A ReDoS issue was discovered in the Time component through 0.2.1 in Ruby through 3.2.1. The Time parser mishandles invalid URLs that have specific characters. It causes an increase in execution time for parsing strings to Time objects. The fixed versions are 0.1.1 and 0.2.2.
CVSS Details
- CVSS 3.1 Base Score: 5.3
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade rubygem-mongo-docUpgrade rubygem-bson-docUpgrade rubygems-develUpgrade rubygem-xmlrpcUpgrade rubygem-did_you_meanUpgrade ruby-libsUpgrade rubygem-bigdecimalUpgrade rubygem-rakeUpgrade rubygem-test-unitUpgrade ruby-docUpgrade rubygem-rssUpgrade rubygem-rexmlUpgrade ruby-irbUpgrade rubygem-bsonUpgrade rubygem-io-consoleUpgrade ruby-default-gemsUpgrade rubygem-bundler-docUpgrade rubygem-bundlerUpgrade rubygem-rbsUpgrade rubygem-pg-docUpgrade rubygem-abrt-docUpgrade rubygem-power_assertUpgrade rubygem-pgUpgrade ruby-bundled-gemsUpgrade rubygem-net-telnetUpgrade ruby-develUpgrade rubygem-abrtUpgrade rubygem-rdocUpgrade rubygem-minitestUpgrade rubygemsUpgrade rubygem-typeprofUpgrade rubygem-mongoUpgrade rubygem-opensslUpgrade rubygem-mysql2-docUpgrade rubygem-mysql2Upgrade rubygem-jsonUpgrade rubygem-psychUpgrade rubygem-irbUpgrade ruby | Jul 4, 2023 | Mar 31, 2023 |
| Alpine Linux | — | Upgrade ruby | Mar 26, 2024 | Mar 31, 2023 |
| Amazon Linux Ami 2 | — | Upgrade rubygem-typeprofUpgrade rubygems-develUpgrade ruby-tcltkUpgrade rubygem-io-consoleUpgrade ruby-libsUpgrade rubygem-bigdecimalUpgrade rubygem-rssUpgrade rubygem-rakeUpgrade rubygem-jsonUpgrade rubygem-rexmlUpgrade rubygem-psychUpgrade ruby-docUpgrade rubygem-rbsUpgrade rubygemsUpgrade rubygem-irbUpgrade rubygem-rdocUpgrade ruby-develUpgrade rubygem-bundlerUpgrade rubygem-power_assertUpgrade rubyUpgrade ruby-irbUpgrade ruby-default-gemsUpgrade rubygem-test-unitUpgrade ruby-debuginfoUpgrade rubygem-minitest | Jun 13, 2023 | Mar 31, 2023 |
| Amazon_linux_2023 | — | Upgrade ruby3.2-rubygem-bigdecimalUpgrade ruby3.2-rubygem-rbsUpgrade ruby3.2-rubygem-rexmlUpgrade ruby3.2-rubygems-develUpgrade ruby3.2-debuginfoUpgrade ruby3.2-rubygem-power_assertUpgrade ruby3.2Upgrade ruby3.2-rubygem-typeprofUpgrade ruby3.2-rubygem-rbs-debuginfoUpgrade ruby3.2-develUpgrade ruby3.2-rubygem-rdocUpgrade ruby3.2-rubygem-jsonUpgrade ruby3.2-rubygem-psych-debuginfoUpgrade ruby3.2-rubygem-bigdecimal-debuginfoUpgrade ruby3.2-rubygem-irbUpgrade ruby3.2-libs-debuginfoUpgrade ruby3.2-bundled-gems-debuginfoUpgrade ruby3.2-docUpgrade ruby3.2-rubygem-rssUpgrade ruby3.2-rubygem-bundlerUpgrade ruby3.2-rubygem-io-console-debuginfoUpgrade ruby3.2-rubygem-io-consoleUpgrade ruby3.2-debugsourceUpgrade ruby3.2-rubygem-psychUpgrade ruby3.2-rubygem-json-debuginfoUpgrade ruby3.2-rubygem-minitestUpgrade ruby3.2-libsUpgrade ruby3.2-rubygem-test-unitUpgrade ruby3.2-rubygemsUpgrade ruby3.2-bundled-gemsUpgrade ruby3.2-rubygem-rakeUpgrade ruby3.2-default-gems | Feb 17, 2025 | Mar 21, 2023 |
| Centos_linux | — | Upgrade rubygem-io-console-debuginfoUpgrade ruby-debuginfoUpgrade ruby-docUpgrade rubygem-abrtUpgrade rubygem-test-unitUpgrade rubyUpgrade ruby-develUpgrade rubygem-jsonUpgrade rubygem-bson-debuginfoUpgrade rubygem-irbUpgrade rubygem-pg-debuginfoUpgrade ruby-irbUpgrade rubygem-bundlerUpgrade rubygem-mysql2-debuginfoUpgrade rubygem-pg-debugsourceUpgrade rubygem-rakeUpgrade rubygem-mysql2-debugsourceUpgrade rubygem-bigdecimalUpgrade rubygem-mysql2-docUpgrade rubygem-mysql2Upgrade rubygem-xmlrpcUpgrade rubygem-did_you_meanUpgrade rubygem-mongo-docUpgrade rubygem-bsonUpgrade rubygem-openssl-debuginfoUpgrade rubygem-io-consoleUpgrade rubygem-psych-debuginfoUpgrade rubygemsUpgrade rubygem-bigdecimal-debuginfoUpgrade rubygem-power_assertUpgrade rubygem-bson-debugsourceUpgrade rubygem-psychUpgrade rubygem-pg-docUpgrade rubygem-abrt-docUpgrade rubygem-opensslUpgrade rubygem-bundler-docUpgrade ruby-libsUpgrade ruby-debugsourceUpgrade ruby-libs-debuginfoUpgrade rubygem-json-debuginfoUpgrade rubygems-develUpgrade rubygem-bson-docUpgrade ruby-default-gemsUpgrade rubygem-mongoUpgrade rubygem-minitestUpgrade rubygem-rdocUpgrade rubygem-pgUpgrade rubygem-net-telnet | Jun 28, 2023 | Mar 31, 2023 |
| Debian | — | Upgrade jrubyUpgrade ruby2.7 | May 2, 2023 | Mar 31, 2023 |
| Dell Powerstore Dsa2024158 | — | Upgrade Dell PowerStoreOS to the latest version | Jan 13, 2026 | Apr 4, 2024 |
| Dell Powerstore Dsa2024225 | — | Upgrade Dell PowerStoreOS to the latest version | Oct 23, 2025 | May 29, 2024 |
| Freebsd | — | Upgrade ruby27Upgrade ruby31Upgrade ruby30Upgrade rubygem-timeUpgrade rubyUpgrade ruby32 | Apr 1, 2023 | Mar 30, 2023 |
| Gentoo Linux | — | Upgrade dev-lang/ruby. | Jan 25, 2024 | Mar 31, 2023 |
| Huawei Euleros 2_0_sp10 | — | Upgrade ruby-helpUpgrade ruby-irbUpgrade ruby | May 9, 2023 | Mar 31, 2023 |
| Huawei Euleros 2_0_sp11 | — | Upgrade ruby-irbUpgrade ruby-helpUpgrade ruby | Jan 10, 2024 | Mar 31, 2023 |
| Huawei Euleros 2_0_sp9 | — | Upgrade rubyUpgrade ruby-helpUpgrade ruby-irb | Jul 10, 2023 | Mar 31, 2023 |
| Nutanix Ahv | — | Upgrade Nutanix AHV to the latest version | Jun 5, 2026 | Sep 22, 2023 |
| Oracle_linux | — | Upgrade rubygem-bundlerUpgrade rubygem-mongo-docUpgrade rubygem-rexmlUpgrade rubygem-abrtUpgrade rubygem-bigdecimalUpgrade ruby-irbUpgrade rubygem-mysql2Upgrade ruby-docUpgrade rubygem-io-consoleUpgrade rubygem-rakeUpgrade rubygem-did_you_meanUpgrade rubygem-pg-docUpgrade rubyUpgrade ruby-develUpgrade rubygem-irbUpgrade rubygem-rbsUpgrade ruby-bundled-gemsUpgrade rubygem-mysql2-docUpgrade rubygem-bsonUpgrade rubygem-opensslUpgrade rubygem-net-telnetUpgrade rubygem-mongoUpgrade rubygem-rssUpgrade rubygem-psychUpgrade ruby-libsUpgrade rubygem-jsonUpgrade rubygemsUpgrade rubygem-typeprofUpgrade rubygem-test-unitUpgrade rubygems-develUpgrade rubygem-xmlrpcUpgrade rubygem-pgUpgrade rubygem-power_assertUpgrade rubygem-bson-docUpgrade ruby-default-gemsUpgrade rubygem-bundler-docUpgrade rubygem-minitestUpgrade rubygem-abrt-docUpgrade rubygem-rdoc | Jul 8, 2023 | Mar 21, 2023 |
| Redhat_linux | — | Upgrade ruby-libsUpgrade ruby-debugsourceUpgrade rubygem-irbUpgrade rubygem-mysql2-debugsourceUpgrade rubygem-bson-debugsourceUpgrade rubygem-pg-debuginfoUpgrade rubyUpgrade rubygem-bundlerUpgrade rubygem-net-telnetUpgrade rubygem-pg-docUpgrade rubygem-typeprofUpgrade rubygem-abrt-docUpgrade rubygem-rbsUpgrade ruby-docUpgrade rubygem-abrtUpgrade rubygem-jsonUpgrade rubygem-mysql2Upgrade rubygem-io-consoleUpgrade rubygem-minitestUpgrade rubygem-bson-debuginfoUpgrade rubygem-pg-debugsourceUpgrade rubygem-bigdecimal-debuginfoNo solution existsUpgrade rubygem-rakeUpgrade rubygem-power_assertUpgrade ruby-irbUpgrade rubygem-psychUpgrade rubygem-rssUpgrade rubygem-openssl-debuginfoUpgrade ruby-bundled-gemsUpgrade rubygem-bsonUpgrade rubygem-bigdecimalUpgrade rubygem-mongoUpgrade rubygem-xmlrpcUpgrade ruby-develUpgrade rubygem-opensslUpgrade rubygems-develUpgrade ruby-default-gemsUpgrade ruby-debuginfoUpgrade rubygem-pgUpgrade rubygem-rbs-debuginfoUpgrade rubygem-rdocUpgrade rubygem-bson-docUpgrade ruby-bundled-gems-debuginfoUpgrade ruby-libs-debuginfoUpgrade rubygem-test-unitUpgrade rubygem-psych-debuginfoUpgrade rubygem-bundler-docUpgrade rubygem-mongo-docUpgrade rubygem-did_you_meanUpgrade rubygem-mysql2-docUpgrade rubygem-rexmlUpgrade rubygem-json-debuginfoUpgrade rubygem-io-console-debuginfoUpgrade rubygem-mysql2-debuginfoUpgrade rubygems | Jun 28, 2023 | Mar 31, 2023 |
| Rocky_linux | — | Upgrade rubygem-pg-debugsourceUpgrade rubygem-psych-debuginfoUpgrade ruby-libs-debuginfoUpgrade rubyUpgrade ruby-develUpgrade rubygem-io-console-debuginfoUpgrade rubygem-mysql2-debuginfoUpgrade rubygem-opensslUpgrade ruby-bundled-gems-debuginfoUpgrade rubygem-pgUpgrade rubygem-rbsUpgrade rubygem-mysql2Upgrade rubygem-json-debuginfoUpgrade rubygem-bson-debugsourceUpgrade rubygem-rbs-debuginfoUpgrade rubygem-jsonUpgrade rubygem-bigdecimal-debuginfoUpgrade ruby-debuginfoUpgrade rubygem-pg-debuginfoUpgrade rubygem-psychUpgrade rubygem-bigdecimalUpgrade ruby-libsUpgrade ruby-debugsourceUpgrade rubygem-bsonUpgrade ruby-bundled-gemsUpgrade rubygem-io-consoleUpgrade rubygem-openssl-debuginfoUpgrade rubygem-mysql2-debugsourceUpgrade rubygem-bson-debuginfo | Mar 5, 2024 | Mar 31, 2023 |
| Suse | — | Upgrade libruby2_5-2_5Upgrade ruby2.5-devel-extraUpgrade ruby2.5-stdlibUpgrade ruby2.5-doc-riUpgrade ruby2.5-docUpgrade ruby2.5-develUpgrade ruby2.5 | Oct 25, 2023 | Mar 31, 2023 |
| Ubuntu | — | Upgrade ruby3.1Upgrade libruby2.7Upgrade ruby2.5Upgrade libruby2.3 (Ubuntu Pro)Upgrade libruby2.5Upgrade ruby2.3 (Ubuntu Pro)Upgrade ruby2.7Upgrade libruby3.1 | May 5, 2023 | Mar 31, 2023 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Mar 31, 2023 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub