A ReDoS issue was discovered in the URI component through 0.12.0 in Ruby through 3.2.1. The URI parser mishandles invalid URLs that have specific characters. It causes an increase in execution time for parsing strings to URI objects. The fixed versions are 0.12.1, 0.11.1, 0.10.2 and 0.10.0.1.
CVSS Details
- CVSS 3.1 Base Score: 5.3
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade rubygem-io-consoleUpgrade rubygem-xmlrpcUpgrade rubygem-bigdecimalUpgrade rubygem-typeprofUpgrade rubygems-develUpgrade rubygem-test-unitUpgrade rubygem-power_assertUpgrade rubygem-bson-docUpgrade rubygem-pgUpgrade rubygem-abrt-docUpgrade rubygemsUpgrade rubygem-psychUpgrade ruby-libsUpgrade rubygem-minitestUpgrade rubygem-net-telnetUpgrade rubygem-mongoUpgrade rubygem-did_you_meanUpgrade rubygem-bsonUpgrade rubygem-pg-docUpgrade rubygem-opensslUpgrade rubygem-mongo-docUpgrade rubygem-rbsUpgrade rubygem-irbUpgrade rubygem-bundlerUpgrade ruby-irbUpgrade rubygem-bundler-docUpgrade rubyUpgrade rubygem-rakeUpgrade rubygem-rexmlUpgrade ruby-develUpgrade rubygem-mysql2-docUpgrade ruby-bundled-gemsUpgrade rubygem-jsonUpgrade rubygem-mysql2Upgrade rubygem-abrtUpgrade ruby-docUpgrade rubygem-rssUpgrade ruby-default-gemsUpgrade rubygem-rdoc | Jul 4, 2023 | Mar 31, 2023 |
| Alpine Linux | — | Upgrade ruby | Mar 26, 2024 | Mar 31, 2023 |
| Amazon Linux Ami 2 | — | Upgrade rubygem-rbsUpgrade rubygem-rexmlUpgrade rubygem-jsonUpgrade rubyUpgrade rubygem-bigdecimalUpgrade rubygem-irbUpgrade rubygemsUpgrade ruby-debuginfoUpgrade rubygem-bundlerUpgrade rubygem-test-unitUpgrade ruby-default-gemsUpgrade ruby-docUpgrade rubygem-psychUpgrade rubygem-rssUpgrade ruby-libsUpgrade rubygems-develUpgrade rubygem-io-consoleUpgrade rubygem-minitestUpgrade rubygem-power_assertUpgrade ruby-develUpgrade rubygem-rdocUpgrade rubygem-rakeUpgrade rubygem-typeprof | Sep 28, 2023 | Mar 31, 2023 |
| Amazon_linux_2023 | — | Upgrade ruby3.2-rubygem-rexmlUpgrade ruby3.2-rubygem-power_assertUpgrade ruby3.2-libsUpgrade ruby3.2-rubygem-rdocUpgrade ruby3.2Upgrade ruby3.2-rubygem-rssUpgrade ruby3.2-debuginfoUpgrade ruby3.2-rubygem-bundlerUpgrade ruby3.2-rubygem-bigdecimalUpgrade ruby3.2-develUpgrade ruby3.2-rubygem-psych-debuginfoUpgrade ruby3.2-docUpgrade ruby3.2-debugsourceUpgrade ruby3.2-rubygem-io-console-debuginfoUpgrade ruby3.2-rubygem-psychUpgrade ruby3.2-rubygemsUpgrade ruby3.2-rubygem-minitestUpgrade ruby3.2-rubygem-bigdecimal-debuginfoUpgrade ruby3.2-rubygem-test-unitUpgrade ruby3.2-default-gemsUpgrade ruby3.2-rubygem-rbs-debuginfoUpgrade ruby3.2-bundled-gemsUpgrade ruby3.2-rubygem-jsonUpgrade ruby3.2-rubygem-rakeUpgrade ruby3.2-rubygems-develUpgrade ruby3.2-rubygem-typeprofUpgrade ruby3.2-rubygem-rbsUpgrade ruby3.2-rubygem-irbUpgrade ruby3.2-rubygem-io-consoleUpgrade ruby3.2-rubygem-json-debuginfoUpgrade ruby3.2-libs-debuginfoUpgrade ruby3.2-bundled-gems-debuginfo | Feb 17, 2025 | Mar 21, 2023 |
| Centos_linux | — | Upgrade rubygem-rdocUpgrade rubygem-power_assertUpgrade rubygem-pgUpgrade rubygem-mongoUpgrade rubygem-minitestUpgrade rubygem-mongo-docUpgrade rubygem-pg-debugsourceUpgrade rubygemsUpgrade rubygem-psych-debuginfoUpgrade rubygem-abrtUpgrade rubygem-io-console-debuginfoUpgrade ruby-libs-debuginfoUpgrade rubygem-opensslUpgrade ruby-irbUpgrade ruby-default-gemsUpgrade ruby-debuginfoUpgrade rubygem-mysql2-debuginfoUpgrade rubygem-test-unitUpgrade rubygem-xmlrpcUpgrade rubyUpgrade rubygem-mysql2-docUpgrade ruby-develUpgrade rubygem-irbUpgrade ruby-docUpgrade rubygem-bundlerUpgrade rubygem-mysql2Upgrade rubygem-bundler-docUpgrade rubygem-json-debuginfoUpgrade rubygem-jsonUpgrade ruby-libsUpgrade rubygem-bigdecimalUpgrade rubygem-abrt-docUpgrade rubygem-bsonUpgrade rubygem-pg-docUpgrade rubygem-bson-debuginfoUpgrade rubygem-rakeUpgrade rubygem-pg-debuginfoUpgrade rubygem-net-telnetUpgrade rubygem-bson-debugsourceUpgrade rubygems-develUpgrade rubygem-openssl-debuginfoUpgrade ruby-debugsourceUpgrade rubygem-bson-docUpgrade rubygem-io-consoleUpgrade rubygem-did_you_meanUpgrade rubygem-bigdecimal-debuginfoUpgrade rubygem-psychUpgrade rubygem-mysql2-debugsource | Jun 28, 2023 | Mar 31, 2023 |
| Debian | — | Upgrade ruby2.7Upgrade jrubyUpgrade rubygems | May 2, 2023 | Mar 31, 2023 |
| Dell Powerstore Dsa2024158 | — | Upgrade Dell PowerStoreOS to the latest version | Jan 13, 2026 | Apr 4, 2024 |
| Dell Powerstore Dsa2024225 | — | Upgrade Dell PowerStoreOS to the latest version | Oct 23, 2025 | May 29, 2024 |
| Freebsd | — | Upgrade ruby30Upgrade ruby32Upgrade rubygem-uriUpgrade ruby31Upgrade ruby27Upgrade ruby | Apr 1, 2023 | Mar 30, 2023 |
| Gentoo Linux | — | Upgrade dev-lang/ruby. | Jan 25, 2024 | Mar 31, 2023 |
| Huawei Euleros 2_0_sp10 | — | Upgrade ruby-irbUpgrade rubyUpgrade ruby-help | Jul 18, 2023 | Mar 31, 2023 |
| Huawei Euleros 2_0_sp11 | — | Upgrade ruby-helpUpgrade ruby-irbUpgrade ruby | Jan 10, 2024 | Mar 31, 2023 |
| Nutanix Ahv | — | Upgrade Nutanix AHV to the latest version | Jun 5, 2026 | Sep 22, 2023 |
| Oracle_linux | — | Upgrade rubygem-bigdecimalUpgrade rubygem-mongoUpgrade rubygem-bson-docUpgrade rubygem-minitestUpgrade rubygem-io-consoleUpgrade rubygems-develUpgrade ruby-irbUpgrade rubygem-rakeUpgrade rubygem-power_assertUpgrade rubygem-typeprofUpgrade rubygem-irbUpgrade ruby-develUpgrade rubygem-mysql2-docUpgrade rubygem-pg-docUpgrade rubygem-abrtUpgrade rubygem-abrt-docUpgrade rubygem-bundler-docUpgrade ruby-default-gemsUpgrade rubygem-opensslUpgrade rubygem-rexmlUpgrade rubygem-jsonUpgrade rubyUpgrade rubygem-did_you_meanUpgrade rubygem-rssUpgrade rubygem-test-unitUpgrade rubygem-mongo-docUpgrade rubygem-mysql2Upgrade rubygem-bundlerUpgrade rubygem-pgUpgrade rubygem-net-telnetUpgrade ruby-docUpgrade rubygem-rbsUpgrade rubygemsUpgrade ruby-libsUpgrade rubygem-psychUpgrade ruby-bundled-gemsUpgrade rubygem-bsonUpgrade rubygem-xmlrpcUpgrade rubygem-rdoc | Jul 8, 2023 | Mar 21, 2023 |
| Redhat_linux | — | Upgrade ruby-libsUpgrade rubygem-openssl-debuginfoUpgrade rubygem-bigdecimalUpgrade rubygem-net-telnetUpgrade rubygem-power_assertUpgrade rubygem-psychUpgrade rubygem-bson-debugsourceUpgrade ruby-debugsourceUpgrade rubygem-mysql2-debugsourceUpgrade rubygem-rbs-debuginfoUpgrade rubygem-bsonUpgrade rubygem-psych-debuginfoNo solution existsUpgrade rubygem-bson-debuginfoUpgrade rubygem-io-consoleUpgrade rubygems-develUpgrade rubygem-abrt-docUpgrade rubygem-typeprofUpgrade rubygem-minitestUpgrade rubygem-rssUpgrade ruby-debuginfoUpgrade rubygem-bigdecimal-debuginfoUpgrade rubygemsUpgrade rubygem-jsonUpgrade rubygem-bson-docUpgrade rubygem-mongoUpgrade rubygem-json-debuginfoUpgrade rubygem-rbsUpgrade rubygem-abrtUpgrade rubygem-irbUpgrade ruby-irbUpgrade ruby-docUpgrade rubygem-pg-debugsourceUpgrade rubygem-bundlerUpgrade ruby-bundled-gemsUpgrade rubyUpgrade rubygem-test-unitUpgrade ruby-libs-debuginfoUpgrade rubygem-pg-docUpgrade rubygem-opensslUpgrade rubygem-mysql2-debuginfoUpgrade ruby-default-gemsUpgrade rubygem-mysql2-docUpgrade rubygem-mongo-docUpgrade rubygem-io-console-debuginfoUpgrade rubygem-rakeUpgrade rubygem-pg-debuginfoUpgrade rubygem-mysql2Upgrade rubygem-rdocUpgrade ruby-develUpgrade rubygem-pgUpgrade rubygem-bundler-docUpgrade rubygem-rexmlUpgrade rubygem-xmlrpcUpgrade rubygem-did_you_meanUpgrade ruby-bundled-gems-debuginfo | Jun 28, 2023 | Mar 31, 2023 |
| Rocky_linux | — | Upgrade rubygem-mysql2Upgrade rubygem-psychUpgrade rubygem-pgUpgrade ruby-debugsourceUpgrade rubygem-jsonUpgrade ruby-bundled-gemsUpgrade ruby-libs-debuginfoUpgrade rubygem-psych-debuginfoUpgrade rubygem-json-debuginfoUpgrade rubygem-mysql2-debugsourceUpgrade rubygem-rbsUpgrade rubygem-bsonUpgrade rubygem-openssl-debuginfoUpgrade ruby-debuginfoUpgrade rubygem-pg-debugsourceUpgrade ruby-libsUpgrade rubygem-mysql2-debuginfoUpgrade rubygem-bson-debugsourceUpgrade ruby-develUpgrade rubygem-pg-debuginfoUpgrade rubygem-bson-debuginfoUpgrade rubygem-rbs-debuginfoUpgrade rubygem-io-console-debuginfoUpgrade ruby-bundled-gems-debuginfoUpgrade rubygem-io-consoleUpgrade rubygem-bigdecimal-debuginfoUpgrade rubygem-opensslUpgrade rubyUpgrade rubygem-bigdecimal | Mar 5, 2024 | Mar 31, 2023 |
| Suse | — | Upgrade ruby2.5-doc-riUpgrade libruby2_5-2_5Upgrade ruby2.5-stdlibUpgrade ruby2.5Upgrade ruby2.5-docUpgrade ruby2.5-develUpgrade ruby2.5-devel-extra | Oct 25, 2023 | Mar 31, 2023 |
| Ubuntu | — | Upgrade ruby2.5Upgrade libruby2.7Upgrade ruby3.1Upgrade libruby2.3 (Ubuntu Pro)Upgrade ruby2.7Upgrade libruby3.1Upgrade ruby-rubygemsUpgrade libruby2.5Upgrade ruby2.3 (Ubuntu Pro) | May 5, 2023 | Mar 31, 2023 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Mar 31, 2023 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub