A ReDoS based DoS vulnerability in the GlobalID <1.0.1 which could allow an attacker supplying a carefully crafted input can cause the regular expression engine to take an unexpected amount of time. All users running an affected release should either upgrade or use one of the workarounds immediately.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade rubygem-hammer_cli_foreman_webhooksUpgrade rubygem-unicode-debuginfoUpgrade satellite-cloneUpgrade rubygem-amazing_printUpgrade rubygem-hammer_cli_foreman_discoveryUpgrade rubygem-hammer_cli_foreman_remote_executionUpgrade rubygem-hammer_cliUpgrade rubygem-hammer_cli_foreman_templatesUpgrade rubygem-jwtUpgrade rubygem-hammer_cli_katelloUpgrade rubygem-fast_gettextUpgrade rubygem-unicode-debugsourceUpgrade rubygem-ffi-debuginfoUpgrade rubygem-http-acceptUpgrade rubygem-loggingUpgrade rubygem-oauth-ttyUpgrade rubygem-ffi-debugsourceUpgrade rubygem-little-pluggerUpgrade rubygem-snaky_hashUpgrade rubygem-oauthUpgrade rubygem-localeUpgrade rubygem-multi_jsonUpgrade rubygem-rest-clientUpgrade rubygem-gssapiUpgrade rubygem-unicodeUpgrade rubygem-unf_ext-debuginfoUpgrade rubygem-unf_extUpgrade rubygem-hammer_cli_foreman_adminUpgrade rubygem-apipie-bindingsUpgrade satellite-cliUpgrade rubygem-clampUpgrade rubygem-hammer_cli_foreman_openscapUpgrade rubygem-hammer_cli_foreman_tasksUpgrade satellite-maintainUpgrade rubygem-netrcUpgrade rubygem-foreman_maintainUpgrade rubygem-version_gemUpgrade rubygem-domain_nameUpgrade rubygem-ffiUpgrade rubygem-hammer_cli_foreman_ansibleUpgrade rubygem-unicode-display_widthUpgrade rubygem-mime-typesUpgrade rubygem-http-cookieUpgrade rubygem-unfUpgrade rubygem-hammer_cli_foreman_bootdiskUpgrade rubygem-mime-types-dataUpgrade rubygem-highlineUpgrade rubygem-hammer_cli_foreman_googleUpgrade rubygem-hammer_cli_foremanUpgrade python39-pulp_manifestUpgrade foreman-cliUpgrade rubygem-unf_ext-debugsourceUpgrade rubygem-powerbarUpgrade rubygem-hashieUpgrade rubygem-hammer_cli_foreman_azure_rmUpgrade rubygem-hammer_cli_foreman_virt_who_configure | Nov 13, 2023 | Feb 9, 2023 |
| Debian | — | Upgrade ruby-globalid | Jul 30, 2024 | Feb 9, 2023 |
| Redhat_linux | — | Upgrade rubygem-hammer_cli_foreman_ansibleUpgrade rubygem-hammer_cli_foreman_azure_rmUpgrade satellite-cliUpgrade rubygem-unf_ext-debuginfoUpgrade rubygem-hashieUpgrade rubygem-http-cookieUpgrade rubygem-hammer_cli_foreman_tasksUpgrade python39-pulp_manifestUpgrade rubygem-ffi-debugsourceUpgrade rubygem-loggingUpgrade rubygem-unf_extUpgrade rubygem-clampUpgrade rubygem-domain_nameUpgrade rubygem-hammer_cli_foreman_discoveryUpgrade rubygem-gssapiUpgrade rubygem-amazing_printUpgrade rubygem-highlineUpgrade rubygem-fast_gettextUpgrade rubygem-hammer_cli_foreman_virt_who_configureUpgrade rubygem-hammer_cliUpgrade rubygem-http-acceptUpgrade rubygem-hammer_cli_foreman_webhooksUpgrade rubygem-hammer_cli_foreman_openscapUpgrade rubygem-ffi-debuginfoUpgrade rubygem-snaky_hashUpgrade rubygem-localeUpgrade rubygem-hammer_cli_foreman_bootdiskUpgrade rubygem-version_gemUpgrade rubygem-multi_jsonUpgrade rubygem-mime-typesUpgrade rubygem-powerbarUpgrade rubygem-foreman_maintainUpgrade rubygem-apipie-bindingsUpgrade satellite-maintainUpgrade rubygem-little-pluggerUpgrade rubygem-mime-types-dataUpgrade rubygem-hammer_cli_foreman_remote_executionUpgrade rubygem-hammer_cli_foreman_googleUpgrade rubygem-rest-clientUpgrade rubygem-oauthUpgrade rubygem-oauth-ttyUpgrade rubygem-ffiUpgrade rubygem-hammer_cli_katelloUpgrade rubygem-unicode-display_widthUpgrade rubygem-hammer_cli_foremanUpgrade rubygem-jwtUpgrade rubygem-hammer_cli_foreman_adminUpgrade rubygem-hammer_cli_foreman_templatesUpgrade rubygem-unicode-debugsourceUpgrade rubygem-unf_ext-debugsourceUpgrade satellite-cloneUpgrade rubygem-unicode-debuginfoUpgrade rubygem-netrcUpgrade rubygem-unfUpgrade rubygem-unicodeUpgrade foreman-cli | Nov 13, 2023 | Feb 9, 2023 |
| Rocky_linux | — | Upgrade libdb-sql-devel-debuginfoUpgrade libdb-sql-debuginfoUpgrade libdb-debugsourceUpgrade libdb-utils-debuginfoUpgrade libdb-debuginfoUpgrade libdb-cxxUpgrade libdb-cxx-debuginfo | Mar 5, 2024 | Feb 9, 2023 |
| Suse | — | Upgrade ruby2.5-rubygem-globalid-docUpgrade ruby2.5-rubygem-globalid | Feb 13, 2023 | Feb 9, 2023 |
Prioritize with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub