A ReDoS issue was discovered in the Time component through 0.2.1 in Ruby through 3.2.1. The Time parser mishandles invalid URLs that have specific characters. It causes an increase in execution time for parsing strings to Time objects. The fixed versions are 0.1.1 and 0.2.2.
CVSS Details
- CVSS 3.1 Base Score: 5.3
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade rubygem-bigdecimalUpgrade rubygem-bsonUpgrade rubygem-io-consoleUpgrade rubygem-rakeUpgrade rubygem-bson-docUpgrade rubygems-develUpgrade rubygem-xmlrpcUpgrade ruby-docUpgrade ruby-libsUpgrade rubygem-rexmlUpgrade ruby-irbUpgrade rubygem-mongo-docUpgrade rubygem-did_you_meanUpgrade rubygem-rssUpgrade rubygem-test-unitUpgrade rubygem-bundler-docUpgrade rubygem-mongoUpgrade ruby-develUpgrade rubygem-mysql2Upgrade rubygem-net-telnetUpgrade rubygemsUpgrade rubygem-mysql2-docUpgrade rubygem-rdocUpgrade rubygem-opensslUpgrade ruby-default-gemsUpgrade rubygem-psychUpgrade rubygem-irbUpgrade rubyUpgrade rubygem-pgUpgrade rubygem-minitestUpgrade rubygem-abrtUpgrade rubygem-typeprofUpgrade rubygem-rbsUpgrade rubygem-bundlerUpgrade rubygem-pg-docUpgrade rubygem-abrt-docUpgrade rubygem-jsonUpgrade ruby-bundled-gemsUpgrade rubygem-power_assert | Jul 4, 2023 | Mar 31, 2023 |
| Alpine Linux | — | Upgrade ruby | Mar 26, 2024 | Mar 31, 2023 |
| Amazon Linux Ami 2 | — | Upgrade ruby-tcltkUpgrade rubygem-jsonUpgrade rubygem-rakeUpgrade rubygem-bigdecimalUpgrade rubygem-typeprofUpgrade rubygem-psychUpgrade ruby-libsUpgrade rubygem-io-consoleUpgrade rubygems-develUpgrade rubygem-rssUpgrade rubygem-rexmlUpgrade rubygem-irbUpgrade rubyUpgrade ruby-default-gemsUpgrade rubygem-power_assertUpgrade rubygemsUpgrade ruby-docUpgrade ruby-irbUpgrade rubygem-rdocUpgrade ruby-develUpgrade rubygem-rbsUpgrade ruby-debuginfoUpgrade rubygem-test-unitUpgrade rubygem-minitestUpgrade rubygem-bundler | Jun 13, 2023 | Mar 31, 2023 |
| Amazon_linux_2023 | — | Upgrade ruby3.2-libsUpgrade ruby3.2-default-gemsUpgrade ruby3.2-rubygem-minitestUpgrade ruby3.2-bundled-gems-debuginfoUpgrade ruby3.2-rubygem-json-debuginfoUpgrade ruby3.2-debugsourceUpgrade ruby3.2-rubygemsUpgrade ruby3.2-rubygem-test-unitUpgrade ruby3.2-rubygem-io-console-debuginfoUpgrade ruby3.2-rubygem-irbUpgrade ruby3.2-rubygem-io-consoleUpgrade ruby3.2-rubygem-bigdecimal-debuginfoUpgrade ruby3.2-bundled-gemsUpgrade ruby3.2-docUpgrade ruby3.2-libs-debuginfoUpgrade ruby3.2-rubygem-rakeUpgrade ruby3.2-rubygem-bundlerUpgrade ruby3.2-rubygem-psychUpgrade ruby3.2-rubygem-rssUpgrade ruby3.2-rubygems-develUpgrade ruby3.2-rubygem-rexmlUpgrade ruby3.2-rubygem-typeprofUpgrade ruby3.2Upgrade ruby3.2-rubygem-rbsUpgrade ruby3.2-debuginfoUpgrade ruby3.2-rubygem-power_assertUpgrade ruby3.2-rubygem-rdocUpgrade ruby3.2-rubygem-psych-debuginfoUpgrade ruby3.2-rubygem-bigdecimalUpgrade ruby3.2-rubygem-jsonUpgrade ruby3.2-develUpgrade ruby3.2-rubygem-rbs-debuginfo | Feb 17, 2025 | Mar 21, 2023 |
| Centos_linux | — | Upgrade ruby-default-gemsUpgrade rubygem-opensslUpgrade ruby-libsUpgrade rubygem-mongoUpgrade rubygemsUpgrade rubygem-bundler-docUpgrade rubygem-minitestUpgrade rubygem-bson-docUpgrade rubygem-pgUpgrade ruby-debugsourceUpgrade rubygem-pg-docUpgrade rubygem-abrt-docUpgrade rubygem-power_assertUpgrade rubygem-net-telnetUpgrade rubygem-rdocUpgrade ruby-libs-debuginfoUpgrade rubygem-bigdecimal-debuginfoUpgrade rubygem-json-debuginfoUpgrade rubygem-bson-debugsourceUpgrade rubygem-psych-debuginfoUpgrade rubygems-develUpgrade rubygem-psychUpgrade rubygem-bundlerUpgrade rubygem-mysql2Upgrade rubygem-did_you_meanUpgrade rubygem-irbUpgrade rubygem-abrtUpgrade rubygem-io-console-debuginfoUpgrade rubygem-pg-debugsourceUpgrade rubygem-test-unitUpgrade rubygem-mysql2-docUpgrade rubygem-mongo-docUpgrade rubygem-pg-debuginfoUpgrade rubygem-xmlrpcUpgrade ruby-develUpgrade rubygem-rakeUpgrade rubygem-jsonUpgrade ruby-irbUpgrade rubygem-mysql2-debuginfoUpgrade rubygem-bsonUpgrade rubygem-io-consoleUpgrade rubygem-openssl-debuginfoUpgrade rubygem-bigdecimalUpgrade rubygem-bson-debuginfoUpgrade ruby-docUpgrade ruby-debuginfoUpgrade rubygem-mysql2-debugsourceUpgrade ruby | Jun 28, 2023 | Mar 31, 2023 |
| Debian | — | Upgrade jrubyUpgrade ruby2.7 | May 2, 2023 | Mar 31, 2023 |
| Dell Powerstore Dsa2024158 | — | Upgrade Dell PowerStoreOS to the latest version | Jan 13, 2026 | Apr 4, 2024 |
| Dell Powerstore Dsa2024225 | — | Upgrade Dell PowerStoreOS to the latest version | Oct 23, 2025 | May 29, 2024 |
| Freebsd | — | Upgrade ruby27Upgrade ruby31Upgrade ruby30Upgrade rubyUpgrade ruby32Upgrade rubygem-time | Apr 1, 2023 | Mar 30, 2023 |
| Gentoo Linux | — | Upgrade dev-lang/ruby. | Jan 25, 2024 | Mar 31, 2023 |
| Huawei Euleros 2_0_sp10 | — | Upgrade rubyUpgrade ruby-helpUpgrade ruby-irb | May 9, 2023 | Mar 31, 2023 |
| Huawei Euleros 2_0_sp11 | — | Upgrade ruby-irbUpgrade ruby-helpUpgrade ruby | Jan 10, 2024 | Mar 31, 2023 |
| Huawei Euleros 2_0_sp9 | — | Upgrade ruby-irbUpgrade ruby-helpUpgrade ruby | Jul 10, 2023 | Mar 31, 2023 |
| Nutanix Ahv | — | Upgrade Nutanix AHV to the latest version | Jun 5, 2026 | Sep 22, 2023 |
| Oracle_linux | — | Upgrade rubygem-abrt-docUpgrade rubygems-develUpgrade rubygem-pgUpgrade rubygem-jsonUpgrade rubygem-xmlrpcUpgrade rubygemsUpgrade rubygem-mysql2-docUpgrade rubygem-bsonUpgrade rubygem-bson-docUpgrade rubygem-opensslUpgrade rubygem-minitestUpgrade rubygem-rdocUpgrade rubygem-power_assertUpgrade rubygem-rssUpgrade rubygem-mongoUpgrade rubygem-psychUpgrade ruby-libsUpgrade rubygem-bundler-docUpgrade ruby-bundled-gemsUpgrade rubygem-net-telnetUpgrade ruby-default-gemsUpgrade rubygem-typeprofUpgrade rubygem-test-unitUpgrade ruby-irbUpgrade rubygem-rexmlUpgrade ruby-develUpgrade rubyUpgrade ruby-docUpgrade rubygem-irbUpgrade rubygem-rbsUpgrade rubygem-rakeUpgrade rubygem-abrtUpgrade rubygem-did_you_meanUpgrade rubygem-pg-docUpgrade rubygem-bigdecimalUpgrade rubygem-bundlerUpgrade rubygem-mongo-docUpgrade rubygem-mysql2Upgrade rubygem-io-console | Jul 8, 2023 | Mar 21, 2023 |
| Redhat_linux | — | Upgrade ruby-develUpgrade rubygem-test-unitUpgrade rubygem-opensslUpgrade rubygem-xmlrpcUpgrade rubygem-mysql2-docUpgrade rubygem-json-debuginfoUpgrade rubygems-develUpgrade rubygem-rbs-debuginfoUpgrade ruby-libs-debuginfoUpgrade rubygem-bundler-docUpgrade rubygem-psych-debuginfoUpgrade rubygem-pgUpgrade rubygemsUpgrade rubygem-mysql2-debuginfoUpgrade rubygem-io-console-debuginfoUpgrade rubygem-mongo-docUpgrade ruby-debuginfoUpgrade ruby-default-gemsUpgrade ruby-bundled-gems-debuginfoUpgrade rubygem-rdocUpgrade rubygem-rexmlUpgrade rubygem-did_you_meanUpgrade rubygem-bson-docUpgrade rubygem-bundlerUpgrade rubygem-bson-debugsourceUpgrade rubygem-rakeUpgrade rubygem-psychUpgrade ruby-libsUpgrade rubygem-jsonUpgrade rubygem-pg-debuginfoUpgrade rubygem-irbUpgrade ruby-bundled-gemsUpgrade rubyUpgrade rubygem-bigdecimal-debuginfoNo solution existsUpgrade rubygem-typeprofUpgrade rubygem-pg-debugsourceUpgrade rubygem-abrtUpgrade rubygem-openssl-debuginfoUpgrade rubygem-mongoUpgrade rubygem-bigdecimalUpgrade rubygem-bsonUpgrade rubygem-net-telnetUpgrade rubygem-rbsUpgrade ruby-debugsourceUpgrade ruby-irbUpgrade rubygem-abrt-docUpgrade rubygem-mysql2-debugsourceUpgrade rubygem-bson-debuginfoUpgrade rubygem-minitestUpgrade rubygem-io-consoleUpgrade rubygem-power_assertUpgrade rubygem-rssUpgrade ruby-docUpgrade rubygem-pg-docUpgrade rubygem-mysql2 | Jun 28, 2023 | Mar 31, 2023 |
| Rocky_linux | — | Upgrade rubygem-opensslUpgrade rubygem-pg-debugsourceUpgrade rubygem-mysql2Upgrade ruby-bundled-gems-debuginfoUpgrade rubygem-io-console-debuginfoUpgrade rubyUpgrade ruby-develUpgrade rubygem-mysql2-debuginfoUpgrade rubygem-psych-debuginfoUpgrade ruby-libs-debuginfoUpgrade rubygem-pgUpgrade rubygem-rbsUpgrade ruby-debugsourceUpgrade ruby-debuginfoUpgrade rubygem-bson-debugsourceUpgrade ruby-libsUpgrade rubygem-mysql2-debugsourceUpgrade rubygem-pg-debuginfoUpgrade rubygem-psychUpgrade rubygem-rbs-debuginfoUpgrade rubygem-openssl-debuginfoUpgrade rubygem-bson-debuginfoUpgrade ruby-bundled-gemsUpgrade rubygem-io-consoleUpgrade rubygem-json-debuginfoUpgrade rubygem-bigdecimalUpgrade rubygem-bigdecimal-debuginfoUpgrade rubygem-jsonUpgrade rubygem-bson | Mar 5, 2024 | Mar 31, 2023 |
| Suse | — | Upgrade ruby2.5-docUpgrade ruby2.5Upgrade ruby2.5-develUpgrade ruby2.5-devel-extraUpgrade ruby2.5-doc-riUpgrade libruby2_5-2_5Upgrade ruby2.5-stdlib | Oct 25, 2023 | Mar 31, 2023 |
| Ubuntu | — | Upgrade ruby2.7Upgrade libruby3.1Upgrade ruby2.3 (Ubuntu Pro)Upgrade libruby2.5Upgrade ruby2.5Upgrade libruby2.3 (Ubuntu Pro)Upgrade ruby3.1Upgrade libruby2.7 | May 5, 2023 | Mar 31, 2023 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Mar 31, 2023 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub