A ReDoS issue was discovered in the Time component through 0.2.1 in Ruby through 3.2.1. The Time parser mishandles invalid URLs that have specific characters. It causes an increase in execution time for parsing strings to Time objects. The fixed versions are 0.1.1 and 0.2.2.
CVSS Details
- CVSS 3.1 Base Score: 5.3
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade rubygem-bsonUpgrade rubygem-rssUpgrade rubygem-mongo-docUpgrade rubygem-test-unitUpgrade rubygem-io-consoleUpgrade rubygem-rakeUpgrade rubygem-rexmlUpgrade ruby-docUpgrade ruby-libsUpgrade rubygem-did_you_meanUpgrade rubygem-xmlrpcUpgrade rubygems-develUpgrade ruby-irbUpgrade rubygem-bson-docUpgrade rubygem-bigdecimalUpgrade rubygem-bundlerUpgrade rubygem-mysql2-docUpgrade rubygem-mysql2Upgrade rubygem-typeprofUpgrade rubygem-opensslUpgrade rubygem-net-telnetUpgrade ruby-develUpgrade rubygem-pgUpgrade rubygem-irbUpgrade rubygem-mongoUpgrade rubygem-abrtUpgrade rubygem-rdocUpgrade rubygem-rbsUpgrade rubygem-pg-docUpgrade ruby-default-gemsUpgrade rubygem-power_assertUpgrade rubygem-bundler-docUpgrade ruby-bundled-gemsUpgrade rubyUpgrade rubygem-jsonUpgrade rubygem-psychUpgrade rubygem-abrt-docUpgrade rubygemsUpgrade rubygem-minitest | Jul 4, 2023 | Mar 31, 2023 |
| Alpine Linux | — | Upgrade ruby | Mar 26, 2024 | Mar 31, 2023 |
| Amazon Linux Ami 2 | — | Upgrade rubygem-rexmlUpgrade rubygem-jsonUpgrade rubygem-rakeUpgrade rubygem-typeprofUpgrade rubygem-bigdecimalUpgrade rubygem-io-consoleUpgrade rubygems-develUpgrade ruby-libsUpgrade rubygem-psychUpgrade rubygem-rssUpgrade ruby-tcltkUpgrade ruby-develUpgrade rubygem-rbsUpgrade rubygemsUpgrade rubygem-power_assertUpgrade rubygem-irbUpgrade rubyUpgrade rubygem-test-unitUpgrade ruby-docUpgrade ruby-irbUpgrade ruby-debuginfoUpgrade rubygem-minitestUpgrade rubygem-bundlerUpgrade rubygem-rdocUpgrade ruby-default-gems | Jun 13, 2023 | Mar 31, 2023 |
| Amazon_linux_2023 | — | Upgrade ruby3.2-bundled-gems-debuginfoUpgrade ruby3.2-debugsourceUpgrade ruby3.2-rubygem-json-debuginfoUpgrade ruby3.2-rubygem-rakeUpgrade ruby3.2-rubygem-io-consoleUpgrade ruby3.2-rubygem-minitestUpgrade ruby3.2-rubygem-io-console-debuginfoUpgrade ruby3.2-rubygemsUpgrade ruby3.2-rubygem-test-unitUpgrade ruby3.2-bundled-gemsUpgrade ruby3.2-rubygem-bigdecimal-debuginfoUpgrade ruby3.2-default-gemsUpgrade ruby3.2-libsUpgrade ruby3.2-docUpgrade ruby3.2-rubygem-psychUpgrade ruby3.2-rubygem-rssUpgrade ruby3.2-libs-debuginfoUpgrade ruby3.2-rubygem-bundlerUpgrade ruby3.2-rubygem-irbUpgrade ruby3.2-rubygem-rbsUpgrade ruby3.2Upgrade ruby3.2-rubygem-psych-debuginfoUpgrade ruby3.2-rubygem-rdocUpgrade ruby3.2-debuginfoUpgrade ruby3.2-rubygem-typeprofUpgrade ruby3.2-rubygem-power_assertUpgrade ruby3.2-rubygem-bigdecimalUpgrade ruby3.2-rubygem-jsonUpgrade ruby3.2-rubygems-develUpgrade ruby3.2-rubygem-rexmlUpgrade ruby3.2-rubygem-rbs-debuginfoUpgrade ruby3.2-devel | Feb 17, 2025 | Mar 21, 2023 |
| Centos_linux | — | Upgrade rubygem-mongo-docUpgrade rubygem-mysql2-docUpgrade rubygem-openssl-debuginfoUpgrade rubygem-pg-debugsourceUpgrade rubygem-pg-debuginfoUpgrade rubygem-test-unitUpgrade rubygem-abrtUpgrade rubygem-io-consoleUpgrade rubygem-bigdecimalUpgrade rubygem-xmlrpcUpgrade rubygem-mysql2-debuginfoUpgrade ruby-irbUpgrade rubygem-bundlerUpgrade rubygem-jsonUpgrade rubygem-bsonUpgrade rubygem-rakeUpgrade rubygem-bson-debuginfoUpgrade rubyUpgrade rubygem-mysql2-debugsourceUpgrade rubygem-did_you_meanUpgrade rubygem-io-console-debuginfoUpgrade rubygem-mysql2Upgrade ruby-debuginfoUpgrade ruby-develUpgrade rubygem-irbUpgrade ruby-docUpgrade rubygem-pg-docUpgrade rubygem-mongoUpgrade rubygem-power_assertUpgrade rubygem-abrt-docUpgrade rubygemsUpgrade rubygem-opensslUpgrade rubygem-rdocUpgrade rubygem-pgUpgrade rubygem-psychUpgrade rubygem-net-telnetUpgrade rubygem-json-debuginfoUpgrade rubygems-develUpgrade ruby-debugsourceUpgrade rubygem-bson-debugsourceUpgrade rubygem-bson-docUpgrade ruby-default-gemsUpgrade rubygem-psych-debuginfoUpgrade rubygem-bigdecimal-debuginfoUpgrade ruby-libs-debuginfoUpgrade rubygem-bundler-docUpgrade ruby-libsUpgrade rubygem-minitest | Jun 28, 2023 | Mar 31, 2023 |
| Debian | — | Upgrade jrubyUpgrade ruby2.7 | May 2, 2023 | Mar 31, 2023 |
| Dell Powerstore Dsa2024158 | — | Upgrade Dell PowerStoreOS to the latest version | Jan 13, 2026 | Apr 4, 2024 |
| Dell Powerstore Dsa2024225 | — | Upgrade Dell PowerStoreOS to the latest version | Oct 23, 2025 | May 29, 2024 |
| Freebsd | — | Upgrade ruby30Upgrade ruby31Upgrade ruby27Upgrade rubyUpgrade rubygem-timeUpgrade ruby32 | Apr 1, 2023 | Mar 30, 2023 |
| Gentoo Linux | — | Upgrade dev-lang/ruby. | Jan 25, 2024 | Mar 31, 2023 |
| Huawei Euleros 2_0_sp10 | — | Upgrade rubyUpgrade ruby-irbUpgrade ruby-help | May 9, 2023 | Mar 31, 2023 |
| Huawei Euleros 2_0_sp11 | — | Upgrade rubyUpgrade ruby-helpUpgrade ruby-irb | Jan 10, 2024 | Mar 31, 2023 |
| Huawei Euleros 2_0_sp9 | — | Upgrade ruby-helpUpgrade ruby-irbUpgrade ruby | Jul 10, 2023 | Mar 31, 2023 |
| Nutanix Ahv | — | Upgrade Nutanix AHV to the latest version | Jun 5, 2026 | Sep 22, 2023 |
| Oracle_linux | — | Upgrade rubygem-abrtUpgrade rubygem-bigdecimalUpgrade rubygem-rakeUpgrade rubygem-bundlerUpgrade rubygem-rexmlUpgrade rubygem-mongo-docUpgrade rubygem-rbsUpgrade rubygem-did_you_meanUpgrade ruby-docUpgrade rubygem-io-consoleUpgrade ruby-develUpgrade ruby-irbUpgrade rubygem-mysql2Upgrade rubyUpgrade rubygem-irbUpgrade rubygem-pg-docUpgrade rubygem-rssUpgrade rubygem-psychUpgrade rubygem-mongoUpgrade ruby-libsUpgrade rubygem-typeprofUpgrade rubygem-bsonUpgrade rubygem-jsonUpgrade rubygemsUpgrade rubygem-net-telnetUpgrade ruby-bundled-gemsUpgrade rubygem-pgUpgrade rubygems-develUpgrade rubygem-xmlrpcUpgrade rubygem-test-unitUpgrade ruby-default-gemsUpgrade rubygem-minitestUpgrade rubygem-rdocUpgrade rubygem-power_assertUpgrade rubygem-bundler-docUpgrade rubygem-bson-docUpgrade rubygem-abrt-docUpgrade rubygem-opensslUpgrade rubygem-mysql2-doc | Jul 8, 2023 | Mar 21, 2023 |
| Redhat_linux | — | Upgrade rubygem-openssl-debuginfoUpgrade rubygem-bigdecimalUpgrade rubygem-net-telnetUpgrade rubygem-io-consoleUpgrade rubygem-bigdecimal-debuginfoUpgrade rubygem-rakeUpgrade rubygem-mongoUpgrade rubygem-rssUpgrade ruby-docUpgrade rubygem-abrtUpgrade rubygem-jsonUpgrade rubygem-psychUpgrade rubygem-rbsUpgrade rubygem-mysql2No solution existsUpgrade rubygem-power_assertUpgrade rubygem-bsonUpgrade rubygem-pg-docUpgrade rubygem-typeprofUpgrade ruby-irbUpgrade rubygem-pg-debuginfoUpgrade rubygem-mysql2-debugsourceUpgrade rubygem-bson-debugsourceUpgrade rubygem-pg-debugsourceUpgrade ruby-libsUpgrade rubygem-bson-debuginfoUpgrade ruby-bundled-gemsUpgrade rubygem-irbUpgrade rubygem-abrt-docUpgrade rubygem-minitestUpgrade ruby-debugsourceUpgrade rubyUpgrade rubygem-bundlerUpgrade rubygem-opensslUpgrade rubygem-json-debuginfoUpgrade rubygem-rdocUpgrade ruby-develUpgrade ruby-bundled-gems-debuginfoUpgrade rubygem-test-unitUpgrade ruby-libs-debuginfoUpgrade rubygems-develUpgrade rubygem-did_you_meanUpgrade rubygem-bundler-docUpgrade ruby-default-gemsUpgrade rubygem-xmlrpcUpgrade rubygem-psych-debuginfoUpgrade rubygem-rexmlUpgrade rubygem-mysql2-docUpgrade rubygem-rbs-debuginfoUpgrade rubygem-mongo-docUpgrade rubygem-mysql2-debuginfoUpgrade ruby-debuginfoUpgrade rubygem-pgUpgrade rubygemsUpgrade rubygem-bson-docUpgrade rubygem-io-console-debuginfo | Jun 28, 2023 | Mar 31, 2023 |
| Rocky_linux | — | Upgrade ruby-libs-debuginfoUpgrade rubygem-io-console-debuginfoUpgrade rubyUpgrade ruby-develUpgrade rubygem-pg-debugsourceUpgrade rubygem-psych-debuginfoUpgrade rubygem-mysql2-debuginfoUpgrade rubygem-rbsUpgrade rubygem-opensslUpgrade ruby-bundled-gems-debuginfoUpgrade rubygem-mysql2Upgrade rubygem-pgUpgrade rubygem-mysql2-debugsourceUpgrade ruby-bundled-gemsUpgrade ruby-libsUpgrade rubygem-bson-debuginfoUpgrade rubygem-jsonUpgrade rubygem-bigdecimal-debuginfoUpgrade rubygem-psychUpgrade rubygem-io-consoleUpgrade rubygem-pg-debuginfoUpgrade rubygem-bigdecimalUpgrade rubygem-rbs-debuginfoUpgrade ruby-debuginfoUpgrade rubygem-bson-debugsourceUpgrade rubygem-openssl-debuginfoUpgrade rubygem-json-debuginfoUpgrade ruby-debugsourceUpgrade rubygem-bson | Mar 5, 2024 | Mar 31, 2023 |
| Suse | — | Upgrade ruby2.5-doc-riUpgrade libruby2_5-2_5Upgrade ruby2.5-stdlibUpgrade ruby2.5-devel-extraUpgrade ruby2.5-develUpgrade ruby2.5-docUpgrade ruby2.5 | Oct 25, 2023 | Mar 31, 2023 |
| Ubuntu | — | Upgrade libruby2.7Upgrade libruby2.5Upgrade ruby2.5Upgrade ruby3.1Upgrade libruby2.3 (Ubuntu Pro)Upgrade ruby2.3 (Ubuntu Pro)Upgrade ruby2.7Upgrade libruby3.1 | May 5, 2023 | Mar 31, 2023 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Mar 31, 2023 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub