A ReDoS issue was discovered in the URI component through 0.12.0 in Ruby through 3.2.1. The URI parser mishandles invalid URLs that have specific characters. It causes an increase in execution time for parsing strings to URI objects. The fixed versions are 0.12.1, 0.11.1, 0.10.2 and 0.10.0.1.
CVSS Details
- CVSS 3.1 Base Score: 5.3
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade rubygemsUpgrade rubygem-test-unitUpgrade ruby-libsUpgrade rubygem-io-consoleUpgrade rubygem-minitestUpgrade rubygem-typeprofUpgrade rubygem-power_assertUpgrade rubygem-xmlrpcUpgrade rubygem-net-telnetUpgrade rubygem-abrt-docUpgrade rubygems-develUpgrade rubygem-pgUpgrade rubygem-bson-docUpgrade rubygem-bigdecimalUpgrade rubygem-psychUpgrade rubygem-mongoUpgrade ruby-default-gemsUpgrade rubygem-abrtUpgrade rubygem-bundler-docUpgrade rubygem-rdocUpgrade ruby-bundled-gemsUpgrade rubygem-irbUpgrade rubygem-bsonUpgrade rubygem-opensslUpgrade rubygem-rbsUpgrade rubyUpgrade rubygem-mysql2-docUpgrade rubygem-pg-docUpgrade ruby-develUpgrade ruby-docUpgrade rubygem-rakeUpgrade rubygem-jsonUpgrade rubygem-rssUpgrade rubygem-bundlerUpgrade rubygem-mongo-docUpgrade rubygem-rexmlUpgrade rubygem-mysql2Upgrade ruby-irbUpgrade rubygem-did_you_mean | Jul 4, 2023 | Mar 31, 2023 |
| Alpine Linux | — | Upgrade ruby | Mar 26, 2024 | Mar 31, 2023 |
| Amazon Linux Ami 2 | — | Upgrade rubygem-irbUpgrade rubygemsUpgrade rubyUpgrade rubygem-rbsUpgrade rubygem-rssUpgrade rubygem-rexmlUpgrade rubygem-psychUpgrade rubygem-test-unitUpgrade ruby-debuginfoUpgrade ruby-default-gemsUpgrade rubygem-bundlerUpgrade ruby-docUpgrade rubygem-jsonUpgrade rubygem-bigdecimalUpgrade ruby-libsUpgrade rubygem-typeprofUpgrade ruby-develUpgrade rubygem-minitestUpgrade rubygem-rdocUpgrade rubygems-develUpgrade rubygem-power_assertUpgrade rubygem-rakeUpgrade rubygem-io-console | Sep 28, 2023 | Mar 31, 2023 |
| Amazon_linux_2023 | — | Upgrade ruby3.2-rubygem-test-unitUpgrade ruby3.2-rubygem-psych-debuginfoUpgrade ruby3.2-rubygemsUpgrade ruby3.2-rubygem-psychUpgrade ruby3.2-rubygem-bigdecimal-debuginfoUpgrade ruby3.2-rubygem-io-console-debuginfoUpgrade ruby3.2-rubygem-minitestUpgrade ruby3.2-libsUpgrade ruby3.2-debugsourceUpgrade ruby3.2-docUpgrade ruby3.2-rubygem-bigdecimalUpgrade ruby3.2-rubygem-rdocUpgrade ruby3.2-rubygem-rexmlUpgrade ruby3.2-rubygem-rssUpgrade ruby3.2-rubygem-power_assertUpgrade ruby3.2-default-gemsUpgrade ruby3.2-develUpgrade ruby3.2-rubygem-bundlerUpgrade ruby3.2-debuginfoUpgrade ruby3.2Upgrade ruby3.2-rubygem-rbs-debuginfoUpgrade ruby3.2-rubygem-rakeUpgrade ruby3.2-rubygem-irbUpgrade ruby3.2-rubygem-typeprofUpgrade ruby3.2-rubygems-develUpgrade ruby3.2-rubygem-json-debuginfoUpgrade ruby3.2-bundled-gemsUpgrade ruby3.2-libs-debuginfoUpgrade ruby3.2-bundled-gems-debuginfoUpgrade ruby3.2-rubygem-jsonUpgrade ruby3.2-rubygem-io-consoleUpgrade ruby3.2-rubygem-rbs | Feb 17, 2025 | Mar 21, 2023 |
| Centos_linux | — | Upgrade rubygem-openssl-debuginfoUpgrade rubygems-develUpgrade ruby-debugsourceUpgrade rubygem-bson-docUpgrade rubygem-psychUpgrade rubygem-bigdecimal-debuginfoUpgrade rubygem-did_you_meanUpgrade rubygem-bigdecimalUpgrade rubygem-bson-debuginfoUpgrade rubygem-jsonUpgrade rubygem-pg-docUpgrade rubygem-abrt-docUpgrade rubygem-bson-debugsourceUpgrade rubygem-net-telnetUpgrade rubygem-rakeUpgrade ruby-libsUpgrade rubygem-json-debuginfoUpgrade rubygem-pg-debuginfoUpgrade rubygem-mysql2-debugsourceUpgrade rubygem-io-consoleUpgrade rubygem-bsonUpgrade rubyUpgrade ruby-docUpgrade rubygem-mysql2-docUpgrade rubygem-xmlrpcUpgrade rubygem-test-unitUpgrade rubygem-mysql2Upgrade ruby-develUpgrade rubygem-minitestUpgrade rubygem-pgUpgrade rubygem-io-console-debuginfoUpgrade rubygem-mongoUpgrade rubygem-power_assertUpgrade rubygem-rdocUpgrade rubygem-opensslUpgrade rubygem-irbUpgrade rubygem-bundler-docUpgrade rubygem-bundlerUpgrade rubygem-mysql2-debuginfoUpgrade ruby-default-gemsUpgrade rubygem-psych-debuginfoUpgrade rubygem-pg-debugsourceUpgrade rubygem-abrtUpgrade ruby-libs-debuginfoUpgrade rubygem-mongo-docUpgrade rubygemsUpgrade ruby-irbUpgrade ruby-debuginfo | Jun 28, 2023 | Mar 31, 2023 |
| Debian | — | Upgrade rubygemsUpgrade jrubyUpgrade ruby2.7 | May 2, 2023 | Mar 31, 2023 |
| Dell Powerstore Dsa2024158 | — | Upgrade Dell PowerStoreOS to the latest version | Jan 13, 2026 | Apr 4, 2024 |
| Dell Powerstore Dsa2024225 | — | Upgrade Dell PowerStoreOS to the latest version | Oct 23, 2025 | May 29, 2024 |
| Freebsd | — | Upgrade ruby31Upgrade rubyUpgrade ruby27Upgrade rubygem-uriUpgrade ruby32Upgrade ruby30 | Apr 1, 2023 | Mar 30, 2023 |
| Gentoo Linux | — | Upgrade dev-lang/ruby. | Jan 25, 2024 | Mar 31, 2023 |
| Huawei Euleros 2_0_sp10 | — | Upgrade ruby-helpUpgrade ruby-irbUpgrade ruby | Jul 18, 2023 | Mar 31, 2023 |
| Huawei Euleros 2_0_sp11 | — | Upgrade ruby-irbUpgrade ruby-helpUpgrade ruby | Jan 10, 2024 | Mar 31, 2023 |
| Nutanix Ahv | — | Upgrade Nutanix AHV to the latest version | Jun 5, 2026 | Sep 22, 2023 |
| Oracle_linux | — | Upgrade rubygem-pg-docUpgrade rubygems-develUpgrade rubygem-mysql2-docUpgrade rubygem-rakeUpgrade rubygem-bson-docUpgrade rubygem-io-consoleUpgrade rubygem-mongoUpgrade rubygem-power_assertUpgrade rubygem-irbUpgrade ruby-irbUpgrade rubygem-typeprofUpgrade rubygem-bigdecimalUpgrade ruby-develUpgrade rubygem-minitestUpgrade rubygem-pgUpgrade ruby-libsUpgrade ruby-docUpgrade rubygem-abrtUpgrade rubygem-net-telnetUpgrade rubygem-rbsUpgrade rubygem-psychUpgrade rubyUpgrade ruby-bundled-gemsUpgrade rubygem-abrt-docUpgrade rubygem-test-unitUpgrade rubygem-mongo-docUpgrade rubygem-mysql2Upgrade rubygem-bundler-docUpgrade rubygem-xmlrpcUpgrade rubygem-jsonUpgrade rubygem-rdocUpgrade rubygem-bsonUpgrade rubygem-did_you_meanUpgrade ruby-default-gemsUpgrade rubygem-rexmlUpgrade rubygem-opensslUpgrade rubygemsUpgrade rubygem-rssUpgrade rubygem-bundler | Jul 8, 2023 | Mar 21, 2023 |
| Redhat_linux | — | Upgrade rubygem-opensslUpgrade rubygem-did_you_meanUpgrade rubygem-rdocUpgrade rubygem-bundlerUpgrade rubygem-irbUpgrade rubygem-rbsUpgrade rubygem-rakeUpgrade rubyUpgrade rubygem-mysql2-docUpgrade rubygem-io-console-debuginfoUpgrade rubygem-rexmlUpgrade rubygem-xmlrpcUpgrade rubygem-pgUpgrade rubygem-mongo-docUpgrade rubygem-pg-debugsourceUpgrade ruby-default-gemsUpgrade ruby-irbUpgrade rubygem-mysql2-debuginfoUpgrade rubygem-pg-docUpgrade rubygem-bundler-docUpgrade ruby-bundled-gems-debuginfoUpgrade rubygem-test-unitUpgrade rubygem-abrtUpgrade ruby-docUpgrade ruby-bundled-gemsUpgrade ruby-develUpgrade ruby-libs-debuginfoUpgrade rubygem-mysql2Upgrade rubygem-pg-debuginfoUpgrade rubygem-jsonUpgrade rubygem-mongoUpgrade rubygem-bson-docUpgrade rubygem-psych-debuginfoUpgrade rubygem-bson-debuginfoUpgrade rubygem-abrt-docUpgrade rubygem-json-debuginfoNo solution existsUpgrade rubygem-io-consoleUpgrade rubygemsUpgrade rubygem-typeprofUpgrade ruby-debuginfoUpgrade rubygem-rssUpgrade rubygem-bson-debugsourceUpgrade rubygem-power_assertUpgrade rubygems-develUpgrade rubygem-bsonUpgrade rubygem-openssl-debuginfoUpgrade rubygem-rbs-debuginfoUpgrade rubygem-bigdecimalUpgrade rubygem-bigdecimal-debuginfoUpgrade ruby-libsUpgrade rubygem-psychUpgrade rubygem-mysql2-debugsourceUpgrade rubygem-net-telnetUpgrade ruby-debugsourceUpgrade rubygem-minitest | Jun 28, 2023 | Mar 31, 2023 |
| Rocky_linux | — | Upgrade rubygem-openssl-debuginfoUpgrade ruby-debuginfoUpgrade rubygem-mysql2Upgrade ruby-debugsourceUpgrade rubygem-pgUpgrade rubygem-bsonUpgrade rubygem-jsonUpgrade rubygem-psych-debuginfoUpgrade ruby-libsUpgrade ruby-libs-debuginfoUpgrade rubygem-json-debuginfoUpgrade ruby-bundled-gemsUpgrade rubygem-mysql2-debugsourceUpgrade rubygem-rbsUpgrade rubygem-pg-debugsourceUpgrade rubygem-psychUpgrade rubygem-bson-debugsourceUpgrade ruby-bundled-gems-debuginfoUpgrade rubygem-bson-debuginfoUpgrade rubygem-mysql2-debuginfoUpgrade rubygem-bigdecimal-debuginfoUpgrade rubygem-bigdecimalUpgrade rubygem-io-console-debuginfoUpgrade rubygem-rbs-debuginfoUpgrade rubygem-opensslUpgrade rubyUpgrade ruby-develUpgrade rubygem-io-consoleUpgrade rubygem-pg-debuginfo | Mar 5, 2024 | Mar 31, 2023 |
| Suse | — | Upgrade ruby2.5Upgrade ruby2.5-devel-extraUpgrade ruby2.5-develUpgrade ruby2.5-docUpgrade ruby2.5-stdlibUpgrade libruby2_5-2_5Upgrade ruby2.5-doc-ri | Oct 25, 2023 | Mar 31, 2023 |
| Ubuntu | — | Upgrade ruby2.3 (Ubuntu Pro)Upgrade libruby2.5Upgrade ruby-rubygemsUpgrade ruby2.5Upgrade ruby2.7Upgrade ruby3.1Upgrade libruby2.7Upgrade libruby2.3 (Ubuntu Pro)Upgrade libruby3.1 | May 5, 2023 | Mar 31, 2023 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Mar 31, 2023 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub