Date.parse in the date gem through 3.2.0 for Ruby allows ReDoS (regular expression Denial of Service) via a long string. The fixed versions are 3.2.1, 3.1.2, 3.0.2, and 2.0.1.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade rubygem-mongo-docUpgrade ruby-irbUpgrade rubygem-did_you_meanUpgrade rubygem-pg-docUpgrade ruby-docUpgrade rubygem-rakeUpgrade rubygem-rdocUpgrade rubygem-irbUpgrade ruby-default-gemsUpgrade ruby-develUpgrade rubygem-bigdecimalUpgrade rubygems-develUpgrade rubygem-rexmlUpgrade rubygem-abrtUpgrade rubygem-io-consoleUpgrade rubygem-mysql2-docUpgrade rubyUpgrade rubygem-opensslUpgrade rubygem-bundlerUpgrade rubygem-xmlrpcUpgrade rubygem-minitestUpgrade rubygem-mysql2Upgrade rubygem-rssUpgrade rubygem-jsonUpgrade rubygem-bsonUpgrade rubygem-psychUpgrade rubygem-net-telnetUpgrade rubygem-test-unitUpgrade rubygem-pgUpgrade rubygem-abrt-docUpgrade rubygem-rbsUpgrade ruby-libsUpgrade rubygem-power_assertUpgrade rubygem-bundler-docUpgrade rubygemsUpgrade rubygem-mongoUpgrade rubygem-bson-docUpgrade rubygem-typeprof | May 4, 2022 | Jan 1, 2022 |
| Alpine Linux | — | Upgrade ruby | Aug 22, 2024 | Jan 1, 2022 |
| Amazon Linux Ami 2 | — | Upgrade rubygems-develUpgrade rubygem-bigdecimalUpgrade ruby-irbUpgrade rubygem-power_assertUpgrade rubygem-typeprofUpgrade rubygem-test-unitUpgrade rubygem-rdocUpgrade ruby-debuginfoUpgrade rubygem-io-consoleUpgrade rubygem-minitestUpgrade rubygem-xmlrpcUpgrade rubygemsUpgrade rubygem-net-telnetUpgrade rubygem-opensslUpgrade ruby-tcltkUpgrade rubygem-rssUpgrade rubygem-bundlerUpgrade ruby-libsUpgrade rubygem-rexmlUpgrade rubygem-rbsUpgrade ruby-docUpgrade rubygem-psychUpgrade rubygem-jsonUpgrade ruby-default-gemsUpgrade ruby-develUpgrade rubygem-rakeUpgrade rubyUpgrade rubygem-irbUpgrade rubygem-did_you_mean | Sep 28, 2023 | Jan 1, 2022 |
| Centos_linux | — | Upgrade rubygem-pgUpgrade rubygem-psychUpgrade rubygem-psych-debuginfoUpgrade ruby-libs-debuginfoUpgrade rubygem-net-telnetUpgrade rubygem-mongoUpgrade rubygem-bson-debuginfoUpgrade rubygemsUpgrade rubygem-bundler-docUpgrade ruby-debugsourceUpgrade ruby-libsUpgrade rubygem-typeprofUpgrade ruby-debuginfoUpgrade rubygem-minitestUpgrade rubygem-json-debuginfoUpgrade rubygem-bigdecimalUpgrade rubygem-bson-docUpgrade rubygem-rssUpgrade rubygem-openssl-debuginfoUpgrade rubygem-power_assertUpgrade rubygem-jsonUpgrade rubygems-develUpgrade rubygem-mysql2-debugsourceUpgrade rubygem-abrt-docUpgrade rubygem-bsonUpgrade rubygem-io-consoleUpgrade ruby-develUpgrade rubygem-rakeUpgrade rubygem-opensslUpgrade ruby-docUpgrade rubygem-mysql2-debuginfoUpgrade rubygem-did_you_meanUpgrade rubygem-rdocUpgrade rubygem-rbsUpgrade rubygem-bigdecimal-debuginfoUpgrade rubygem-abrtUpgrade rubyUpgrade rubygem-mysql2-docUpgrade rubygem-xmlrpcUpgrade rubygem-mysql2Upgrade rubygem-rexmlUpgrade rubygem-pg-debugsourceUpgrade rubygem-pg-debuginfoUpgrade rubygem-mongo-docUpgrade ruby-irbUpgrade rubygem-test-unitUpgrade rubygem-io-console-debuginfoUpgrade ruby-default-gemsUpgrade rubygem-bundlerUpgrade rubygem-irbUpgrade rubygem-pg-docUpgrade rubygem-bson-debugsource | Feb 17, 2022 | Jan 1, 2022 |
| Debian | — | Upgrade ruby2.7 | Dec 28, 2021 | Dec 28, 2021 |
| Freebsd | — | Upgrade rubyUpgrade ruby27Upgrade ruby30Upgrade rubygem-dateUpgrade ruby26 | Nov 4, 2022 | Nov 15, 2021 |
| Gentoo Linux | — | Upgrade dev-lang/ruby. | Jan 25, 2024 | Jan 1, 2022 |
| Huawei Euleros 2_0_sp8 | — | Upgrade ruby-irbUpgrade ruby-libsUpgrade ruby | Jun 22, 2022 | Jan 1, 2022 |
| Oracle_linux | — | Upgrade rubygem-bigdecimalUpgrade ruby-irbUpgrade rubygem-io-consoleUpgrade rubygem-mongo-docUpgrade ruby-docUpgrade ruby-libsUpgrade rubygem-test-unitUpgrade ruby-develUpgrade rubygem-rexmlUpgrade rubygem-did_you_meanUpgrade rubygem-rakeUpgrade rubygem-jsonUpgrade rubygems-develUpgrade rubygem-bsonUpgrade rubygem-mysql2Upgrade rubygem-net-telnetUpgrade rubygem-bson-docUpgrade rubygem-minitestUpgrade rubygem-bundlerUpgrade rubygem-bundler-docUpgrade ruby-default-gemsUpgrade rubygem-mongoUpgrade rubygem-irbUpgrade rubygemsUpgrade rubygem-abrt-docUpgrade rubygem-abrtUpgrade rubygem-power_assertUpgrade rubygem-rssUpgrade rubygem-pgUpgrade rubygem-opensslUpgrade rubygem-rbsUpgrade rubygem-pg-docUpgrade rubyUpgrade rubygem-rdocUpgrade rubygem-typeprofUpgrade rubygem-xmlrpcUpgrade rubygem-psychUpgrade rubygem-mysql2-doc | Feb 17, 2022 | Nov 15, 2021 |
| Redhat_linux | — | Upgrade ruby-irbUpgrade rubygem-openssl-debuginfoUpgrade rubygem-mongo-docUpgrade rubygem-abrt-docUpgrade rubygem-pg-debuginfoUpgrade rubygem-rakeNo solution existsUpgrade rubygem-pg-docUpgrade rubygem-mysql2Upgrade ruby-debugsourceUpgrade rubygem-bson-docUpgrade rubygem-did_you_meanUpgrade rubygem-rexmlUpgrade rubygem-io-consoleUpgrade rubygem-typeprofUpgrade rubygem-bson-debugsourceUpgrade rubygem-bigdecimalUpgrade rubygem-jsonUpgrade ruby-libsUpgrade rubygem-psychUpgrade rubygem-bigdecimal-debuginfoUpgrade rubygem-mysql2-debugsourceUpgrade rubygem-rssUpgrade rubygem-bsonUpgrade rubygem-json-debuginfoUpgrade rubygem-bson-debuginfoUpgrade ruby-libs-debuginfoUpgrade rubygem-bundlerUpgrade rubygem-rdocUpgrade rubygem-net-telnetUpgrade rubygem-mongoUpgrade ruby-docUpgrade rubygem-abrtUpgrade rubygem-bundler-docUpgrade rubyUpgrade rubygem-minitestUpgrade rubygem-rbsUpgrade rubygem-irbUpgrade ruby-debuginfoUpgrade rubygems-develUpgrade rubygem-xmlrpcUpgrade rubygem-mysql2-docUpgrade rubygem-power_assertUpgrade rubygemsUpgrade rubygem-pg-debugsourceUpgrade ruby-develUpgrade rubygem-pgUpgrade rubygem-io-console-debuginfoUpgrade rubygem-psych-debuginfoUpgrade rubygem-opensslUpgrade rubygem-test-unitUpgrade rubygem-mysql2-debuginfoUpgrade ruby-default-gems | Feb 17, 2022 | Jan 1, 2022 |
| Rocky_linux | — | Upgrade ruby-debuginfoUpgrade rubygem-bigdecimal-debuginfoUpgrade ruby-develUpgrade rubygem-mysql2-debuginfoUpgrade ruby-libs-debuginfoUpgrade rubyUpgrade rubygem-json-debuginfoUpgrade rubygem-pgUpgrade rubygem-opensslUpgrade rubygem-io-console-debuginfoUpgrade rubygem-openssl-debuginfoUpgrade ruby-libsUpgrade rubygem-jsonUpgrade rubygem-bson-debuginfoUpgrade rubygem-psych-debuginfoUpgrade rubygem-pg-debuginfoUpgrade rubygem-io-consoleUpgrade rubygem-bson-debugsourceUpgrade rubygem-bsonUpgrade ruby-debugsourceUpgrade rubygem-pg-debugsourceUpgrade rubygem-psychUpgrade rubygem-mysql2-debugsourceUpgrade rubygem-bigdecimalUpgrade rubygem-mysql2 | Mar 5, 2024 | Jan 1, 2022 |
| Suse | — | Upgrade ruby2.5-develUpgrade ruby2.5Upgrade ruby2.5-devel-extraUpgrade ruby2.5-docUpgrade ruby2.5-doc-riUpgrade libruby2_5-2_5Upgrade ruby2.5-stdlib | Oct 26, 2022 | Jan 1, 2022 |
| Ubuntu | — | Upgrade ruby2.3 (Ubuntu Pro)Upgrade ruby2.7Upgrade ruby2.5 | Jan 19, 2022 | Jan 1, 2022 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Jan 1, 2022 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub