Date.parse in the date gem through 3.2.0 for Ruby allows ReDoS (regular expression Denial of Service) via a long string. The fixed versions are 3.2.1, 3.1.2, 3.0.2, and 2.0.1.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade rubygem-test-unitUpgrade rubygem-bson-docUpgrade rubygem-bundler-docUpgrade rubygem-bsonUpgrade rubygem-net-telnetUpgrade ruby-libsUpgrade rubygem-abrt-docUpgrade rubygem-psychUpgrade rubygem-xmlrpcUpgrade rubygem-jsonUpgrade rubygem-rbsUpgrade rubygem-power_assertUpgrade rubygem-minitestUpgrade rubygem-pgUpgrade rubygemsUpgrade rubygem-mongoUpgrade rubygem-mysql2Upgrade rubygem-rssUpgrade rubygem-typeprofUpgrade rubygem-rakeUpgrade rubygem-irbUpgrade rubygem-abrtUpgrade rubygem-bigdecimalUpgrade rubygem-mysql2-docUpgrade ruby-develUpgrade rubygem-io-consoleUpgrade rubygem-bundlerUpgrade ruby-irbUpgrade rubygem-pg-docUpgrade rubygem-mongo-docUpgrade rubygem-rdocUpgrade rubygem-opensslUpgrade rubygem-did_you_meanUpgrade ruby-docUpgrade rubygems-develUpgrade rubyUpgrade rubygem-rexmlUpgrade ruby-default-gems | May 4, 2022 | Jan 1, 2022 |
| Alpine Linux | — | Upgrade ruby | Aug 22, 2024 | Jan 1, 2022 |
| Amazon Linux Ami 2 | — | Upgrade ruby-irbUpgrade rubygem-power_assertUpgrade rubygem-minitestUpgrade rubygem-bigdecimalUpgrade rubygem-test-unitUpgrade ruby-debuginfoUpgrade rubygem-typeprofUpgrade rubygem-xmlrpcUpgrade rubygems-develUpgrade rubygem-io-consoleUpgrade rubygem-net-telnetUpgrade rubygemsUpgrade rubygem-rdocUpgrade ruby-default-gemsUpgrade rubygem-jsonUpgrade ruby-tcltkUpgrade rubygem-psychUpgrade rubyUpgrade rubygem-bundlerUpgrade ruby-libsUpgrade ruby-docUpgrade rubygem-opensslUpgrade rubygem-rexmlUpgrade rubygem-rbsUpgrade ruby-develUpgrade rubygem-irbUpgrade rubygem-rakeUpgrade rubygem-did_you_meanUpgrade rubygem-rss | Sep 28, 2023 | Jan 1, 2022 |
| Centos_linux | — | Upgrade ruby-develUpgrade rubygem-rbsUpgrade rubygem-mysql2-debuginfoUpgrade ruby-docUpgrade rubygem-rexmlUpgrade rubygem-mongo-docUpgrade rubygem-mysql2Upgrade ruby-irbUpgrade rubygem-pg-debugsourceUpgrade rubygem-pg-debuginfoUpgrade rubygem-did_you_meanUpgrade rubygem-bson-debugsourceUpgrade rubygem-pg-docUpgrade rubygem-rdocUpgrade rubygem-abrtUpgrade ruby-default-gemsUpgrade rubygem-opensslUpgrade rubygem-rakeUpgrade rubygem-irbUpgrade rubygem-xmlrpcUpgrade rubygem-bigdecimal-debuginfoUpgrade rubygem-io-consoleUpgrade rubygem-bundlerUpgrade rubygem-io-console-debuginfoUpgrade rubyUpgrade rubygem-mysql2-docUpgrade rubygem-test-unitUpgrade rubygem-typeprofUpgrade rubygem-bsonUpgrade rubygem-bson-debuginfoUpgrade rubygem-mysql2-debugsourceUpgrade rubygems-develUpgrade ruby-debuginfoUpgrade rubygem-minitestUpgrade ruby-debugsourceUpgrade ruby-libsUpgrade rubygem-openssl-debuginfoUpgrade rubygem-json-debuginfoUpgrade rubygem-rssUpgrade rubygem-bson-docUpgrade rubygem-bigdecimalUpgrade rubygem-abrt-docUpgrade rubygem-net-telnetUpgrade rubygemsUpgrade rubygem-psychUpgrade rubygem-psych-debuginfoUpgrade rubygem-pgUpgrade rubygem-mongoUpgrade ruby-libs-debuginfoUpgrade rubygem-power_assertUpgrade rubygem-bundler-docUpgrade rubygem-json | Feb 17, 2022 | Jan 1, 2022 |
| Debian | — | Upgrade ruby2.7 | Dec 28, 2021 | Dec 28, 2021 |
| Freebsd | — | Upgrade ruby26Upgrade rubygem-dateUpgrade rubyUpgrade ruby30Upgrade ruby27 | Nov 4, 2022 | Nov 15, 2021 |
| Gentoo Linux | — | Upgrade dev-lang/ruby. | Jan 25, 2024 | Jan 1, 2022 |
| Huawei Euleros 2_0_sp8 | — | Upgrade ruby-libsUpgrade rubyUpgrade ruby-irb | Jun 22, 2022 | Jan 1, 2022 |
| Oracle_linux | — | Upgrade rubygem-rexmlUpgrade ruby-develUpgrade rubygem-bsonUpgrade rubygem-rakeUpgrade rubygem-jsonUpgrade rubygem-test-unitUpgrade ruby-docUpgrade ruby-libsUpgrade rubygem-io-consoleUpgrade ruby-irbUpgrade rubygem-bigdecimalUpgrade rubygems-develUpgrade rubygem-mongo-docUpgrade rubygem-did_you_meanUpgrade rubygem-abrtUpgrade rubygem-typeprofUpgrade rubygem-xmlrpcUpgrade rubygem-power_assertUpgrade rubygem-mysql2-docUpgrade rubygem-opensslUpgrade rubygem-bundlerUpgrade rubygem-minitestUpgrade rubygem-rssUpgrade rubygem-bundler-docUpgrade rubygem-rdocUpgrade rubygemsUpgrade rubygem-mongoUpgrade rubygem-rbsUpgrade rubygem-pg-docUpgrade rubyUpgrade rubygem-net-telnetUpgrade rubygem-irbUpgrade rubygem-pgUpgrade rubygem-mysql2Upgrade ruby-default-gemsUpgrade rubygem-abrt-docUpgrade rubygem-bson-docUpgrade rubygem-psych | Feb 17, 2022 | Nov 15, 2021 |
| Redhat_linux | — | No solution existsUpgrade rubygem-bigdecimalUpgrade rubygem-rakeUpgrade rubygem-rexmlUpgrade rubygem-did_you_meanUpgrade rubygem-bson-debuginfoUpgrade rubygem-rssUpgrade rubygem-jsonUpgrade rubygem-json-debuginfoUpgrade rubygem-pg-docUpgrade ruby-debugsourceUpgrade rubygem-typeprofUpgrade rubygem-openssl-debuginfoUpgrade ruby-irbUpgrade ruby-libsUpgrade rubygem-pg-debuginfoUpgrade rubygem-abrt-docUpgrade rubygem-bsonUpgrade rubygem-mysql2-debugsourceUpgrade rubygem-psychUpgrade rubygem-bson-debugsourceUpgrade rubygem-io-consoleUpgrade rubygem-bson-docUpgrade rubygem-bigdecimal-debuginfoUpgrade rubygem-mongo-docUpgrade rubygem-mysql2Upgrade ruby-docUpgrade rubygems-develUpgrade ruby-default-gemsUpgrade ruby-debuginfoUpgrade rubygem-psych-debuginfoUpgrade rubygem-test-unitUpgrade rubygem-bundler-docUpgrade rubygem-xmlrpcUpgrade rubygem-net-telnetUpgrade ruby-develUpgrade rubygem-io-console-debuginfoUpgrade rubygem-opensslUpgrade rubygem-pg-debugsourceUpgrade rubygem-pgUpgrade rubygem-mysql2-docUpgrade rubygem-minitestUpgrade rubyUpgrade rubygem-rbsUpgrade ruby-libs-debuginfoUpgrade rubygem-bundlerUpgrade rubygem-power_assertUpgrade rubygem-rdocUpgrade rubygemsUpgrade rubygem-irbUpgrade rubygem-mysql2-debuginfoUpgrade rubygem-mongoUpgrade rubygem-abrt | Feb 17, 2022 | Jan 1, 2022 |
| Rocky_linux | — | Upgrade rubygem-jsonUpgrade ruby-libsUpgrade rubygem-mysql2-debugsourceUpgrade rubygem-pg-debugsourceUpgrade rubygem-bigdecimalUpgrade rubygem-psych-debuginfoUpgrade rubygem-bson-debuginfoUpgrade rubygem-openssl-debuginfoUpgrade rubygem-bson-debugsourceUpgrade rubygem-pg-debuginfoUpgrade rubygem-mysql2Upgrade ruby-debugsourceUpgrade rubygem-psychUpgrade rubygem-io-consoleUpgrade rubygem-bsonUpgrade ruby-libs-debuginfoUpgrade ruby-debuginfoUpgrade rubygem-pgUpgrade rubygem-json-debuginfoUpgrade rubygem-opensslUpgrade rubygem-io-console-debuginfoUpgrade rubygem-mysql2-debuginfoUpgrade rubyUpgrade rubygem-bigdecimal-debuginfoUpgrade ruby-devel | Mar 5, 2024 | Jan 1, 2022 |
| Suse | — | Upgrade ruby2.5-stdlibUpgrade libruby2_5-2_5Upgrade ruby2.5-docUpgrade ruby2.5-devel-extraUpgrade ruby2.5-doc-riUpgrade ruby2.5Upgrade ruby2.5-devel | Oct 26, 2022 | Jan 1, 2022 |
| Ubuntu | — | Upgrade ruby2.3 (Ubuntu Pro)Upgrade ruby2.5Upgrade ruby2.7 | Jan 19, 2022 | Jan 1, 2022 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Jan 1, 2022 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub