A ReDoS issue was discovered in the URI component through 0.12.0 in Ruby through 3.2.1. The URI parser mishandles invalid URLs that have specific characters. It causes an increase in execution time for parsing strings to URI objects. The fixed versions are 0.12.1, 0.11.1, 0.10.2 and 0.10.0.1.
CVSS Details
- CVSS 3.1 Base Score: 5.3
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade ruby-docUpgrade rubyUpgrade ruby-develUpgrade ruby-irbUpgrade rubygem-mongo-docUpgrade rubygem-rakeUpgrade rubygem-rbsUpgrade rubygem-bundler-docUpgrade rubygem-irbUpgrade rubygem-mysql2-docUpgrade rubygem-bundlerUpgrade rubygem-rssUpgrade rubygem-bsonUpgrade ruby-default-gemsUpgrade rubygem-opensslUpgrade rubygem-mysql2Upgrade rubygem-did_you_meanUpgrade rubygem-jsonUpgrade rubygem-rdocUpgrade rubygem-abrtUpgrade ruby-bundled-gemsUpgrade rubygem-rexmlUpgrade rubygem-pg-docUpgrade rubygem-bson-docUpgrade rubygemsUpgrade rubygem-abrt-docUpgrade rubygem-pgUpgrade ruby-libsUpgrade rubygem-xmlrpcUpgrade rubygem-minitestUpgrade rubygem-power_assertUpgrade rubygem-io-consoleUpgrade rubygem-net-telnetUpgrade rubygem-bigdecimalUpgrade rubygem-mongoUpgrade rubygem-typeprofUpgrade rubygem-psychUpgrade rubygems-develUpgrade rubygem-test-unit | Jul 4, 2023 | Mar 31, 2023 |
| Alpine Linux | — | Upgrade ruby | Mar 26, 2024 | Mar 31, 2023 |
| Amazon Linux Ami 2 | — | Upgrade rubygem-bundlerUpgrade rubyUpgrade ruby-default-gemsUpgrade rubygem-test-unitUpgrade rubygem-rbsUpgrade rubygem-bigdecimalUpgrade rubygemsUpgrade rubygem-rssUpgrade rubygem-irbUpgrade ruby-libsUpgrade ruby-debuginfoUpgrade rubygem-jsonUpgrade ruby-docUpgrade rubygem-psychUpgrade rubygem-rexmlUpgrade rubygem-io-consoleUpgrade rubygem-minitestUpgrade ruby-develUpgrade rubygem-rdocUpgrade rubygem-typeprofUpgrade rubygem-rakeUpgrade rubygems-develUpgrade rubygem-power_assert | Sep 28, 2023 | Mar 31, 2023 |
| Amazon_linux_2023 | — | Upgrade ruby3.2-rubygem-bigdecimal-debuginfoUpgrade ruby3.2-rubygem-bundlerUpgrade ruby3.2Upgrade ruby3.2-rubygem-psych-debuginfoUpgrade ruby3.2-rubygem-rssUpgrade ruby3.2-rubygem-rdocUpgrade ruby3.2-docUpgrade ruby3.2-rubygem-minitestUpgrade ruby3.2-rubygem-psychUpgrade ruby3.2-rubygem-power_assertUpgrade ruby3.2-develUpgrade ruby3.2-rubygem-bigdecimalUpgrade ruby3.2-debuginfoUpgrade ruby3.2-libsUpgrade ruby3.2-rubygem-test-unitUpgrade ruby3.2-rubygemsUpgrade ruby3.2-rubygem-rexmlUpgrade ruby3.2-debugsourceUpgrade ruby3.2-rubygem-io-console-debuginfoUpgrade ruby3.2-default-gemsUpgrade ruby3.2-rubygem-rakeUpgrade ruby3.2-rubygems-develUpgrade ruby3.2-bundled-gemsUpgrade ruby3.2-rubygem-json-debuginfoUpgrade ruby3.2-rubygem-irbUpgrade ruby3.2-rubygem-rbsUpgrade ruby3.2-libs-debuginfoUpgrade ruby3.2-rubygem-jsonUpgrade ruby3.2-bundled-gems-debuginfoUpgrade ruby3.2-rubygem-io-consoleUpgrade ruby3.2-rubygem-typeprofUpgrade ruby3.2-rubygem-rbs-debuginfo | Feb 17, 2025 | Mar 21, 2023 |
| Centos_linux | — | Upgrade rubygem-pgUpgrade rubygem-mysql2-debuginfoUpgrade rubygem-io-console-debuginfoUpgrade rubygem-mysql2-docUpgrade rubygem-opensslUpgrade rubygem-bundlerUpgrade rubygem-mongoUpgrade rubygem-minitestUpgrade rubygem-power_assertUpgrade ruby-default-gemsUpgrade rubygem-bundler-docUpgrade rubygem-rdocUpgrade ruby-docUpgrade rubygem-mysql2Upgrade ruby-develUpgrade rubygemsUpgrade rubygem-mongo-docUpgrade rubygem-psych-debuginfoUpgrade rubygem-irbUpgrade ruby-libs-debuginfoUpgrade ruby-debuginfoUpgrade ruby-irbUpgrade rubyUpgrade rubygem-abrtUpgrade rubygem-test-unitUpgrade rubygem-xmlrpcUpgrade rubygem-pg-debugsourceUpgrade rubygem-bson-debuginfoUpgrade rubygem-abrt-docUpgrade rubygems-develUpgrade rubygem-openssl-debuginfoUpgrade rubygem-bigdecimalUpgrade rubygem-pg-debuginfoUpgrade rubygem-json-debuginfoUpgrade rubygem-bsonUpgrade ruby-libsUpgrade rubygem-jsonUpgrade rubygem-did_you_meanUpgrade rubygem-psychUpgrade rubygem-bson-debugsourceUpgrade rubygem-net-telnetUpgrade rubygem-io-consoleUpgrade rubygem-mysql2-debugsourceUpgrade ruby-debugsourceUpgrade rubygem-bigdecimal-debuginfoUpgrade rubygem-bson-docUpgrade rubygem-rakeUpgrade rubygem-pg-doc | Jun 28, 2023 | Mar 31, 2023 |
| Debian | — | Upgrade ruby2.7Upgrade jrubyUpgrade rubygems | May 2, 2023 | Mar 31, 2023 |
| Dell Powerstore Dsa2024158 | — | Upgrade Dell PowerStoreOS to the latest version | Jan 13, 2026 | Apr 4, 2024 |
| Dell Powerstore Dsa2024225 | — | Upgrade Dell PowerStoreOS to the latest version | Oct 23, 2025 | May 29, 2024 |
| Freebsd | — | Upgrade ruby32Upgrade rubygem-uriUpgrade ruby30Upgrade rubyUpgrade ruby27Upgrade ruby31 | Apr 1, 2023 | Mar 30, 2023 |
| Gentoo Linux | — | Upgrade dev-lang/ruby. | Jan 25, 2024 | Mar 31, 2023 |
| Huawei Euleros 2_0_sp10 | — | Upgrade ruby-helpUpgrade rubyUpgrade ruby-irb | Jul 18, 2023 | Mar 31, 2023 |
| Huawei Euleros 2_0_sp11 | — | Upgrade ruby-irbUpgrade ruby-helpUpgrade ruby | Jan 10, 2024 | Mar 31, 2023 |
| Nutanix Ahv | — | Upgrade Nutanix AHV to the latest version | Jun 5, 2026 | Sep 22, 2023 |
| Oracle_linux | — | Upgrade rubygem-mongoUpgrade rubygem-power_assertUpgrade ruby-irbUpgrade rubygem-io-consoleUpgrade rubygem-minitestUpgrade rubygem-rakeUpgrade rubygem-typeprofUpgrade rubygem-pg-docUpgrade rubygem-mysql2-docUpgrade rubygem-bigdecimalUpgrade ruby-develUpgrade rubygem-irbUpgrade rubygem-bson-docUpgrade rubygems-develUpgrade rubygem-bsonUpgrade ruby-libsUpgrade rubygem-rdocUpgrade rubygem-xmlrpcUpgrade rubygemsUpgrade rubygem-bundler-docUpgrade rubygem-abrtUpgrade rubygem-jsonUpgrade rubygem-rssUpgrade rubygem-pgUpgrade rubygem-net-telnetUpgrade ruby-docUpgrade rubygem-rbsUpgrade rubygem-mongo-docUpgrade rubygem-abrt-docUpgrade rubyUpgrade rubygem-mysql2Upgrade rubygem-test-unitUpgrade rubygem-bundlerUpgrade rubygem-opensslUpgrade ruby-bundled-gemsUpgrade ruby-default-gemsUpgrade rubygem-rexmlUpgrade rubygem-did_you_meanUpgrade rubygem-psych | Jul 8, 2023 | Mar 21, 2023 |
| Redhat_linux | — | Upgrade rubygem-rbs-debuginfoUpgrade rubygem-io-consoleUpgrade ruby-debugsourceUpgrade rubygem-openssl-debuginfoUpgrade rubygem-net-telnetUpgrade ruby-libsUpgrade rubygem-mysql2-debugsourceUpgrade rubygem-json-debuginfoUpgrade rubygem-minitestNo solution existsUpgrade rubygem-jsonUpgrade rubygem-mongoUpgrade rubygem-bson-docUpgrade rubygemsUpgrade ruby-debuginfoUpgrade rubygem-power_assertUpgrade rubygem-rssUpgrade rubygems-develUpgrade rubygem-typeprofUpgrade rubygem-psych-debuginfoUpgrade rubygem-bson-debuginfoUpgrade rubygem-bigdecimal-debuginfoUpgrade rubygem-abrt-docUpgrade rubygem-bson-debugsourceUpgrade rubygem-bsonUpgrade rubygem-psychUpgrade rubygem-bigdecimalUpgrade rubygem-bundlerUpgrade ruby-docUpgrade rubygem-pg-debugsourceUpgrade rubygem-pgUpgrade ruby-irbUpgrade rubygem-rakeUpgrade rubygem-mongo-docUpgrade rubygem-abrtUpgrade rubygem-rexmlUpgrade ruby-bundled-gemsUpgrade rubygem-xmlrpcUpgrade rubygem-bundler-docUpgrade ruby-default-gemsUpgrade rubygem-test-unitUpgrade rubygem-rdocUpgrade rubygem-opensslUpgrade rubygem-pg-docUpgrade rubygem-rbsUpgrade rubygem-irbUpgrade rubygem-mysql2-debuginfoUpgrade rubygem-mysql2-docUpgrade rubygem-mysql2Upgrade rubygem-io-console-debuginfoUpgrade ruby-bundled-gems-debuginfoUpgrade ruby-libs-debuginfoUpgrade rubygem-did_you_meanUpgrade ruby-develUpgrade rubygem-pg-debuginfoUpgrade ruby | Jun 28, 2023 | Mar 31, 2023 |
| Rocky_linux | — | Upgrade rubygem-pgUpgrade rubygem-psych-debuginfoUpgrade ruby-bundled-gemsUpgrade ruby-libs-debuginfoUpgrade rubygem-json-debuginfoUpgrade rubygem-rbsUpgrade rubygem-openssl-debuginfoUpgrade rubygem-psychUpgrade rubygem-mysql2Upgrade rubygem-pg-debugsourceUpgrade ruby-libsUpgrade rubygem-bsonUpgrade ruby-debuginfoUpgrade rubygem-mysql2-debugsourceUpgrade rubygem-jsonUpgrade ruby-debugsourceUpgrade rubygem-bson-debuginfoUpgrade ruby-develUpgrade ruby-bundled-gems-debuginfoUpgrade rubygem-io-consoleUpgrade rubygem-opensslUpgrade rubyUpgrade rubygem-pg-debuginfoUpgrade rubygem-mysql2-debuginfoUpgrade rubygem-bson-debugsourceUpgrade rubygem-rbs-debuginfoUpgrade rubygem-io-console-debuginfoUpgrade rubygem-bigdecimal-debuginfoUpgrade rubygem-bigdecimal | Mar 5, 2024 | Mar 31, 2023 |
| Suse | — | Upgrade ruby2.5-doc-riUpgrade libruby2_5-2_5Upgrade ruby2.5-stdlibUpgrade ruby2.5-develUpgrade ruby2.5-docUpgrade ruby2.5Upgrade ruby2.5-devel-extra | Oct 25, 2023 | Mar 31, 2023 |
| Ubuntu | — | Upgrade ruby2.5Upgrade ruby2.7Upgrade ruby3.1Upgrade libruby2.7Upgrade libruby2.3 (Ubuntu Pro)Upgrade libruby3.1Upgrade ruby2.3 (Ubuntu Pro)Upgrade libruby2.5Upgrade ruby-rubygems | May 5, 2023 | Mar 31, 2023 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Mar 31, 2023 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub