Date.parse in the date gem through 3.2.0 for Ruby allows ReDoS (regular expression Denial of Service) via a long string. The fixed versions are 3.2.1, 3.1.2, 3.0.2, and 2.0.1.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade ruby-default-gemsUpgrade rubygem-bigdecimalUpgrade ruby-irbUpgrade rubygem-abrtUpgrade rubygem-pg-docUpgrade rubygem-mysql2-docUpgrade rubygem-bundlerUpgrade ruby-docUpgrade rubyUpgrade rubygem-rakeUpgrade rubygem-irbUpgrade rubygem-rexmlUpgrade rubygems-develUpgrade rubygem-did_you_meanUpgrade rubygem-mongo-docUpgrade rubygem-opensslUpgrade rubygem-io-consoleUpgrade rubygem-rdocUpgrade ruby-develUpgrade rubygem-typeprofUpgrade rubygem-power_assertUpgrade rubygemsUpgrade rubygem-mongoUpgrade rubygem-bsonUpgrade rubygem-xmlrpcUpgrade rubygem-psychUpgrade rubygem-net-telnetUpgrade rubygem-bundler-docUpgrade rubygem-rbsUpgrade rubygem-test-unitUpgrade ruby-libsUpgrade rubygem-rssUpgrade rubygem-bson-docUpgrade rubygem-abrt-docUpgrade rubygem-jsonUpgrade rubygem-mysql2Upgrade rubygem-minitestUpgrade rubygem-pg | May 4, 2022 | Jan 1, 2022 |
| Alpine Linux | — | Upgrade ruby | Aug 22, 2024 | Jan 1, 2022 |
| Amazon Linux Ami 2 | — | Upgrade rubygem-jsonUpgrade rubygem-rssUpgrade rubygem-did_you_meanUpgrade ruby-tcltkUpgrade rubygem-bundlerUpgrade ruby-libsUpgrade ruby-docUpgrade rubyUpgrade rubygem-opensslUpgrade rubygem-rexmlUpgrade rubygem-psychUpgrade ruby-default-gemsUpgrade rubygem-irbUpgrade rubygem-rakeUpgrade ruby-develUpgrade rubygem-rbsUpgrade rubygem-bigdecimalUpgrade rubygem-minitestUpgrade rubygem-net-telnetUpgrade rubygemsUpgrade ruby-irbUpgrade rubygem-test-unitUpgrade rubygem-typeprofUpgrade rubygem-xmlrpcUpgrade rubygems-develUpgrade rubygem-power_assertUpgrade ruby-debuginfoUpgrade rubygem-rdocUpgrade rubygem-io-console | Sep 28, 2023 | Jan 1, 2022 |
| Centos_linux | — | Upgrade ruby-default-gemsUpgrade rubygem-io-consoleUpgrade ruby-irbUpgrade rubygem-io-console-debuginfoUpgrade rubygem-mongo-docUpgrade rubygem-rexmlUpgrade rubygem-test-unitUpgrade rubygem-mysql2-debuginfoUpgrade rubygem-pg-debuginfoUpgrade rubygem-bundlerUpgrade rubygem-pg-debugsourceUpgrade rubygem-irbUpgrade rubygem-opensslUpgrade rubygem-rakeUpgrade rubygem-xmlrpcUpgrade rubygem-bigdecimal-debuginfoUpgrade rubygem-pg-docUpgrade rubygem-rbsUpgrade rubygem-did_you_meanUpgrade ruby-docUpgrade rubygem-bson-debugsourceUpgrade rubyUpgrade rubygem-mysql2-docUpgrade ruby-develUpgrade rubygem-mysql2Upgrade rubygem-abrtUpgrade rubygem-rdocUpgrade rubygem-typeprofUpgrade rubygem-bundler-docUpgrade rubygem-mysql2-debugsourceUpgrade rubygem-jsonUpgrade rubygem-pgUpgrade rubygem-bson-debuginfoUpgrade rubygem-mongoUpgrade rubygem-psych-debuginfoUpgrade ruby-libs-debuginfoUpgrade rubygem-power_assertUpgrade rubygem-psychUpgrade ruby-libsUpgrade rubygem-rssUpgrade rubygem-bigdecimalUpgrade rubygem-abrt-docUpgrade rubygem-bson-docUpgrade ruby-debugsourceUpgrade rubygem-bsonUpgrade rubygems-develUpgrade rubygem-openssl-debuginfoUpgrade rubygem-minitestUpgrade rubygem-json-debuginfoUpgrade rubygemsUpgrade rubygem-net-telnetUpgrade ruby-debuginfo | Feb 17, 2022 | Jan 1, 2022 |
| Debian | — | Upgrade ruby2.7 | Dec 28, 2021 | Dec 28, 2021 |
| Freebsd | — | Upgrade ruby27Upgrade rubygem-dateUpgrade ruby26Upgrade rubyUpgrade ruby30 | Nov 4, 2022 | Nov 15, 2021 |
| Gentoo Linux | — | Upgrade dev-lang/ruby. | Jan 25, 2024 | Jan 1, 2022 |
| Huawei Euleros 2_0_sp8 | — | Upgrade ruby-irbUpgrade rubyUpgrade ruby-libs | Jun 22, 2022 | Jan 1, 2022 |
| Oracle_linux | — | Upgrade rubygem-abrtUpgrade rubygem-psychUpgrade rubygem-bundlerUpgrade rubygem-mysql2-docUpgrade rubygem-power_assertUpgrade rubygem-typeprofUpgrade rubygem-xmlrpcUpgrade rubygem-bson-docUpgrade rubygem-rdocUpgrade rubygem-bundler-docUpgrade rubygem-minitestUpgrade rubygem-irbUpgrade rubygem-mongoUpgrade rubygem-abrt-docUpgrade rubygem-mysql2Upgrade ruby-default-gemsUpgrade rubygem-rssUpgrade rubygem-net-telnetUpgrade rubygem-pgUpgrade rubygem-rbsUpgrade rubygem-opensslUpgrade rubygemsUpgrade rubyUpgrade rubygem-pg-docUpgrade ruby-libsUpgrade rubygem-bsonUpgrade rubygems-develUpgrade rubygem-did_you_meanUpgrade ruby-irbUpgrade rubygem-io-consoleUpgrade rubygem-bigdecimalUpgrade ruby-docUpgrade ruby-develUpgrade rubygem-mongo-docUpgrade rubygem-rexmlUpgrade rubygem-rakeUpgrade rubygem-test-unitUpgrade rubygem-json | Feb 17, 2022 | Nov 15, 2021 |
| Redhat_linux | — | Upgrade rubygem-jsonUpgrade rubygem-bson-docUpgrade rubygem-mysql2-debugsourceUpgrade rubygem-bson-debugsourceUpgrade rubygem-did_you_meanUpgrade rubygem-rssUpgrade rubygem-pg-docUpgrade rubygem-mysql2Upgrade rubygem-bigdecimalUpgrade ruby-debugsourceUpgrade rubygem-typeprofUpgrade rubygem-rexmlUpgrade rubygem-json-debuginfoUpgrade rubygem-bson-debuginfoUpgrade rubygem-pg-debuginfoUpgrade rubygem-psychUpgrade rubygem-rakeUpgrade rubygem-openssl-debuginfoUpgrade rubygem-abrt-docUpgrade ruby-libsUpgrade rubygem-bsonUpgrade rubygem-io-consoleUpgrade rubygem-mongo-docUpgrade rubygem-bigdecimal-debuginfoNo solution existsUpgrade ruby-irbUpgrade rubygem-psych-debuginfoUpgrade rubygem-rdocUpgrade rubygem-opensslUpgrade rubygem-xmlrpcUpgrade rubygem-pg-debugsourceUpgrade rubyUpgrade rubygem-bundlerUpgrade rubygem-minitestUpgrade ruby-libs-debuginfoUpgrade rubygem-net-telnetUpgrade rubygems-develUpgrade rubygem-io-console-debuginfoUpgrade ruby-debuginfoUpgrade ruby-develUpgrade rubygem-mysql2-debuginfoUpgrade rubygem-mysql2-docUpgrade rubygem-pgUpgrade rubygem-test-unitUpgrade rubygem-bundler-docUpgrade rubygem-rbsUpgrade rubygem-irbUpgrade ruby-default-gemsUpgrade ruby-docUpgrade rubygem-abrtUpgrade rubygem-mongoUpgrade rubygemsUpgrade rubygem-power_assert | Feb 17, 2022 | Jan 1, 2022 |
| Rocky_linux | — | Upgrade ruby-develUpgrade rubygem-mysql2-debuginfoUpgrade rubyUpgrade rubygem-io-console-debuginfoUpgrade rubygem-opensslUpgrade rubygem-pgUpgrade rubygem-json-debuginfoUpgrade rubygem-bigdecimal-debuginfoUpgrade ruby-libs-debuginfoUpgrade ruby-debuginfoUpgrade rubygem-pg-debugsourceUpgrade rubygem-bson-debugsourceUpgrade rubygem-pg-debuginfoUpgrade ruby-libsUpgrade rubygem-psych-debuginfoUpgrade rubygem-openssl-debuginfoUpgrade rubygem-psychUpgrade rubygem-io-consoleUpgrade rubygem-bsonUpgrade rubygem-bigdecimalUpgrade rubygem-mysql2Upgrade rubygem-mysql2-debugsourceUpgrade ruby-debugsourceUpgrade rubygem-jsonUpgrade rubygem-bson-debuginfo | Mar 5, 2024 | Jan 1, 2022 |
| Suse | — | Upgrade ruby2.5-develUpgrade ruby2.5Upgrade ruby2.5-devel-extraUpgrade ruby2.5-docUpgrade ruby2.5-doc-riUpgrade libruby2_5-2_5Upgrade ruby2.5-stdlib | Oct 26, 2022 | Jan 1, 2022 |
| Ubuntu | — | Upgrade ruby2.7Upgrade ruby2.5Upgrade ruby2.3 (Ubuntu Pro) | Jan 19, 2022 | Jan 1, 2022 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Jan 1, 2022 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub