A ReDoS issue was discovered in the URI component through 0.12.0 in Ruby through 3.2.1. The URI parser mishandles invalid URLs that have specific characters. It causes an increase in execution time for parsing strings to URI objects. The fixed versions are 0.12.1, 0.11.1, 0.10.2 and 0.10.0.1.
CVSS Details
- CVSS 3.1 Base Score: 5.3
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade rubygem-xmlrpcUpgrade rubygem-power_assertUpgrade rubygems-develUpgrade rubygemsUpgrade rubygem-bigdecimalUpgrade rubygem-abrt-docUpgrade ruby-libsUpgrade rubygem-psychUpgrade rubygem-minitestUpgrade rubygem-typeprofUpgrade rubygem-bson-docUpgrade rubygem-net-telnetUpgrade rubygem-mongoUpgrade rubygem-test-unitUpgrade rubygem-io-consoleUpgrade rubygem-pgUpgrade rubygem-rbsUpgrade ruby-irbUpgrade rubygem-mysql2-docUpgrade rubygem-rdocUpgrade rubygem-irbUpgrade ruby-bundled-gemsUpgrade rubygem-mysql2Upgrade rubyUpgrade ruby-develUpgrade rubygem-bundlerUpgrade rubygem-pg-docUpgrade rubygem-mongo-docUpgrade rubygem-rakeUpgrade rubygem-opensslUpgrade ruby-docUpgrade rubygem-rssUpgrade rubygem-bundler-docUpgrade rubygem-abrtUpgrade rubygem-jsonUpgrade ruby-default-gemsUpgrade rubygem-rexmlUpgrade rubygem-did_you_meanUpgrade rubygem-bson | Jul 4, 2023 | Mar 31, 2023 |
| Alpine Linux | — | Upgrade ruby | Mar 26, 2024 | Mar 31, 2023 |
| Amazon Linux Ami 2 | — | Upgrade rubygem-rbsUpgrade rubygem-irbUpgrade rubyUpgrade rubygem-bigdecimalUpgrade rubygem-jsonUpgrade ruby-libsUpgrade rubygem-rexmlUpgrade rubygemsUpgrade ruby-docUpgrade rubygem-psychUpgrade rubygem-bundlerUpgrade rubygem-test-unitUpgrade rubygem-rssUpgrade ruby-default-gemsUpgrade ruby-debuginfoUpgrade rubygem-typeprofUpgrade rubygem-rakeUpgrade rubygem-rdocUpgrade rubygem-power_assertUpgrade rubygem-io-consoleUpgrade rubygem-minitestUpgrade rubygems-develUpgrade ruby-devel | Sep 28, 2023 | Mar 31, 2023 |
| Amazon_linux_2023 | — | Upgrade ruby3.2-rubygem-power_assertUpgrade ruby3.2-rubygem-io-console-debuginfoUpgrade ruby3.2-debugsourceUpgrade ruby3.2-rubygem-rexmlUpgrade ruby3.2-docUpgrade ruby3.2-rubygem-bigdecimal-debuginfoUpgrade ruby3.2-rubygemsUpgrade ruby3.2-debuginfoUpgrade ruby3.2-default-gemsUpgrade ruby3.2-libsUpgrade ruby3.2-rubygem-rssUpgrade ruby3.2-rubygem-psychUpgrade ruby3.2Upgrade ruby3.2-rubygem-test-unitUpgrade ruby3.2-develUpgrade ruby3.2-rubygem-bigdecimalUpgrade ruby3.2-rubygem-bundlerUpgrade ruby3.2-rubygem-psych-debuginfoUpgrade ruby3.2-rubygem-rdocUpgrade ruby3.2-rubygem-minitestUpgrade ruby3.2-rubygem-rbsUpgrade ruby3.2-rubygem-rbs-debuginfoUpgrade ruby3.2-rubygem-json-debuginfoUpgrade ruby3.2-rubygem-irbUpgrade ruby3.2-rubygem-io-consoleUpgrade ruby3.2-rubygem-jsonUpgrade ruby3.2-libs-debuginfoUpgrade ruby3.2-bundled-gems-debuginfoUpgrade ruby3.2-bundled-gemsUpgrade ruby3.2-rubygems-develUpgrade ruby3.2-rubygem-typeprofUpgrade ruby3.2-rubygem-rake | Feb 17, 2025 | Mar 21, 2023 |
| Centos_linux | — | Upgrade rubygem-bundler-docUpgrade rubygem-irbUpgrade rubygem-mysql2-docUpgrade rubygem-rdocUpgrade rubygem-test-unitUpgrade rubygem-opensslUpgrade ruby-debuginfoUpgrade ruby-develUpgrade ruby-docUpgrade rubygem-bundlerUpgrade rubygem-mysql2Upgrade rubygem-xmlrpcUpgrade ruby-irbUpgrade ruby-libs-debuginfoUpgrade rubygem-mysql2-debuginfoUpgrade rubygem-mongoUpgrade rubygem-psych-debuginfoUpgrade rubyUpgrade rubygem-mongo-docUpgrade rubygemsUpgrade rubygem-io-console-debuginfoUpgrade rubygem-power_assertUpgrade rubygem-pgUpgrade rubygem-minitestUpgrade ruby-default-gemsUpgrade rubygem-abrtUpgrade rubygem-pg-debugsourceUpgrade rubygem-pg-docUpgrade rubygem-bsonUpgrade rubygem-did_you_meanUpgrade rubygem-bigdecimal-debuginfoUpgrade rubygem-psychUpgrade rubygem-abrt-docUpgrade rubygem-jsonUpgrade rubygem-mysql2-debugsourceUpgrade rubygem-io-consoleUpgrade rubygem-rakeUpgrade rubygems-develUpgrade rubygem-openssl-debuginfoUpgrade ruby-debugsourceUpgrade rubygem-net-telnetUpgrade rubygem-bson-debuginfoUpgrade rubygem-bson-debugsourceUpgrade rubygem-bigdecimalUpgrade ruby-libsUpgrade rubygem-json-debuginfoUpgrade rubygem-bson-docUpgrade rubygem-pg-debuginfo | Jun 28, 2023 | Mar 31, 2023 |
| Debian | — | Upgrade ruby2.7Upgrade jrubyUpgrade rubygems | May 2, 2023 | Mar 31, 2023 |
| Dell Powerstore Dsa2024158 | — | Upgrade Dell PowerStoreOS to the latest version | Jan 13, 2026 | Apr 4, 2024 |
| Dell Powerstore Dsa2024225 | — | Upgrade Dell PowerStoreOS to the latest version | Oct 23, 2025 | May 29, 2024 |
| Freebsd | — | Upgrade ruby31Upgrade ruby27Upgrade rubyUpgrade ruby30Upgrade rubygem-uriUpgrade ruby32 | Apr 1, 2023 | Mar 30, 2023 |
| Gentoo Linux | — | Upgrade dev-lang/ruby. | Jan 25, 2024 | Mar 31, 2023 |
| Huawei Euleros 2_0_sp10 | — | Upgrade ruby-irbUpgrade ruby-helpUpgrade ruby | Jul 18, 2023 | Mar 31, 2023 |
| Huawei Euleros 2_0_sp11 | — | Upgrade ruby-irbUpgrade ruby-helpUpgrade ruby | Jan 10, 2024 | Mar 31, 2023 |
| Nutanix Ahv | — | Upgrade Nutanix AHV to the latest version | Jun 5, 2026 | Sep 22, 2023 |
| Oracle_linux | — | Upgrade rubygemsUpgrade ruby-libsUpgrade rubygem-bsonUpgrade rubygem-bundler-docUpgrade rubygem-rbsUpgrade rubygem-abrtUpgrade rubygem-net-telnetUpgrade rubygem-pgUpgrade rubygem-psychUpgrade rubygem-jsonUpgrade ruby-bundled-gemsUpgrade rubygem-rexmlUpgrade rubyUpgrade rubygem-bundlerUpgrade rubygem-rssUpgrade ruby-default-gemsUpgrade rubygem-opensslUpgrade rubygem-mongo-docUpgrade rubygem-rdocUpgrade rubygem-abrt-docUpgrade rubygem-xmlrpcUpgrade rubygem-mysql2Upgrade rubygem-did_you_meanUpgrade ruby-docUpgrade rubygem-test-unitUpgrade ruby-develUpgrade rubygem-pg-docUpgrade rubygem-rakeUpgrade rubygems-develUpgrade rubygem-bson-docUpgrade rubygem-mysql2-docUpgrade rubygem-power_assertUpgrade rubygem-mongoUpgrade ruby-irbUpgrade rubygem-minitestUpgrade rubygem-io-consoleUpgrade rubygem-irbUpgrade rubygem-typeprofUpgrade rubygem-bigdecimal | Jul 8, 2023 | Mar 21, 2023 |
| Redhat_linux | — | Upgrade rubygem-psychUpgrade rubygem-openssl-debuginfoUpgrade rubygem-bigdecimalUpgrade ruby-debugsourceUpgrade rubygems-develUpgrade rubygem-power_assertUpgrade rubygem-net-telnetUpgrade rubygem-bson-debugsourceUpgrade rubygem-rssUpgrade rubygem-typeprofUpgrade rubygem-bson-docUpgrade rubygem-bigdecimal-debuginfoUpgrade rubygem-minitestUpgrade rubygem-jsonUpgrade ruby-debuginfoUpgrade ruby-libsUpgrade rubygem-rbs-debuginfoUpgrade rubygem-bsonUpgrade rubygem-bson-debuginfoNo solution existsUpgrade rubygem-psych-debuginfoUpgrade rubygem-abrt-docUpgrade rubygem-mysql2-debugsourceUpgrade rubygemsUpgrade rubygem-json-debuginfoUpgrade rubygem-io-consoleUpgrade rubygem-mongoUpgrade rubygem-rakeUpgrade ruby-irbUpgrade ruby-libs-debuginfoUpgrade rubygem-xmlrpcUpgrade rubygem-irbUpgrade rubygem-pg-docUpgrade rubygem-mysql2-debuginfoUpgrade rubygem-bundlerUpgrade rubygem-rbsUpgrade rubygem-mysql2-docUpgrade rubygem-mongo-docUpgrade rubygem-io-console-debuginfoUpgrade rubygem-abrtUpgrade rubygem-rexmlUpgrade ruby-bundled-gems-debuginfoUpgrade ruby-default-gemsUpgrade rubygem-bundler-docUpgrade rubygem-rdocUpgrade rubygem-opensslUpgrade rubygem-test-unitUpgrade rubygem-did_you_meanUpgrade rubyUpgrade rubygem-pg-debugsourceUpgrade rubygem-pgUpgrade ruby-bundled-gemsUpgrade ruby-docUpgrade rubygem-pg-debuginfoUpgrade ruby-develUpgrade rubygem-mysql2 | Jun 28, 2023 | Mar 31, 2023 |
| Rocky_linux | — | Upgrade ruby-bundled-gemsUpgrade rubygem-mysql2Upgrade rubygem-json-debuginfoUpgrade ruby-debuginfoUpgrade rubygem-psychUpgrade rubygem-psych-debuginfoUpgrade ruby-libs-debuginfoUpgrade rubygem-openssl-debuginfoUpgrade rubygem-pg-debugsourceUpgrade rubygem-rbsUpgrade rubygem-mysql2-debugsourceUpgrade ruby-debugsourceUpgrade rubygem-bsonUpgrade rubygem-jsonUpgrade rubygem-pgUpgrade ruby-libsUpgrade rubygem-io-consoleUpgrade rubygem-bson-debuginfoUpgrade rubygem-io-console-debuginfoUpgrade rubygem-rbs-debuginfoUpgrade rubygem-bson-debugsourceUpgrade rubygem-opensslUpgrade rubyUpgrade rubygem-bigdecimalUpgrade rubygem-mysql2-debuginfoUpgrade rubygem-bigdecimal-debuginfoUpgrade ruby-bundled-gems-debuginfoUpgrade ruby-develUpgrade rubygem-pg-debuginfo | Mar 5, 2024 | Mar 31, 2023 |
| Suse | — | Upgrade ruby2.5-devel-extraUpgrade ruby2.5Upgrade ruby2.5-docUpgrade ruby2.5-develUpgrade libruby2_5-2_5Upgrade ruby2.5-doc-riUpgrade ruby2.5-stdlib | Oct 25, 2023 | Mar 31, 2023 |
| Ubuntu | — | Upgrade libruby2.5Upgrade ruby2.3 (Ubuntu Pro)Upgrade ruby-rubygemsUpgrade libruby2.3 (Ubuntu Pro)Upgrade ruby2.5Upgrade libruby3.1Upgrade ruby3.1Upgrade libruby2.7Upgrade ruby2.7 | May 5, 2023 | Mar 31, 2023 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Mar 31, 2023 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub