A ReDoS issue was discovered in the Time component through 0.2.1 in Ruby through 3.2.1. The Time parser mishandles invalid URLs that have specific characters. It causes an increase in execution time for parsing strings to Time objects. The fixed versions are 0.1.1 and 0.2.2.
CVSS Details
- CVSS 3.1 Base Score: 5.3
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade ruby-irbUpgrade ruby-docUpgrade rubygem-mongo-docUpgrade rubygem-io-consoleUpgrade rubygems-develUpgrade rubygem-rssUpgrade rubygem-xmlrpcUpgrade rubygem-bson-docUpgrade rubygem-rakeUpgrade rubygem-bsonUpgrade rubygem-rexmlUpgrade ruby-libsUpgrade rubygem-bigdecimalUpgrade rubygem-test-unitUpgrade rubygem-did_you_meanUpgrade rubygem-rdocUpgrade rubygem-rbsUpgrade ruby-default-gemsUpgrade rubygem-minitestUpgrade rubygem-mysql2-docUpgrade rubygem-bundler-docUpgrade rubygem-power_assertUpgrade rubygem-bundlerUpgrade rubygem-typeprofUpgrade rubygem-net-telnetUpgrade rubygemsUpgrade rubygem-irbUpgrade rubygem-jsonUpgrade rubygem-pgUpgrade rubygem-abrt-docUpgrade ruby-develUpgrade rubygem-pg-docUpgrade ruby-bundled-gemsUpgrade rubygem-mysql2Upgrade rubygem-psychUpgrade rubygem-opensslUpgrade rubygem-abrtUpgrade rubyUpgrade rubygem-mongo | Jul 4, 2023 | Mar 31, 2023 |
| Alpine Linux | — | Upgrade ruby | Mar 26, 2024 | Mar 31, 2023 |
| Amazon Linux Ami 2 | — | Upgrade rubygem-bigdecimalUpgrade rubygem-rexmlUpgrade ruby-tcltkUpgrade rubygem-io-consoleUpgrade rubygem-typeprofUpgrade ruby-libsUpgrade rubygem-psychUpgrade rubygem-rakeUpgrade rubygems-develUpgrade rubygem-jsonUpgrade rubygem-rssUpgrade rubygem-minitestUpgrade ruby-docUpgrade ruby-irbUpgrade rubygem-irbUpgrade rubygem-rbsUpgrade rubygem-power_assertUpgrade rubygem-test-unitUpgrade ruby-develUpgrade rubygem-bundlerUpgrade rubygem-rdocUpgrade rubyUpgrade rubygemsUpgrade ruby-debuginfoUpgrade ruby-default-gems | Jun 13, 2023 | Mar 31, 2023 |
| Amazon_linux_2023 | — | Upgrade ruby3.2-rubygem-jsonUpgrade ruby3.2-rubygem-psych-debuginfoUpgrade ruby3.2-rubygems-develUpgrade ruby3.2-rubygem-power_assertUpgrade ruby3.2-debuginfoUpgrade ruby3.2-develUpgrade ruby3.2-rubygem-typeprofUpgrade ruby3.2Upgrade ruby3.2-rubygem-bigdecimalUpgrade ruby3.2-rubygem-rexmlUpgrade ruby3.2-rubygem-rdocUpgrade ruby3.2-rubygem-rbs-debuginfoUpgrade ruby3.2-rubygem-rbsUpgrade ruby3.2-bundled-gems-debuginfoUpgrade ruby3.2-rubygem-bundlerUpgrade ruby3.2-rubygem-rssUpgrade ruby3.2-rubygem-rakeUpgrade ruby3.2-docUpgrade ruby3.2-libsUpgrade ruby3.2-debugsourceUpgrade ruby3.2-rubygem-io-console-debuginfoUpgrade ruby3.2-bundled-gemsUpgrade ruby3.2-rubygem-io-consoleUpgrade ruby3.2-rubygem-psychUpgrade ruby3.2-rubygem-bigdecimal-debuginfoUpgrade ruby3.2-default-gemsUpgrade ruby3.2-rubygem-irbUpgrade ruby3.2-libs-debuginfoUpgrade ruby3.2-rubygem-minitestUpgrade ruby3.2-rubygem-test-unitUpgrade ruby3.2-rubygemsUpgrade ruby3.2-rubygem-json-debuginfo | Feb 17, 2025 | Mar 21, 2023 |
| Centos_linux | — | Upgrade rubygem-opensslUpgrade rubygem-rdocUpgrade ruby-libs-debuginfoUpgrade rubygem-bigdecimal-debuginfoUpgrade ruby-libsUpgrade rubygem-psych-debuginfoUpgrade rubygem-psychUpgrade rubygem-pg-docUpgrade rubygem-power_assertUpgrade rubygem-minitestUpgrade rubygem-net-telnetUpgrade rubygem-bundler-docUpgrade rubygem-json-debuginfoUpgrade rubygems-develUpgrade rubygem-pgUpgrade ruby-debugsourceUpgrade rubygem-bson-debugsourceUpgrade rubygem-mongoUpgrade ruby-default-gemsUpgrade rubygem-bson-docUpgrade rubygemsUpgrade rubygem-abrt-docUpgrade ruby-irbUpgrade rubygem-pg-debuginfoUpgrade rubygem-pg-debugsourceUpgrade rubygem-mysql2Upgrade rubygem-did_you_meanUpgrade rubygem-bsonUpgrade rubygem-io-consoleUpgrade rubygem-bigdecimalUpgrade rubygem-openssl-debuginfoUpgrade rubygem-mysql2-debugsourceUpgrade ruby-develUpgrade rubyUpgrade rubygem-jsonUpgrade rubygem-mongo-docUpgrade rubygem-xmlrpcUpgrade rubygem-mysql2-docUpgrade ruby-debuginfoUpgrade rubygem-io-console-debuginfoUpgrade rubygem-mysql2-debuginfoUpgrade ruby-docUpgrade rubygem-rakeUpgrade rubygem-irbUpgrade rubygem-bson-debuginfoUpgrade rubygem-abrtUpgrade rubygem-bundlerUpgrade rubygem-test-unit | Jun 28, 2023 | Mar 31, 2023 |
| Debian | — | Upgrade jrubyUpgrade ruby2.7 | May 2, 2023 | Mar 31, 2023 |
| Dell Powerstore Dsa2024158 | — | Upgrade Dell PowerStoreOS to the latest version | Jan 13, 2026 | Apr 4, 2024 |
| Dell Powerstore Dsa2024225 | — | Upgrade Dell PowerStoreOS to the latest version | Oct 23, 2025 | May 29, 2024 |
| Freebsd | — | Upgrade ruby30Upgrade ruby31Upgrade ruby27Upgrade rubyUpgrade ruby32Upgrade rubygem-time | Apr 1, 2023 | Mar 30, 2023 |
| Gentoo Linux | — | Upgrade dev-lang/ruby. | Jan 25, 2024 | Mar 31, 2023 |
| Huawei Euleros 2_0_sp10 | — | Upgrade rubyUpgrade ruby-irbUpgrade ruby-help | May 9, 2023 | Mar 31, 2023 |
| Huawei Euleros 2_0_sp11 | — | Upgrade ruby-irbUpgrade ruby-helpUpgrade ruby | Jan 10, 2024 | Mar 31, 2023 |
| Huawei Euleros 2_0_sp9 | — | Upgrade ruby-irbUpgrade ruby-helpUpgrade ruby | Jul 10, 2023 | Mar 31, 2023 |
| Nutanix Ahv | — | Upgrade Nutanix AHV to the latest version | Jun 5, 2026 | Sep 22, 2023 |
| Oracle_linux | — | Upgrade rubygem-mongoUpgrade rubygem-opensslUpgrade rubygem-rdocUpgrade rubygem-abrt-docUpgrade rubygems-develUpgrade ruby-bundled-gemsUpgrade rubygem-pgUpgrade rubygem-mysql2-docUpgrade rubygemsUpgrade ruby-libsUpgrade rubygem-jsonUpgrade rubygem-typeprofUpgrade rubygem-test-unitUpgrade rubygem-bsonUpgrade rubygem-xmlrpcUpgrade rubygem-rssUpgrade rubygem-psychUpgrade rubygem-net-telnetUpgrade rubygem-bson-docUpgrade rubygem-bundler-docUpgrade rubygem-minitestUpgrade ruby-default-gemsUpgrade rubygem-power_assertUpgrade rubygem-abrtUpgrade rubygem-bigdecimalUpgrade rubygem-rbsUpgrade rubygem-irbUpgrade rubygem-io-consoleUpgrade ruby-docUpgrade ruby-develUpgrade rubygem-bundlerUpgrade rubygem-pg-docUpgrade rubygem-did_you_meanUpgrade rubygem-mongo-docUpgrade ruby-irbUpgrade rubygem-rexmlUpgrade rubyUpgrade rubygem-mysql2Upgrade rubygem-rake | Jul 8, 2023 | Mar 21, 2023 |
| Redhat_linux | — | Upgrade ruby-develUpgrade ruby-bundled-gems-debuginfoUpgrade rubygem-rexmlUpgrade rubygem-rdocUpgrade rubygem-opensslUpgrade rubygem-did_you_meanUpgrade ruby-libs-debuginfoUpgrade rubygem-bson-docUpgrade rubygem-bundler-docUpgrade rubygem-pgUpgrade rubygem-psych-debuginfoUpgrade rubygem-mysql2-docUpgrade rubygems-develUpgrade rubygem-test-unitUpgrade ruby-default-gemsUpgrade rubygem-rbs-debuginfoUpgrade ruby-debuginfoUpgrade rubygem-mysql2-debuginfoUpgrade rubygem-xmlrpcUpgrade rubygem-json-debuginfoUpgrade rubygem-io-console-debuginfoUpgrade rubygemsUpgrade rubygem-mongo-docUpgrade rubygem-bson-debugsourceUpgrade rubygem-bsonUpgrade ruby-bundled-gemsUpgrade ruby-libsUpgrade ruby-debugsourceUpgrade rubygem-pg-debugsourceUpgrade rubyUpgrade rubygem-rbsNo solution existsUpgrade rubygem-io-consoleUpgrade ruby-irbUpgrade rubygem-rakeUpgrade rubygem-mysql2-debugsourceUpgrade rubygem-pg-debuginfoUpgrade rubygem-bigdecimalUpgrade rubygem-net-telnetUpgrade rubygem-openssl-debuginfoUpgrade rubygem-mongoUpgrade rubygem-bson-debuginfoUpgrade rubygem-abrtUpgrade ruby-docUpgrade rubygem-mysql2Upgrade rubygem-jsonUpgrade rubygem-irbUpgrade rubygem-rssUpgrade rubygem-power_assertUpgrade rubygem-abrt-docUpgrade rubygem-typeprofUpgrade rubygem-minitestUpgrade rubygem-pg-docUpgrade rubygem-psychUpgrade rubygem-bigdecimal-debuginfoUpgrade rubygem-bundler | Jun 28, 2023 | Mar 31, 2023 |
| Rocky_linux | — | Upgrade rubygem-io-consoleUpgrade rubygem-psychUpgrade rubygem-pg-debuginfoUpgrade rubygem-bigdecimalUpgrade ruby-debuginfoUpgrade rubygem-bsonUpgrade rubygem-mysql2-debugsourceUpgrade ruby-libsUpgrade ruby-bundled-gemsUpgrade rubygem-jsonUpgrade rubygem-bigdecimal-debuginfoUpgrade rubygem-bson-debugsourceUpgrade rubygem-rbs-debuginfoUpgrade ruby-debugsourceUpgrade rubygem-bson-debuginfoUpgrade rubygem-json-debuginfoUpgrade rubygem-openssl-debuginfoUpgrade rubygem-opensslUpgrade ruby-bundled-gems-debuginfoUpgrade rubygem-io-console-debuginfoUpgrade ruby-develUpgrade rubygem-mysql2-debuginfoUpgrade rubygem-psych-debuginfoUpgrade rubygem-pgUpgrade rubyUpgrade rubygem-mysql2Upgrade rubygem-rbsUpgrade rubygem-pg-debugsourceUpgrade ruby-libs-debuginfo | Mar 5, 2024 | Mar 31, 2023 |
| Suse | — | Upgrade ruby2.5-docUpgrade ruby2.5-develUpgrade ruby2.5Upgrade libruby2_5-2_5Upgrade ruby2.5-devel-extraUpgrade ruby2.5-doc-riUpgrade ruby2.5-stdlib | Oct 25, 2023 | Mar 31, 2023 |
| Ubuntu | — | Upgrade libruby2.3 (Ubuntu Pro)Upgrade ruby3.1Upgrade libruby2.5Upgrade libruby2.7Upgrade ruby2.5Upgrade ruby2.7Upgrade libruby3.1Upgrade ruby2.3 (Ubuntu Pro) | May 5, 2023 | Mar 31, 2023 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Mar 31, 2023 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub