A ReDoS issue was discovered in the URI component through 0.12.0 in Ruby through 3.2.1. The URI parser mishandles invalid URLs that have specific characters. It causes an increase in execution time for parsing strings to URI objects. The fixed versions are 0.12.1, 0.11.1, 0.10.2 and 0.10.0.1.
CVSS Details
- CVSS 3.1 Base Score: 5.3
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade rubygem-power_assertUpgrade rubygem-xmlrpcUpgrade rubygem-bigdecimalUpgrade rubygem-bson-docUpgrade rubygem-net-telnetUpgrade rubygem-minitestUpgrade ruby-libsUpgrade rubygem-psychUpgrade rubygem-test-unitUpgrade rubygems-develUpgrade rubygem-io-consoleUpgrade rubygem-pgUpgrade rubygem-mongoUpgrade rubygem-abrt-docUpgrade rubygemsUpgrade rubygem-typeprofUpgrade rubygem-rdocUpgrade rubygem-bundlerUpgrade rubygem-did_you_meanUpgrade ruby-default-gemsUpgrade ruby-docUpgrade rubygem-bundler-docUpgrade rubygem-mysql2Upgrade rubygem-mysql2-docUpgrade rubygem-abrtUpgrade rubygem-bsonUpgrade rubygem-jsonUpgrade rubygem-rbsUpgrade rubygem-opensslUpgrade rubygem-mongo-docUpgrade rubygem-rssUpgrade rubyUpgrade rubygem-pg-docUpgrade rubygem-rakeUpgrade ruby-irbUpgrade rubygem-rexmlUpgrade ruby-develUpgrade rubygem-irbUpgrade ruby-bundled-gems | Jul 4, 2023 | Mar 31, 2023 |
| Alpine Linux | — | Upgrade ruby | Mar 26, 2024 | Mar 31, 2023 |
| Amazon Linux Ami 2 | — | Upgrade rubygem-rdocUpgrade rubygem-typeprofUpgrade rubygem-minitestUpgrade ruby-develUpgrade rubygem-rakeUpgrade rubygem-power_assertUpgrade rubygems-develUpgrade rubygem-io-consoleUpgrade ruby-libsUpgrade ruby-default-gemsUpgrade rubyUpgrade rubygem-psychUpgrade rubygem-rexmlUpgrade rubygem-test-unitUpgrade rubygemsUpgrade rubygem-bigdecimalUpgrade rubygem-jsonUpgrade ruby-docUpgrade rubygem-bundlerUpgrade ruby-debuginfoUpgrade rubygem-rbsUpgrade rubygem-irbUpgrade rubygem-rss | Sep 28, 2023 | Mar 31, 2023 |
| Amazon_linux_2023 | — | Upgrade ruby3.2-rubygem-psychUpgrade ruby3.2-libsUpgrade ruby3.2-rubygemsUpgrade ruby3.2-rubygem-minitestUpgrade ruby3.2-default-gemsUpgrade ruby3.2-develUpgrade ruby3.2-rubygem-rexmlUpgrade ruby3.2-debuginfoUpgrade ruby3.2-rubygem-power_assertUpgrade ruby3.2-rubygem-rssUpgrade ruby3.2-rubygem-bundlerUpgrade ruby3.2-rubygem-rdocUpgrade ruby3.2-rubygem-io-console-debuginfoUpgrade ruby3.2-rubygem-bigdecimalUpgrade ruby3.2-rubygem-test-unitUpgrade ruby3.2Upgrade ruby3.2-debugsourceUpgrade ruby3.2-docUpgrade ruby3.2-rubygem-bigdecimal-debuginfoUpgrade ruby3.2-rubygem-psych-debuginfoUpgrade ruby3.2-rubygems-develUpgrade ruby3.2-rubygem-rbs-debuginfoUpgrade ruby3.2-rubygem-rakeUpgrade ruby3.2-rubygem-typeprofUpgrade ruby3.2-bundled-gemsUpgrade ruby3.2-rubygem-json-debuginfoUpgrade ruby3.2-rubygem-irbUpgrade ruby3.2-bundled-gems-debuginfoUpgrade ruby3.2-rubygem-io-consoleUpgrade ruby3.2-libs-debuginfoUpgrade ruby3.2-rubygem-rbsUpgrade ruby3.2-rubygem-json | Feb 17, 2025 | Mar 21, 2023 |
| Centos_linux | — | Upgrade rubygem-rdocUpgrade rubygem-mongoUpgrade rubygem-pgUpgrade rubygem-irbUpgrade rubygem-opensslUpgrade rubygem-power_assertUpgrade rubygem-io-console-debuginfoUpgrade ruby-default-gemsUpgrade rubygem-bundlerUpgrade rubygem-bundler-docUpgrade rubygem-mysql2-docUpgrade rubygem-mysql2-debuginfoUpgrade rubygem-mongo-docUpgrade rubygemsUpgrade ruby-libs-debuginfoUpgrade rubyUpgrade rubygem-xmlrpcUpgrade ruby-docUpgrade rubygem-mysql2Upgrade rubygem-test-unitUpgrade rubygem-abrtUpgrade ruby-debuginfoUpgrade rubygem-psych-debuginfoUpgrade ruby-irbUpgrade rubygem-minitestUpgrade rubygem-pg-debugsourceUpgrade ruby-develUpgrade rubygem-io-consoleUpgrade rubygem-bson-debugsourceUpgrade rubygem-bson-docUpgrade rubygem-net-telnetUpgrade rubygem-psychUpgrade rubygems-develUpgrade rubygem-openssl-debuginfoUpgrade rubygem-rakeUpgrade rubygem-bson-debuginfoUpgrade ruby-debugsourceUpgrade rubygem-pg-docUpgrade rubygem-bigdecimal-debuginfoUpgrade rubygem-bigdecimalUpgrade rubygem-pg-debuginfoUpgrade rubygem-json-debuginfoUpgrade rubygem-bsonUpgrade ruby-libsUpgrade rubygem-mysql2-debugsourceUpgrade rubygem-did_you_meanUpgrade rubygem-abrt-docUpgrade rubygem-json | Jun 28, 2023 | Mar 31, 2023 |
| Debian | — | Upgrade rubygemsUpgrade jrubyUpgrade ruby2.7 | May 2, 2023 | Mar 31, 2023 |
| Dell Powerstore Dsa2024158 | — | Upgrade Dell PowerStoreOS to the latest version | Jan 13, 2026 | Apr 4, 2024 |
| Dell Powerstore Dsa2024225 | — | Upgrade Dell PowerStoreOS to the latest version | Oct 23, 2025 | May 29, 2024 |
| Freebsd | — | Upgrade ruby32Upgrade ruby30Upgrade rubygem-uriUpgrade ruby31Upgrade ruby27Upgrade ruby | Apr 1, 2023 | Mar 30, 2023 |
| Gentoo Linux | — | Upgrade dev-lang/ruby. | Jan 25, 2024 | Mar 31, 2023 |
| Huawei Euleros 2_0_sp10 | — | Upgrade ruby-irbUpgrade ruby-helpUpgrade ruby | Jul 18, 2023 | Mar 31, 2023 |
| Huawei Euleros 2_0_sp11 | — | Upgrade ruby-irbUpgrade ruby-helpUpgrade ruby | Jan 10, 2024 | Mar 31, 2023 |
| Nutanix Ahv | — | Upgrade Nutanix AHV to the latest version | Jun 5, 2026 | Sep 22, 2023 |
| Oracle_linux | — | Upgrade rubygem-mongo-docUpgrade rubygem-mysql2Upgrade rubygem-test-unitUpgrade rubygem-rexmlUpgrade rubygem-bundler-docUpgrade rubygem-abrt-docUpgrade rubygem-net-telnetUpgrade rubygem-pgUpgrade ruby-docUpgrade rubygem-rbsUpgrade rubygem-did_you_meanUpgrade rubygem-rdocUpgrade rubygem-psychUpgrade rubygem-bundlerUpgrade rubygem-bsonUpgrade rubygem-rssUpgrade rubygem-xmlrpcUpgrade ruby-libsUpgrade ruby-default-gemsUpgrade rubygem-opensslUpgrade rubyUpgrade ruby-bundled-gemsUpgrade rubygem-abrtUpgrade rubygemsUpgrade rubygem-jsonUpgrade rubygem-minitestUpgrade rubygem-io-consoleUpgrade rubygem-pg-docUpgrade rubygem-mysql2-docUpgrade ruby-develUpgrade rubygem-bson-docUpgrade rubygem-typeprofUpgrade rubygem-bigdecimalUpgrade ruby-irbUpgrade rubygem-mongoUpgrade rubygem-power_assertUpgrade rubygem-irbUpgrade rubygems-develUpgrade rubygem-rake | Jul 8, 2023 | Mar 21, 2023 |
| Redhat_linux | — | Upgrade ruby-libs-debuginfoUpgrade rubygem-abrtUpgrade rubygem-bundlerUpgrade rubygem-rexmlUpgrade rubyUpgrade rubygem-mysql2-docUpgrade rubygem-irbUpgrade rubygem-rakeUpgrade ruby-develUpgrade rubygem-pg-debugsourceUpgrade rubygem-rbsUpgrade rubygem-mysql2-debuginfoUpgrade ruby-docUpgrade rubygem-mysql2Upgrade ruby-bundled-gemsUpgrade rubygem-did_you_meanUpgrade ruby-bundled-gems-debuginfoUpgrade rubygem-test-unitUpgrade rubygem-xmlrpcUpgrade ruby-default-gemsUpgrade rubygem-rdocUpgrade rubygem-bundler-docUpgrade rubygem-opensslUpgrade ruby-irbUpgrade rubygem-pgUpgrade rubygem-pg-debuginfoUpgrade rubygem-mongo-docUpgrade rubygem-io-console-debuginfoUpgrade rubygem-pg-docUpgrade rubygems-develUpgrade rubygem-typeprofUpgrade rubygem-bson-docUpgrade rubygem-rssUpgrade rubygem-bson-debuginfoUpgrade rubygem-abrt-docUpgrade rubygem-bigdecimal-debuginfoUpgrade rubygem-power_assertUpgrade ruby-libsUpgrade rubygem-minitestUpgrade rubygem-io-consoleUpgrade rubygem-bson-debugsourceUpgrade ruby-debugsourceUpgrade rubygem-openssl-debuginfoNo solution existsUpgrade rubygemsUpgrade rubygem-bigdecimalUpgrade rubygem-json-debuginfoUpgrade rubygem-psychUpgrade rubygem-net-telnetUpgrade rubygem-rbs-debuginfoUpgrade rubygem-jsonUpgrade rubygem-bsonUpgrade rubygem-mysql2-debugsourceUpgrade rubygem-psych-debuginfoUpgrade rubygem-mongoUpgrade ruby-debuginfo | Jun 28, 2023 | Mar 31, 2023 |
| Rocky_linux | — | Upgrade rubygem-pg-debuginfoUpgrade rubygem-io-console-debuginfoUpgrade rubygem-rbs-debuginfoUpgrade ruby-develUpgrade ruby-bundled-gems-debuginfoUpgrade rubyUpgrade rubygem-bigdecimal-debuginfoUpgrade rubygem-opensslUpgrade rubygem-bigdecimalUpgrade rubygem-bson-debugsourceUpgrade rubygem-mysql2-debuginfoUpgrade rubygem-bson-debuginfoUpgrade rubygem-io-consoleUpgrade rubygem-psychUpgrade ruby-libsUpgrade ruby-debuginfoUpgrade ruby-libs-debuginfoUpgrade ruby-bundled-gemsUpgrade rubygem-psych-debuginfoUpgrade rubygem-openssl-debuginfoUpgrade rubygem-pgUpgrade ruby-debugsourceUpgrade rubygem-pg-debugsourceUpgrade rubygem-mysql2-debugsourceUpgrade rubygem-jsonUpgrade rubygem-bsonUpgrade rubygem-mysql2Upgrade rubygem-rbsUpgrade rubygem-json-debuginfo | Mar 5, 2024 | Mar 31, 2023 |
| Suse | — | Upgrade ruby2.5-docUpgrade ruby2.5-develUpgrade ruby2.5Upgrade ruby2.5-devel-extraUpgrade ruby2.5-stdlibUpgrade libruby2_5-2_5Upgrade ruby2.5-doc-ri | Oct 25, 2023 | Mar 31, 2023 |
| Ubuntu | — | Upgrade libruby2.3 (Ubuntu Pro)Upgrade ruby2.5Upgrade ruby2.7Upgrade libruby2.7Upgrade ruby3.1Upgrade libruby3.1Upgrade ruby-rubygemsUpgrade ruby2.3 (Ubuntu Pro)Upgrade libruby2.5 | May 5, 2023 | Mar 31, 2023 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Mar 31, 2023 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub