A ReDoS based DoS vulnerability in the GlobalID <1.0.1 which could allow an attacker supplying a carefully crafted input can cause the regular expression engine to take an unexpected amount of time. All users running an affected release should either upgrade or use one of the workarounds immediately.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade rubygem-hammer_cli_katelloUpgrade rubygem-localeUpgrade rubygem-oauth-ttyUpgrade rubygem-ffi-debuginfoUpgrade rubygem-ffi-debugsourceUpgrade rubygem-snaky_hashUpgrade rubygem-amazing_printUpgrade rubygem-hammer_cli_foreman_remote_executionUpgrade rubygem-unicodeUpgrade rubygem-gssapiUpgrade rubygem-multi_jsonUpgrade rubygem-hammer_cliUpgrade rubygem-unicode-debuginfoUpgrade rubygem-hammer_cli_foreman_webhooksUpgrade rubygem-loggingUpgrade satellite-cloneUpgrade rubygem-http-acceptUpgrade rubygem-rest-clientUpgrade rubygem-oauthUpgrade rubygem-fast_gettextUpgrade rubygem-jwtUpgrade rubygem-unicode-debugsourceUpgrade rubygem-hammer_cli_foreman_templatesUpgrade rubygem-hammer_cli_foreman_discoveryUpgrade rubygem-little-pluggerUpgrade rubygem-unfUpgrade rubygem-domain_nameUpgrade rubygem-hammer_cli_foreman_virt_who_configureUpgrade rubygem-mime-types-dataUpgrade rubygem-http-cookieUpgrade rubygem-hammer_cli_foreman_bootdiskUpgrade rubygem-highlineUpgrade rubygem-hammer_cli_foreman_googleUpgrade rubygem-hammer_cli_foremanUpgrade rubygem-ffiUpgrade rubygem-clampUpgrade python39-pulp_manifestUpgrade rubygem-hammer_cli_foreman_openscapUpgrade rubygem-hammer_cli_foreman_adminUpgrade rubygem-foreman_maintainUpgrade rubygem-version_gemUpgrade rubygem-apipie-bindingsUpgrade rubygem-powerbarUpgrade satellite-maintainUpgrade rubygem-netrcUpgrade rubygem-hammer_cli_foreman_tasksUpgrade foreman-cliUpgrade satellite-cliUpgrade rubygem-unf_ext-debugsourceUpgrade rubygem-hammer_cli_foreman_azure_rmUpgrade rubygem-hashieUpgrade rubygem-hammer_cli_foreman_ansibleUpgrade rubygem-mime-typesUpgrade rubygem-unicode-display_widthUpgrade rubygem-unf_ext-debuginfoUpgrade rubygem-unf_ext | Nov 13, 2023 | Feb 9, 2023 |
| Debian | — | Upgrade ruby-globalid | Jul 30, 2024 | Feb 9, 2023 |
| Redhat_linux | — | Upgrade rubygem-localeUpgrade rubygem-unf_ext-debuginfoUpgrade rubygem-highlineUpgrade rubygem-mime-typesUpgrade rubygem-hashieUpgrade rubygem-hammer_cli_foreman_ansibleUpgrade rubygem-fast_gettextUpgrade rubygem-gssapiUpgrade rubygem-hammer_cli_foreman_virt_who_configureUpgrade rubygem-multi_jsonUpgrade rubygem-hammer_cli_foreman_tasksUpgrade rubygem-domain_nameUpgrade rubygem-hammer_cliUpgrade rubygem-clampUpgrade rubygem-loggingUpgrade python39-pulp_manifestUpgrade rubygem-version_gemUpgrade rubygem-snaky_hashUpgrade rubygem-unf_extUpgrade rubygem-http-acceptUpgrade rubygem-hammer_cli_foreman_openscapUpgrade rubygem-amazing_printUpgrade rubygem-ffi-debugsourceUpgrade rubygem-hammer_cli_foreman_bootdiskUpgrade rubygem-http-cookieUpgrade rubygem-ffi-debuginfoUpgrade rubygem-hammer_cli_foreman_webhooksUpgrade satellite-cliUpgrade rubygem-hammer_cli_foreman_discoveryUpgrade rubygem-powerbarUpgrade rubygem-hammer_cli_foreman_azure_rmUpgrade rubygem-unf_ext-debugsourceUpgrade rubygem-unfUpgrade rubygem-apipie-bindingsUpgrade rubygem-oauth-ttyUpgrade rubygem-unicodeUpgrade rubygem-little-pluggerUpgrade rubygem-hammer_cli_foreman_googleUpgrade rubygem-hammer_cli_foreman_adminUpgrade foreman-cliUpgrade rubygem-oauthUpgrade rubygem-foreman_maintainUpgrade rubygem-unicode-debuginfoUpgrade satellite-cloneUpgrade rubygem-unicode-display_widthUpgrade rubygem-jwtUpgrade rubygem-unicode-debugsourceUpgrade rubygem-mime-types-dataUpgrade rubygem-rest-clientUpgrade rubygem-netrcUpgrade satellite-maintainUpgrade rubygem-hammer_cli_foreman_remote_executionUpgrade rubygem-hammer_cli_foremanUpgrade rubygem-hammer_cli_foreman_templatesUpgrade rubygem-ffiUpgrade rubygem-hammer_cli_katello | Nov 13, 2023 | Feb 9, 2023 |
| Rocky_linux | — | Upgrade libdb-sql-devel-debuginfoUpgrade libdb-debugsourceUpgrade libdb-sql-debuginfoUpgrade libdb-utils-debuginfoUpgrade libdb-debuginfoUpgrade libdb-cxx-debuginfoUpgrade libdb-cxx | Mar 5, 2024 | Feb 9, 2023 |
| Suse | — | Upgrade ruby2.5-rubygem-globalid-docUpgrade ruby2.5-rubygem-globalid | Feb 13, 2023 | Feb 9, 2023 |
Prioritize with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub