A ReDoS issue was discovered in the Time component through 0.2.1 in Ruby through 3.2.1. The Time parser mishandles invalid URLs that have specific characters. It causes an increase in execution time for parsing strings to Time objects. The fixed versions are 0.1.1 and 0.2.2.
CVSS Details
- CVSS 3.1 Base Score: 5.3
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade rubygem-bson-docUpgrade rubygem-mongo-docUpgrade rubygem-bsonUpgrade rubygem-rexmlUpgrade ruby-libsUpgrade rubygem-bigdecimalUpgrade rubygem-rakeUpgrade rubygem-rssUpgrade rubygems-develUpgrade rubygem-did_you_meanUpgrade rubygem-test-unitUpgrade rubygem-io-consoleUpgrade ruby-docUpgrade rubygem-xmlrpcUpgrade ruby-irbUpgrade rubygem-opensslUpgrade rubygem-pgUpgrade rubygem-net-telnetUpgrade rubygem-mysql2-docUpgrade rubygem-bundlerUpgrade rubygem-rdocUpgrade rubygem-minitestUpgrade rubygem-power_assertUpgrade rubygemsUpgrade ruby-default-gemsUpgrade rubygem-bundler-docUpgrade rubygem-abrt-docUpgrade ruby-bundled-gemsUpgrade rubygem-abrtUpgrade rubygem-typeprofUpgrade rubygem-irbUpgrade rubygem-mongoUpgrade rubygem-psychUpgrade rubygem-jsonUpgrade rubyUpgrade rubygem-mysql2Upgrade rubygem-pg-docUpgrade ruby-develUpgrade rubygem-rbs | Jul 4, 2023 | Mar 31, 2023 |
| Alpine Linux | — | Upgrade ruby | Mar 26, 2024 | Mar 31, 2023 |
| Amazon Linux Ami 2 | — | Upgrade rubyUpgrade rubygem-rdocUpgrade ruby-irbUpgrade rubygem-test-unitUpgrade rubygem-irbUpgrade ruby-develUpgrade rubygem-power_assertUpgrade rubygemsUpgrade rubygem-rbsUpgrade ruby-default-gemsUpgrade rubygem-bundlerUpgrade ruby-debuginfoUpgrade ruby-docUpgrade rubygem-minitestUpgrade rubygem-psychUpgrade ruby-libsUpgrade rubygems-develUpgrade rubygem-bigdecimalUpgrade rubygem-rakeUpgrade rubygem-typeprofUpgrade rubygem-io-consoleUpgrade rubygem-rexmlUpgrade rubygem-rssUpgrade ruby-tcltkUpgrade rubygem-json | Jun 13, 2023 | Mar 31, 2023 |
| Amazon_linux_2023 | — | Upgrade ruby3.2-bundled-gemsUpgrade ruby3.2-rubygem-rakeUpgrade ruby3.2-rubygem-psychUpgrade ruby3.2-docUpgrade ruby3.2-rubygem-rssUpgrade ruby3.2-rubygem-bundlerUpgrade ruby3.2-rubygem-io-consoleUpgrade ruby3.2-bundled-gems-debuginfoUpgrade ruby3.2-rubygem-json-debuginfoUpgrade ruby3.2-rubygem-minitestUpgrade ruby3.2-rubygem-test-unitUpgrade ruby3.2-libsUpgrade ruby3.2-debugsourceUpgrade ruby3.2-rubygem-io-console-debuginfoUpgrade ruby3.2-rubygemsUpgrade ruby3.2-default-gemsUpgrade ruby3.2-libs-debuginfoUpgrade ruby3.2-rubygem-irbUpgrade ruby3.2-rubygem-bigdecimal-debuginfoUpgrade ruby3.2-rubygems-develUpgrade ruby3.2-rubygem-power_assertUpgrade ruby3.2-rubygem-rdocUpgrade ruby3.2-rubygem-rexmlUpgrade ruby3.2-debuginfoUpgrade ruby3.2-rubygem-rbs-debuginfoUpgrade ruby3.2-rubygem-bigdecimalUpgrade ruby3.2-rubygem-rbsUpgrade ruby3.2-rubygem-jsonUpgrade ruby3.2-rubygem-typeprofUpgrade ruby3.2-rubygem-psych-debuginfoUpgrade ruby3.2-develUpgrade ruby3.2 | Feb 17, 2025 | Mar 21, 2023 |
| Centos_linux | — | Upgrade rubygem-pg-debugsourceUpgrade rubygem-did_you_meanUpgrade rubygem-mysql2Upgrade rubygem-irbUpgrade rubygem-bson-debuginfoUpgrade rubygem-test-unitUpgrade rubygem-bundlerUpgrade rubygem-openssl-debuginfoUpgrade rubygem-bigdecimalUpgrade rubygem-io-consoleUpgrade rubygem-mongo-docUpgrade rubygem-mysql2-docUpgrade rubygem-pg-debuginfoUpgrade rubygem-xmlrpcUpgrade rubygem-bsonUpgrade rubygem-abrtUpgrade rubygem-io-console-debuginfoUpgrade rubygem-mysql2-debugsourceUpgrade ruby-debuginfoUpgrade rubygem-rakeUpgrade ruby-docUpgrade ruby-irbUpgrade rubyUpgrade rubygem-mysql2-debuginfoUpgrade rubygem-jsonUpgrade ruby-develUpgrade ruby-libsUpgrade rubygem-opensslUpgrade rubygem-bundler-docUpgrade rubygem-abrt-docUpgrade rubygem-mongoUpgrade rubygem-psych-debuginfoUpgrade ruby-default-gemsUpgrade rubygem-pgUpgrade rubygem-rdocUpgrade rubygems-develUpgrade rubygem-net-telnetUpgrade rubygem-pg-docUpgrade rubygemsUpgrade ruby-debugsourceUpgrade rubygem-bigdecimal-debuginfoUpgrade ruby-libs-debuginfoUpgrade rubygem-psychUpgrade rubygem-json-debuginfoUpgrade rubygem-bson-debugsourceUpgrade rubygem-power_assertUpgrade rubygem-minitestUpgrade rubygem-bson-doc | Jun 28, 2023 | Mar 31, 2023 |
| Debian | — | Upgrade jrubyUpgrade ruby2.7 | May 2, 2023 | Mar 31, 2023 |
| Dell Powerstore Dsa2024158 | — | Upgrade Dell PowerStoreOS to the latest version | Jan 13, 2026 | Apr 4, 2024 |
| Dell Powerstore Dsa2024225 | — | Upgrade Dell PowerStoreOS to the latest version | Oct 23, 2025 | May 29, 2024 |
| Freebsd | — | Upgrade rubygem-timeUpgrade ruby32Upgrade rubyUpgrade ruby30Upgrade ruby27Upgrade ruby31 | Apr 1, 2023 | Mar 30, 2023 |
| Gentoo Linux | — | Upgrade dev-lang/ruby. | Jan 25, 2024 | Mar 31, 2023 |
| Huawei Euleros 2_0_sp10 | — | Upgrade rubyUpgrade ruby-helpUpgrade ruby-irb | May 9, 2023 | Mar 31, 2023 |
| Huawei Euleros 2_0_sp11 | — | Upgrade rubyUpgrade ruby-helpUpgrade ruby-irb | Jan 10, 2024 | Mar 31, 2023 |
| Huawei Euleros 2_0_sp9 | — | Upgrade rubyUpgrade ruby-irbUpgrade ruby-help | Jul 10, 2023 | Mar 31, 2023 |
| Nutanix Ahv | — | Upgrade Nutanix AHV to the latest version | Jun 5, 2026 | Sep 22, 2023 |
| Oracle_linux | — | Upgrade rubygem-bigdecimalUpgrade rubygem-pg-docUpgrade ruby-irbUpgrade rubyUpgrade rubygem-mongo-docUpgrade ruby-develUpgrade rubygem-rexmlUpgrade rubygem-did_you_meanUpgrade rubygem-io-consoleUpgrade rubygem-mysql2Upgrade rubygem-bundlerUpgrade rubygem-irbUpgrade rubygem-rbsUpgrade ruby-docUpgrade rubygem-abrtUpgrade rubygem-rakeUpgrade rubygem-rdocUpgrade rubygem-typeprofUpgrade ruby-libsUpgrade rubygem-psychUpgrade rubygem-mongoUpgrade rubygem-rssUpgrade rubygem-minitestUpgrade rubygem-bundler-docUpgrade rubygem-bson-docUpgrade ruby-default-gemsUpgrade rubygem-power_assertUpgrade rubygem-jsonUpgrade rubygemsUpgrade rubygem-net-telnetUpgrade ruby-bundled-gemsUpgrade rubygem-xmlrpcUpgrade rubygem-pgUpgrade rubygem-bsonUpgrade rubygem-mysql2-docUpgrade rubygems-develUpgrade rubygem-abrt-docUpgrade rubygem-opensslUpgrade rubygem-test-unit | Jul 8, 2023 | Mar 21, 2023 |
| Redhat_linux | — | Upgrade rubygem-rdocUpgrade rubygem-did_you_meanUpgrade rubygem-bundler-docUpgrade ruby-libs-debuginfoUpgrade ruby-default-gemsUpgrade rubygem-mysql2-debuginfoUpgrade rubygem-pgUpgrade rubygem-xmlrpcUpgrade rubygem-io-console-debuginfoUpgrade rubygem-mongo-docUpgrade rubygemsUpgrade rubygem-test-unitUpgrade rubygem-rexmlUpgrade rubygem-rbs-debuginfoUpgrade rubygem-json-debuginfoUpgrade rubygems-develUpgrade rubygem-opensslUpgrade rubygem-psych-debuginfoUpgrade rubygem-bson-docUpgrade ruby-bundled-gems-debuginfoUpgrade rubygem-mysql2-docUpgrade ruby-develUpgrade ruby-debuginfoUpgrade rubygem-jsonUpgrade ruby-debugsourceUpgrade rubygem-bson-debuginfoUpgrade ruby-docUpgrade rubygem-abrtUpgrade rubygem-rbsUpgrade rubyUpgrade rubygem-bundlerUpgrade rubygem-openssl-debuginfoUpgrade ruby-libsUpgrade rubygem-mongoUpgrade rubygem-net-telnetUpgrade rubygem-bigdecimalUpgrade rubygem-pg-debugsourceUpgrade rubygem-mysql2Upgrade rubygem-abrt-docUpgrade rubygem-pg-debuginfoUpgrade ruby-bundled-gemsUpgrade rubygem-bson-debugsourceUpgrade rubygem-irbUpgrade rubygem-power_assertUpgrade rubygem-rssUpgrade rubygem-io-consoleUpgrade rubygem-minitestUpgrade rubygem-rakeUpgrade rubygem-psychUpgrade rubygem-mysql2-debugsourceUpgrade rubygem-bsonUpgrade ruby-irbNo solution existsUpgrade rubygem-bigdecimal-debuginfoUpgrade rubygem-pg-docUpgrade rubygem-typeprof | Jun 28, 2023 | Mar 31, 2023 |
| Rocky_linux | — | Upgrade rubygem-io-consoleUpgrade ruby-bundled-gemsUpgrade rubygem-bson-debuginfoUpgrade rubygem-rbs-debuginfoUpgrade rubygem-mysql2-debugsourceUpgrade rubygem-bigdecimal-debuginfoUpgrade rubygem-json-debuginfoUpgrade rubygem-jsonUpgrade rubygem-openssl-debuginfoUpgrade ruby-libsUpgrade ruby-debuginfoUpgrade rubygem-bigdecimalUpgrade rubygem-bson-debugsourceUpgrade ruby-debugsourceUpgrade rubygem-bsonUpgrade rubygem-pg-debuginfoUpgrade rubygem-psychUpgrade rubygem-io-console-debuginfoUpgrade ruby-develUpgrade rubygem-psych-debuginfoUpgrade rubygem-pgUpgrade rubygem-mysql2-debuginfoUpgrade rubyUpgrade rubygem-pg-debugsourceUpgrade ruby-libs-debuginfoUpgrade rubygem-opensslUpgrade ruby-bundled-gems-debuginfoUpgrade rubygem-mysql2Upgrade rubygem-rbs | Mar 5, 2024 | Mar 31, 2023 |
| Suse | — | Upgrade ruby2.5-doc-riUpgrade ruby2.5-stdlibUpgrade ruby2.5-devel-extraUpgrade libruby2_5-2_5Upgrade ruby2.5Upgrade ruby2.5-develUpgrade ruby2.5-doc | Oct 25, 2023 | Mar 31, 2023 |
| Ubuntu | — | Upgrade libruby2.3 (Ubuntu Pro)Upgrade libruby2.7Upgrade ruby3.1Upgrade ruby2.5Upgrade libruby2.5Upgrade ruby2.7Upgrade libruby3.1Upgrade ruby2.3 (Ubuntu Pro) | May 5, 2023 | Mar 31, 2023 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Mar 31, 2023 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub