Date.parse in the date gem through 3.2.0 for Ruby allows ReDoS (regular expression Denial of Service) via a long string. The fixed versions are 3.2.1, 3.1.2, 3.0.2, and 2.0.1.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade rubygem-rssUpgrade rubygem-test-unitUpgrade rubygem-power_assertUpgrade rubygem-bson-docUpgrade rubygem-mysql2Upgrade rubygem-pgUpgrade rubygem-net-telnetUpgrade rubygem-rbsUpgrade rubygem-jsonUpgrade rubygem-typeprofUpgrade rubygem-bundler-docUpgrade rubygem-bsonUpgrade rubygem-minitestUpgrade rubygem-xmlrpcUpgrade rubygem-mongoUpgrade rubygem-psychUpgrade rubygem-abrt-docUpgrade rubygemsUpgrade ruby-libsUpgrade ruby-docUpgrade ruby-irbUpgrade rubygem-bundlerUpgrade ruby-develUpgrade rubygem-io-consoleUpgrade rubygem-rexmlUpgrade rubygem-opensslUpgrade rubygem-mongo-docUpgrade ruby-default-gemsUpgrade rubygem-rakeUpgrade rubygem-mysql2-docUpgrade rubyUpgrade rubygem-abrtUpgrade rubygem-did_you_meanUpgrade rubygems-develUpgrade rubygem-pg-docUpgrade rubygem-bigdecimalUpgrade rubygem-rdocUpgrade rubygem-irb | May 4, 2022 | Jan 1, 2022 |
| Alpine Linux | — | Upgrade ruby | Aug 22, 2024 | Jan 1, 2022 |
| Amazon Linux Ami 2 | — | Upgrade rubygem-psychUpgrade ruby-default-gemsUpgrade ruby-develUpgrade rubygem-rakeUpgrade rubygem-irbUpgrade ruby-docUpgrade rubygem-rexmlUpgrade rubygem-opensslUpgrade rubyUpgrade rubygem-jsonUpgrade ruby-libsUpgrade rubygem-bundlerUpgrade rubygem-rbsUpgrade ruby-tcltkUpgrade rubygem-did_you_meanUpgrade rubygem-rssUpgrade ruby-irbUpgrade rubygem-xmlrpcUpgrade rubygem-power_assertUpgrade rubygem-minitestUpgrade rubygem-bigdecimalUpgrade rubygem-typeprofUpgrade ruby-debuginfoUpgrade rubygemsUpgrade rubygem-net-telnetUpgrade rubygems-develUpgrade rubygem-test-unitUpgrade rubygem-rdocUpgrade rubygem-io-console | Sep 28, 2023 | Jan 1, 2022 |
| Centos_linux | — | Upgrade rubygem-mongoUpgrade rubygem-pgUpgrade rubygemsUpgrade rubygem-psychUpgrade ruby-debugsourceUpgrade rubygem-bsonUpgrade rubygem-net-telnetUpgrade rubygem-psych-debuginfoUpgrade rubygem-power_assertUpgrade rubygem-jsonUpgrade rubygem-mysql2-debugsourceUpgrade rubygem-typeprofUpgrade rubygem-abrt-docUpgrade ruby-libsUpgrade ruby-libs-debuginfoUpgrade rubygem-minitestUpgrade rubygem-openssl-debuginfoUpgrade rubygem-json-debuginfoUpgrade rubygems-develUpgrade rubygem-bundler-docUpgrade rubygem-rssUpgrade ruby-debuginfoUpgrade rubygem-bson-docUpgrade rubygem-bigdecimalUpgrade rubygem-bson-debuginfoUpgrade rubyUpgrade rubygem-io-consoleUpgrade rubygem-bigdecimal-debuginfoUpgrade rubygem-mysql2Upgrade rubygem-mysql2-docUpgrade rubygem-abrtUpgrade rubygem-mysql2-debuginfoUpgrade rubygem-xmlrpcUpgrade rubygem-rakeUpgrade rubygem-opensslUpgrade rubygem-irbUpgrade rubygem-bundlerUpgrade ruby-docUpgrade rubygem-rexmlUpgrade rubygem-pg-debugsourceUpgrade rubygem-pg-debuginfoUpgrade rubygem-mongo-docUpgrade ruby-irbUpgrade rubygem-rdocUpgrade rubygem-rbsUpgrade rubygem-pg-docUpgrade rubygem-bson-debugsourceUpgrade rubygem-did_you_meanUpgrade ruby-default-gemsUpgrade rubygem-test-unitUpgrade rubygem-io-console-debuginfoUpgrade ruby-devel | Feb 17, 2022 | Jan 1, 2022 |
| Debian | — | Upgrade ruby2.7 | Dec 28, 2021 | Dec 28, 2021 |
| Freebsd | — | Upgrade rubyUpgrade ruby27Upgrade ruby30Upgrade ruby26Upgrade rubygem-date | Nov 4, 2022 | Nov 15, 2021 |
| Gentoo Linux | — | Upgrade dev-lang/ruby. | Jan 25, 2024 | Jan 1, 2022 |
| Huawei Euleros 2_0_sp8 | — | Upgrade ruby-libsUpgrade rubyUpgrade ruby-irb | Jun 22, 2022 | Jan 1, 2022 |
| Oracle_linux | — | Upgrade rubygem-bigdecimalUpgrade rubygem-io-consoleUpgrade ruby-irbUpgrade rubygem-rakeUpgrade rubygem-rexmlUpgrade ruby-libsUpgrade rubygems-develUpgrade rubygem-test-unitUpgrade rubygem-jsonUpgrade ruby-docUpgrade rubygem-mongo-docUpgrade rubygem-did_you_meanUpgrade rubygem-bsonUpgrade ruby-develUpgrade rubygem-pgUpgrade rubygem-typeprofUpgrade rubygem-mysql2Upgrade ruby-default-gemsUpgrade rubygem-mongoUpgrade rubygem-irbUpgrade rubygem-power_assertUpgrade rubygem-mysql2-docUpgrade rubygem-bson-docUpgrade rubygem-xmlrpcUpgrade rubygem-psychUpgrade rubygem-bundlerUpgrade rubygem-pg-docUpgrade rubygem-rbsUpgrade rubyUpgrade rubygemsUpgrade rubygem-rdocUpgrade rubygem-abrtUpgrade rubygem-abrt-docUpgrade rubygem-opensslUpgrade rubygem-minitestUpgrade rubygem-bundler-docUpgrade rubygem-rssUpgrade rubygem-net-telnet | Feb 17, 2022 | Nov 15, 2021 |
| Redhat_linux | — | Upgrade rubygem-abrt-docUpgrade rubygem-bsonUpgrade rubygem-bson-debuginfoUpgrade rubygem-io-consoleUpgrade ruby-irbUpgrade ruby-libsUpgrade rubygem-rakeUpgrade rubygem-pg-debuginfoUpgrade ruby-debugsourceUpgrade rubygem-rexmlUpgrade rubygem-rssUpgrade rubygem-jsonUpgrade rubygem-bigdecimal-debuginfoUpgrade rubygem-bson-docUpgrade rubygem-did_you_meanUpgrade rubygem-json-debuginfoUpgrade rubygem-pg-docUpgrade rubygem-typeprofUpgrade rubygem-bson-debugsourceUpgrade rubygem-mysql2Upgrade rubygem-psychUpgrade rubygem-mysql2-debugsourceNo solution existsUpgrade rubygem-mongo-docUpgrade rubygem-bigdecimalUpgrade rubygem-openssl-debuginfoUpgrade rubygems-develUpgrade rubygem-xmlrpcUpgrade rubygem-io-console-debuginfoUpgrade rubygemsUpgrade rubygem-minitestUpgrade rubygem-pg-debugsourceUpgrade rubygem-opensslUpgrade ruby-develUpgrade rubygem-power_assertUpgrade rubygem-pgUpgrade rubygem-mysql2-docUpgrade rubygem-rdocUpgrade rubygem-rbsUpgrade rubygem-irbUpgrade ruby-debuginfoUpgrade rubygem-bundler-docUpgrade rubygem-net-telnetUpgrade rubygem-psych-debuginfoUpgrade rubygem-mysql2-debuginfoUpgrade rubygem-test-unitUpgrade rubyUpgrade rubygem-bundlerUpgrade ruby-libs-debuginfoUpgrade ruby-default-gemsUpgrade ruby-docUpgrade rubygem-mongoUpgrade rubygem-abrt | Feb 17, 2022 | Jan 1, 2022 |
| Rocky_linux | — | Upgrade rubygem-io-consoleUpgrade rubygem-bsonUpgrade rubygem-pg-debuginfoUpgrade rubygem-bson-debugsourceUpgrade rubygem-psych-debuginfoUpgrade rubygem-bson-debuginfoUpgrade ruby-debugsourceUpgrade rubygem-psychUpgrade rubygem-bigdecimalUpgrade rubygem-pg-debugsourceUpgrade rubygem-mysql2Upgrade rubygem-jsonUpgrade rubygem-openssl-debuginfoUpgrade rubygem-mysql2-debugsourceUpgrade ruby-libsUpgrade rubygem-json-debuginfoUpgrade ruby-libs-debuginfoUpgrade rubygem-pgUpgrade rubygem-io-console-debuginfoUpgrade rubygem-opensslUpgrade rubygem-mysql2-debuginfoUpgrade rubyUpgrade ruby-debuginfoUpgrade rubygem-bigdecimal-debuginfoUpgrade ruby-devel | Mar 5, 2024 | Jan 1, 2022 |
| Suse | — | Upgrade ruby2.5-develUpgrade ruby2.5Upgrade libruby2_5-2_5Upgrade ruby2.5-devel-extraUpgrade ruby2.5-docUpgrade ruby2.5-stdlibUpgrade ruby2.5-doc-ri | Oct 26, 2022 | Jan 1, 2022 |
| Ubuntu | — | Upgrade ruby2.7Upgrade ruby2.5Upgrade ruby2.3 (Ubuntu Pro) | Jan 19, 2022 | Jan 1, 2022 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Jan 1, 2022 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub