A ReDoS issue was discovered in the URI component through 0.12.0 in Ruby through 3.2.1. The URI parser mishandles invalid URLs that have specific characters. It causes an increase in execution time for parsing strings to URI objects. The fixed versions are 0.12.1, 0.11.1, 0.10.2 and 0.10.0.1.
CVSS Details
- CVSS 3.1 Base Score: 5.3
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade rubygem-pgUpgrade rubygem-bigdecimalUpgrade rubygem-typeprofUpgrade rubygem-xmlrpcUpgrade rubygemsUpgrade rubygem-abrt-docUpgrade rubygem-io-consoleUpgrade rubygem-bson-docUpgrade rubygems-develUpgrade rubygem-test-unitUpgrade rubygem-psychUpgrade ruby-libsUpgrade rubygem-minitestUpgrade rubygem-power_assertUpgrade rubygem-net-telnetUpgrade rubygem-mongoUpgrade rubygem-rakeUpgrade rubygem-abrtUpgrade rubygem-bundler-docUpgrade ruby-bundled-gemsUpgrade rubygem-opensslUpgrade ruby-default-gemsUpgrade rubygem-jsonUpgrade rubygem-irbUpgrade ruby-develUpgrade rubygem-bsonUpgrade rubygem-rexmlUpgrade rubygem-rssUpgrade rubygem-rbsUpgrade ruby-docUpgrade rubygem-mongo-docUpgrade rubygem-bundlerUpgrade rubygem-rdocUpgrade ruby-irbUpgrade rubygem-mysql2-docUpgrade rubyUpgrade rubygem-pg-docUpgrade rubygem-did_you_meanUpgrade rubygem-mysql2 | Jul 4, 2023 | Mar 31, 2023 |
| Alpine Linux | — | Upgrade ruby | Mar 26, 2024 | Mar 31, 2023 |
| Amazon Linux Ami 2 | — | Upgrade ruby-default-gemsUpgrade rubygem-psychUpgrade rubygem-test-unitUpgrade ruby-debuginfoUpgrade rubygemsUpgrade rubyUpgrade ruby-docUpgrade rubygem-bigdecimalUpgrade rubygem-jsonUpgrade rubygem-rbsUpgrade rubygem-rssUpgrade rubygem-irbUpgrade ruby-libsUpgrade rubygem-bundlerUpgrade rubygem-rexmlUpgrade rubygem-rakeUpgrade rubygem-typeprofUpgrade rubygem-rdocUpgrade rubygem-minitestUpgrade rubygem-io-consoleUpgrade ruby-develUpgrade rubygem-power_assertUpgrade rubygems-devel | Sep 28, 2023 | Mar 31, 2023 |
| Amazon_linux_2023 | — | Upgrade ruby3.2-rubygem-rakeUpgrade ruby3.2-rubygem-io-consoleUpgrade ruby3.2-rubygem-jsonUpgrade ruby3.2-bundled-gemsUpgrade ruby3.2-libs-debuginfoUpgrade ruby3.2-rubygems-develUpgrade ruby3.2-rubygem-rbs-debuginfoUpgrade ruby3.2-rubygem-typeprofUpgrade ruby3.2-rubygem-rbsUpgrade ruby3.2-rubygem-irbUpgrade ruby3.2-rubygem-json-debuginfoUpgrade ruby3.2-bundled-gems-debuginfoUpgrade ruby3.2-rubygem-rssUpgrade ruby3.2-rubygem-rdocUpgrade ruby3.2-docUpgrade ruby3.2-debugsourceUpgrade ruby3.2-rubygem-io-console-debuginfoUpgrade ruby3.2-rubygem-bundlerUpgrade ruby3.2-rubygem-test-unitUpgrade ruby3.2-rubygem-bigdecimalUpgrade ruby3.2-default-gemsUpgrade ruby3.2-develUpgrade ruby3.2-rubygem-bigdecimal-debuginfoUpgrade ruby3.2Upgrade ruby3.2-rubygem-power_assertUpgrade ruby3.2-debuginfoUpgrade ruby3.2-rubygem-rexmlUpgrade ruby3.2-rubygem-psych-debuginfoUpgrade ruby3.2-rubygem-minitestUpgrade ruby3.2-rubygemsUpgrade ruby3.2-libsUpgrade ruby3.2-rubygem-psych | Feb 17, 2025 | Mar 21, 2023 |
| Centos_linux | — | Upgrade rubygem-bigdecimalUpgrade rubygems-develUpgrade ruby-libsUpgrade ruby-debugsourceUpgrade rubygem-bson-docUpgrade rubygem-openssl-debuginfoUpgrade rubygem-bsonUpgrade rubygem-bigdecimal-debuginfoUpgrade rubygem-did_you_meanUpgrade rubygem-psychUpgrade rubygem-io-consoleUpgrade rubygem-jsonUpgrade rubygem-mysql2-debugsourceUpgrade rubygem-json-debuginfoUpgrade rubygem-abrt-docUpgrade rubygem-pg-debuginfoUpgrade rubygem-bson-debuginfoUpgrade rubygem-pg-docUpgrade rubygem-rakeUpgrade rubygem-net-telnetUpgrade rubygem-bson-debugsourceUpgrade rubygem-mysql2-docUpgrade rubygem-opensslUpgrade rubygem-psych-debuginfoUpgrade rubygem-mongoUpgrade rubygem-io-console-debuginfoUpgrade ruby-irbUpgrade ruby-debuginfoUpgrade rubygem-xmlrpcUpgrade rubygem-mysql2Upgrade rubygem-irbUpgrade rubygem-bundler-docUpgrade rubygem-bundlerUpgrade rubygem-mysql2-debuginfoUpgrade ruby-default-gemsUpgrade rubygem-pg-debugsourceUpgrade rubygem-abrtUpgrade rubygem-test-unitUpgrade ruby-docUpgrade rubygem-rdocUpgrade rubyUpgrade ruby-libs-debuginfoUpgrade rubygemsUpgrade rubygem-mongo-docUpgrade rubygem-minitestUpgrade ruby-develUpgrade rubygem-power_assertUpgrade rubygem-pg | Jun 28, 2023 | Mar 31, 2023 |
| Debian | — | Upgrade jrubyUpgrade rubygemsUpgrade ruby2.7 | May 2, 2023 | Mar 31, 2023 |
| Dell Powerstore Dsa2024158 | — | Upgrade Dell PowerStoreOS to the latest version | Jan 13, 2026 | Apr 4, 2024 |
| Dell Powerstore Dsa2024225 | — | Upgrade Dell PowerStoreOS to the latest version | Oct 23, 2025 | May 29, 2024 |
| Freebsd | — | Upgrade ruby27Upgrade rubyUpgrade ruby31Upgrade ruby30Upgrade rubygem-uriUpgrade ruby32 | Apr 1, 2023 | Mar 30, 2023 |
| Gentoo Linux | — | Upgrade dev-lang/ruby. | Jan 25, 2024 | Mar 31, 2023 |
| Huawei Euleros 2_0_sp10 | — | Upgrade ruby-helpUpgrade ruby-irbUpgrade ruby | Jul 18, 2023 | Mar 31, 2023 |
| Huawei Euleros 2_0_sp11 | — | Upgrade rubyUpgrade ruby-irbUpgrade ruby-help | Jan 10, 2024 | Mar 31, 2023 |
| Nutanix Ahv | — | Upgrade Nutanix AHV to the latest version | Jun 5, 2026 | Sep 22, 2023 |
| Oracle_linux | — | Upgrade ruby-irbUpgrade rubygem-bigdecimalUpgrade rubygem-mongoUpgrade rubygem-power_assertUpgrade rubygem-bson-docUpgrade rubygem-rakeUpgrade rubygems-develUpgrade rubygem-mysql2-docUpgrade rubygem-pg-docUpgrade rubygem-typeprofUpgrade ruby-develUpgrade rubygem-io-consoleUpgrade rubygem-minitestUpgrade rubygem-irbUpgrade rubygem-bundlerUpgrade rubygem-pgUpgrade rubygem-mysql2Upgrade rubygem-opensslUpgrade rubygem-rbsUpgrade rubygem-psychUpgrade ruby-docUpgrade rubygem-abrtUpgrade ruby-libsUpgrade rubygem-bundler-docUpgrade ruby-bundled-gemsUpgrade rubygem-rssUpgrade rubygem-xmlrpcUpgrade rubygem-rdocUpgrade rubygem-jsonUpgrade rubygem-did_you_meanUpgrade rubygem-bsonUpgrade rubyUpgrade ruby-default-gemsUpgrade rubygem-test-unitUpgrade rubygem-abrt-docUpgrade rubygem-rexmlUpgrade rubygem-mongo-docUpgrade rubygemsUpgrade rubygem-net-telnet | Jul 8, 2023 | Mar 21, 2023 |
| Redhat_linux | — | Upgrade rubygem-mysql2Upgrade ruby-docUpgrade rubygem-pg-debuginfoUpgrade rubygem-bundler-docUpgrade ruby-default-gemsUpgrade ruby-develUpgrade ruby-bundled-gemsUpgrade rubygem-rakeUpgrade rubygem-pg-docUpgrade rubygem-irbUpgrade rubygem-mysql2-debuginfoUpgrade rubygem-did_you_meanUpgrade rubygem-xmlrpcUpgrade rubygem-rdocUpgrade rubygem-io-console-debuginfoUpgrade rubyUpgrade rubygem-test-unitUpgrade rubygem-opensslUpgrade rubygem-mongo-docUpgrade ruby-bundled-gems-debuginfoUpgrade ruby-irbUpgrade rubygem-pg-debugsourceUpgrade rubygem-pgUpgrade rubygem-mysql2-docUpgrade rubygem-rbsUpgrade rubygem-rexmlUpgrade rubygem-abrtUpgrade rubygem-bundlerUpgrade ruby-libs-debuginfoUpgrade rubygem-power_assertUpgrade rubygem-bson-docUpgrade rubygem-typeprofUpgrade rubygem-minitestUpgrade rubygem-jsonUpgrade rubygem-psych-debuginfoUpgrade rubygems-develUpgrade rubygem-mongoUpgrade rubygem-rssUpgrade ruby-debuginfoUpgrade rubygem-mysql2-debugsourceUpgrade rubygem-json-debuginfoUpgrade rubygem-rbs-debuginfoNo solution existsUpgrade rubygem-bson-debuginfoUpgrade rubygem-abrt-docUpgrade rubygemsUpgrade rubygem-bigdecimal-debuginfoUpgrade ruby-debugsourceUpgrade ruby-libsUpgrade rubygem-net-telnetUpgrade rubygem-openssl-debuginfoUpgrade rubygem-psychUpgrade rubygem-bson-debugsourceUpgrade rubygem-bigdecimalUpgrade rubygem-io-consoleUpgrade rubygem-bson | Jun 28, 2023 | Mar 31, 2023 |
| Rocky_linux | — | Upgrade rubygem-bson-debugsourceUpgrade ruby-bundled-gems-debuginfoUpgrade rubygem-bigdecimalUpgrade rubygem-mysql2-debuginfoUpgrade rubygem-io-console-debuginfoUpgrade rubygem-opensslUpgrade rubygem-bigdecimal-debuginfoUpgrade ruby-develUpgrade rubygem-io-consoleUpgrade rubygem-bson-debuginfoUpgrade rubyUpgrade rubygem-rbs-debuginfoUpgrade rubygem-pg-debuginfoUpgrade ruby-libs-debuginfoUpgrade ruby-bundled-gemsUpgrade rubygem-json-debuginfoUpgrade rubygem-bsonUpgrade ruby-libsUpgrade ruby-debuginfoUpgrade rubygem-mysql2Upgrade rubygem-jsonUpgrade rubygem-openssl-debuginfoUpgrade rubygem-psychUpgrade rubygem-pgUpgrade ruby-debugsourceUpgrade rubygem-rbsUpgrade rubygem-psych-debuginfoUpgrade rubygem-pg-debugsourceUpgrade rubygem-mysql2-debugsource | Mar 5, 2024 | Mar 31, 2023 |
| Suse | — | Upgrade ruby2.5Upgrade ruby2.5-docUpgrade ruby2.5-devel-extraUpgrade ruby2.5-develUpgrade libruby2_5-2_5Upgrade ruby2.5-stdlibUpgrade ruby2.5-doc-ri | Oct 25, 2023 | Mar 31, 2023 |
| Ubuntu | — | Upgrade ruby3.1Upgrade libruby3.1Upgrade ruby2.7Upgrade libruby2.3 (Ubuntu Pro)Upgrade ruby2.5Upgrade libruby2.7Upgrade libruby2.5Upgrade ruby2.3 (Ubuntu Pro)Upgrade ruby-rubygems | May 5, 2023 | Mar 31, 2023 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Mar 31, 2023 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub