVSS Details
- CVSS 3.1 Base Score: 5.3
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade ruby-develUpgrade rubygem-pg-docUpgrade rubygem-abrt-docUpgrade rubygem-rdocUpgrade rubygem-power_assertUpgrade rubygem-minitestUpgrade rubygem-psychUpgrade rubygem-net-telnetUpgrade rubygem-abrtUpgrade rubygem-pgUpgrade rubygemsUpgrade rubygem-typeprofUpgrade rubygem-rbsUpgrade rubygem-mysql2-docUpgrade rubygem-bundlerUpgrade rubygem-opensslUpgrade rubygem-bundler-docUpgrade rubygem-irbUpgrade rubygem-jsonUpgrade ruby-default-gemsUpgrade ruby-bundled-gemsUpgrade rubygem-mysql2Upgrade rubygem-mongoUpgrade rubyUpgrade rubygem-bsonUpgrade rubygems-develUpgrade rubygem-test-unitUpgrade rubygem-rssUpgrade rubygem-rakeUpgrade ruby-docUpgrade rubygem-io-consoleUpgrade ruby-irbUpgrade ruby-libsUpgrade rubygem-mongo-docUpgrade rubygem-xmlrpcUpgrade rubygem-did_you_meanUpgrade rubygem-bson-docUpgrade rubygem-rexmlUpgrade rubygem-bigdecimal | Jul 4, 2023 | Mar 31, 2023 |
| Alpine Linux | — | Upgrade ruby | Mar 26, 2024 | Mar 31, 2023 |
| Amazon Linux Ami 2 | — | Upgrade ruby-libsUpgrade rubygem-psychUpgrade rubygem-rexmlUpgrade rubygems-develUpgrade rubygem-rssUpgrade ruby-tcltkUpgrade rubygem-io-consoleUpgrade rubygem-bigdecimalUpgrade rubygem-typeprofUpgrade rubygem-rakeUpgrade rubygem-jsonUpgrade ruby-default-gemsUpgrade rubyUpgrade ruby-irbUpgrade rubygem-minitestUpgrade ruby-docUpgrade rubygem-power_assertUpgrade rubygem-irbUpgrade rubygemsUpgrade ruby-debuginfoUpgrade rubygem-test-unitUpgrade rubygem-rdocUpgrade rubygem-bundlerUpgrade rubygem-rbsUpgrade ruby-devel | Jun 13, 2023 | Mar 31, 2023 |
| Amazon_linux_2023 | — | Upgrade ruby3.2-rubygem-psychUpgrade ruby3.2-rubygem-bundlerUpgrade ruby3.2-rubygem-rssUpgrade ruby3.2-bundled-gems-debuginfoUpgrade ruby3.2-rubygem-io-console-debuginfoUpgrade ruby3.2-rubygem-io-consoleUpgrade ruby3.2-debugsourceUpgrade ruby3.2-rubygemsUpgrade ruby3.2-rubygem-json-debuginfoUpgrade ruby3.2-libsUpgrade ruby3.2-libs-debuginfoUpgrade ruby3.2-rubygem-bigdecimal-debuginfoUpgrade ruby3.2-rubygem-irbUpgrade ruby3.2-default-gemsUpgrade ruby3.2-bundled-gemsUpgrade ruby3.2-rubygem-minitestUpgrade ruby3.2-docUpgrade ruby3.2-rubygem-test-unitUpgrade ruby3.2-rubygem-rakeUpgrade ruby3.2-rubygem-typeprofUpgrade ruby3.2-rubygem-power_assertUpgrade ruby3.2-debuginfoUpgrade ruby3.2-develUpgrade ruby3.2-rubygem-rbs-debuginfoUpgrade ruby3.2-rubygem-psych-debuginfoUpgrade ruby3.2-rubygem-jsonUpgrade ruby3.2-rubygem-bigdecimalUpgrade ruby3.2-rubygem-rbsUpgrade ruby3.2-rubygem-rexmlUpgrade ruby3.2Upgrade ruby3.2-rubygems-develUpgrade ruby3.2-rubygem-rdoc | Feb 17, 2025 | Mar 21, 2023 |
| Centos_linux | — | Upgrade rubygem-opensslUpgrade ruby-libsUpgrade rubygem-bundler-docUpgrade ruby-libs-debuginfoUpgrade rubygem-bigdecimal-debuginfoUpgrade rubygem-psychUpgrade rubygems-develUpgrade rubygem-json-debuginfoUpgrade rubygem-bson-docUpgrade rubygem-abrt-docUpgrade rubygemsUpgrade rubygem-psych-debuginfoUpgrade rubygem-mongoUpgrade rubygem-bson-debugsourceUpgrade ruby-default-gemsUpgrade rubygem-power_assertUpgrade ruby-debugsourceUpgrade rubygem-rdocUpgrade rubygem-pgUpgrade rubygem-pg-docUpgrade rubygem-net-telnetUpgrade rubygem-minitestUpgrade rubygem-jsonUpgrade rubygem-xmlrpcUpgrade rubygem-mysql2-docUpgrade rubygem-pg-debugsourceUpgrade rubygem-bson-debuginfoUpgrade rubygem-abrtUpgrade rubygem-mongo-docUpgrade ruby-irbUpgrade rubygem-rakeUpgrade ruby-debuginfoUpgrade ruby-docUpgrade rubygem-mysql2-debuginfoUpgrade rubygem-io-console-debuginfoUpgrade rubygem-mysql2Upgrade rubygem-did_you_meanUpgrade rubygem-mysql2-debugsourceUpgrade ruby-develUpgrade rubyUpgrade rubygem-pg-debuginfoUpgrade rubygem-bundlerUpgrade rubygem-test-unitUpgrade rubygem-bsonUpgrade rubygem-io-consoleUpgrade rubygem-bigdecimalUpgrade rubygem-openssl-debuginfoUpgrade rubygem-irb | Jun 28, 2023 | Mar 31, 2023 |
| Debian | — | Upgrade jrubyUpgrade ruby2.7 | May 2, 2023 | Mar 31, 2023 |
| Dell Powerstore Dsa2024158 | — | Upgrade Dell PowerStoreOS to the latest version | Jan 13, 2026 | Apr 4, 2024 |
| Dell Powerstore Dsa2024225 | — | Upgrade Dell PowerStoreOS to the latest version | Oct 23, 2025 | May 29, 2024 |
| Freebsd | — | Upgrade rubygem-timeUpgrade ruby32Upgrade rubyUpgrade ruby27Upgrade ruby31Upgrade ruby30 | Apr 1, 2023 | Mar 30, 2023 |
| Gentoo Linux | — | Upgrade dev-lang/ruby. | Jan 25, 2024 | Mar 31, 2023 |
| Huawei Euleros 2_0_sp10 | — | Upgrade rubyUpgrade ruby-helpUpgrade ruby-irb | May 9, 2023 | Mar 31, 2023 |
| Huawei Euleros 2_0_sp11 | — | Upgrade rubyUpgrade ruby-irbUpgrade ruby-help | Jan 10, 2024 | Mar 31, 2023 |
| Huawei Euleros 2_0_sp9 | — | Upgrade ruby-irbUpgrade ruby-helpUpgrade ruby | Jul 10, 2023 | Mar 31, 2023 |
| Nutanix Ahv | — | Upgrade Nutanix AHV to the latest version | Jun 5, 2026 | Sep 22, 2023 |
| Oracle_linux | — | Upgrade rubygems-develUpgrade rubygem-pgUpgrade rubygem-abrt-docUpgrade rubygem-xmlrpcUpgrade ruby-bundled-gemsUpgrade rubygem-opensslUpgrade rubygem-test-unitUpgrade rubygem-bsonUpgrade rubygem-bson-docUpgrade rubygem-mysql2-docUpgrade rubygem-bundler-docUpgrade rubygem-minitestUpgrade ruby-default-gemsUpgrade rubygem-rdocUpgrade rubygemsUpgrade rubygem-power_assertUpgrade rubygem-net-telnetUpgrade rubygem-rssUpgrade ruby-libsUpgrade rubygem-mongoUpgrade rubygem-typeprofUpgrade rubygem-psychUpgrade rubygem-jsonUpgrade rubygem-irbUpgrade rubygem-io-consoleUpgrade rubygem-rbsUpgrade ruby-develUpgrade rubygem-mysql2Upgrade rubygem-mongo-docUpgrade rubygem-rexmlUpgrade ruby-irbUpgrade ruby-docUpgrade rubyUpgrade rubygem-bigdecimalUpgrade rubygem-bundlerUpgrade rubygem-pg-docUpgrade rubygem-did_you_meanUpgrade rubygem-abrtUpgrade rubygem-rake | Jul 8, 2023 | Mar 21, 2023 |
| Redhat_linux | — | Upgrade rubygem-mongo-docUpgrade rubygem-mysql2-debuginfoUpgrade rubygemsUpgrade rubygem-pgUpgrade rubygems-develUpgrade rubygem-json-debuginfoUpgrade rubygem-rbs-debuginfoUpgrade rubygem-io-console-debuginfoUpgrade rubygem-opensslUpgrade rubygem-mysql2-docUpgrade rubygem-xmlrpcUpgrade ruby-default-gemsUpgrade rubygem-psych-debuginfoUpgrade ruby-bundled-gems-debuginfoUpgrade rubygem-bson-docUpgrade ruby-libs-debuginfoUpgrade ruby-develUpgrade rubygem-bundler-docUpgrade rubygem-did_you_meanUpgrade rubygem-rexmlUpgrade rubygem-test-unitUpgrade rubygem-rdocUpgrade ruby-debuginfoUpgrade rubygem-mysql2Upgrade rubygem-power_assertUpgrade rubygem-rssUpgrade rubygem-psychUpgrade ruby-irbUpgrade rubygem-minitestUpgrade rubygem-io-consoleUpgrade rubygem-abrt-docUpgrade rubygem-typeprofUpgrade rubygem-pg-docUpgrade rubygem-pg-debuginfoUpgrade rubygem-mysql2-debugsourceUpgrade rubygem-abrtUpgrade rubygem-irbUpgrade rubygem-bson-debugsourceUpgrade ruby-bundled-gemsUpgrade rubygem-jsonUpgrade rubygem-pg-debugsourceUpgrade rubygem-bson-debuginfoUpgrade ruby-docUpgrade rubyUpgrade rubygem-net-telnetUpgrade rubygem-openssl-debuginfoUpgrade rubygem-mongoUpgrade ruby-libsUpgrade rubygem-rakeUpgrade rubygem-rbsUpgrade rubygem-bigdecimalNo solution existsUpgrade rubygem-bundlerUpgrade rubygem-bigdecimal-debuginfoUpgrade ruby-debugsourceUpgrade rubygem-bson | Jun 28, 2023 | Mar 31, 2023 |
| Rocky_linux | — | Upgrade ruby-debugsourceUpgrade rubygem-bsonUpgrade ruby-bundled-gemsUpgrade rubygem-io-consoleUpgrade rubygem-pg-debuginfoUpgrade rubygem-openssl-debuginfoUpgrade rubygem-bson-debugsourceUpgrade rubygem-mysql2-debugsourceUpgrade rubygem-rbs-debuginfoUpgrade rubygem-jsonUpgrade ruby-libsUpgrade rubygem-bigdecimalUpgrade rubygem-bson-debuginfoUpgrade rubygem-bigdecimal-debuginfoUpgrade rubygem-psychUpgrade ruby-debuginfoUpgrade rubygem-json-debuginfoUpgrade rubygem-pg-debugsourceUpgrade rubygem-rbsUpgrade rubygem-pgUpgrade rubygem-opensslUpgrade ruby-bundled-gems-debuginfoUpgrade rubygem-io-console-debuginfoUpgrade rubyUpgrade ruby-develUpgrade rubygem-mysql2-debuginfoUpgrade rubygem-psych-debuginfoUpgrade rubygem-mysql2Upgrade ruby-libs-debuginfo | Mar 5, 2024 | Mar 31, 2023 |
| Suse | — | Upgrade ruby2.5-docUpgrade ruby2.5Upgrade ruby2.5-develUpgrade ruby2.5-devel-extraUpgrade libruby2_5-2_5Upgrade ruby2.5-stdlibUpgrade ruby2.5-doc-ri | Oct 25, 2023 | Mar 31, 2023 |
| Ubuntu | — | Upgrade ruby2.3 (Ubuntu Pro)Upgrade libruby3.1Upgrade ruby2.7Upgrade ruby2.5Upgrade libruby2.7Upgrade libruby2.3 (Ubuntu Pro)Upgrade ruby3.1Upgrade libruby2.5 | May 5, 2023 | Mar 31, 2023 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Mar 31, 2023 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub