A ReDoS issue was discovered in the Time component through 0.2.1 in Ruby through 3.2.1. The Time parser mishandles invalid URLs that have specific characters. It causes an increase in execution time for parsing strings to Time objects. The fixed versions are 0.1.1 and 0.2.2.
CVSS Details
- CVSS 3.1 Base Score: 5.3
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade ruby-libsUpgrade rubygem-rakeUpgrade rubygem-mongo-docUpgrade rubygems-develUpgrade rubygem-bsonUpgrade rubygem-xmlrpcUpgrade ruby-docUpgrade ruby-irbUpgrade rubygem-test-unitUpgrade rubygem-bigdecimalUpgrade rubygem-rexmlUpgrade rubygem-rssUpgrade rubygem-io-consoleUpgrade rubygem-bson-docUpgrade rubygem-did_you_meanUpgrade ruby-develUpgrade ruby-bundled-gemsUpgrade rubygem-pg-docUpgrade rubygem-power_assertUpgrade rubygem-abrt-docUpgrade rubygem-typeprofUpgrade rubygem-pgUpgrade rubygem-abrtUpgrade rubygem-minitestUpgrade rubygem-mysql2-docUpgrade rubygem-rbsUpgrade rubygem-bundlerUpgrade rubygem-psychUpgrade rubyUpgrade rubygem-mongoUpgrade rubygem-jsonUpgrade rubygem-mysql2Upgrade rubygem-net-telnetUpgrade rubygemsUpgrade rubygem-irbUpgrade rubygem-bundler-docUpgrade ruby-default-gemsUpgrade rubygem-opensslUpgrade rubygem-rdoc | Jul 4, 2023 | Mar 31, 2023 |
| Alpine Linux | — | Upgrade ruby | Mar 26, 2024 | Mar 31, 2023 |
| Amazon Linux Ami 2 | — | Upgrade rubygem-rakeUpgrade rubygems-develUpgrade rubygem-bigdecimalUpgrade rubygem-jsonUpgrade rubygem-psychUpgrade ruby-libsUpgrade rubygem-rssUpgrade rubygem-rexmlUpgrade ruby-tcltkUpgrade rubygem-io-consoleUpgrade rubygem-typeprofUpgrade ruby-default-gemsUpgrade rubygem-irbUpgrade ruby-irbUpgrade rubygem-minitestUpgrade rubygemsUpgrade rubygem-power_assertUpgrade ruby-docUpgrade ruby-debuginfoUpgrade rubygem-rdocUpgrade rubygem-rbsUpgrade rubygem-bundlerUpgrade rubyUpgrade rubygem-test-unitUpgrade ruby-devel | Jun 13, 2023 | Mar 31, 2023 |
| Amazon_linux_2023 | — | Upgrade ruby3.2-rubygem-power_assertUpgrade ruby3.2-debuginfoUpgrade ruby3.2-rubygem-typeprofUpgrade ruby3.2-rubygem-rbsUpgrade ruby3.2-rubygem-psych-debuginfoUpgrade ruby3.2-develUpgrade ruby3.2-rubygem-rbs-debuginfoUpgrade ruby3.2-rubygem-jsonUpgrade ruby3.2-rubygem-rexmlUpgrade ruby3.2-rubygem-rdocUpgrade ruby3.2-rubygems-develUpgrade ruby3.2-rubygem-bigdecimalUpgrade ruby3.2Upgrade ruby3.2-rubygem-io-consoleUpgrade ruby3.2-libsUpgrade ruby3.2-bundled-gems-debuginfoUpgrade ruby3.2-default-gemsUpgrade ruby3.2-rubygem-irbUpgrade ruby3.2-libs-debuginfoUpgrade ruby3.2-rubygem-bigdecimal-debuginfoUpgrade ruby3.2-rubygem-rakeUpgrade ruby3.2-rubygem-psychUpgrade ruby3.2-rubygem-bundlerUpgrade ruby3.2-bundled-gemsUpgrade ruby3.2-rubygem-rssUpgrade ruby3.2-debugsourceUpgrade ruby3.2-rubygem-io-console-debuginfoUpgrade ruby3.2-rubygem-json-debuginfoUpgrade ruby3.2-rubygemsUpgrade ruby3.2-rubygem-test-unitUpgrade ruby3.2-rubygem-minitestUpgrade ruby3.2-doc | Feb 17, 2025 | Mar 21, 2023 |
| Centos_linux | — | Upgrade rubygem-irbUpgrade rubygem-test-unitUpgrade rubygem-bundlerUpgrade rubygem-io-console-debuginfoUpgrade ruby-docUpgrade rubygem-mysql2-docUpgrade rubygem-mongo-docUpgrade rubygem-bigdecimalUpgrade rubygem-mysql2Upgrade ruby-debuginfoUpgrade rubygem-abrtUpgrade rubygem-xmlrpcUpgrade rubygem-openssl-debuginfoUpgrade rubygem-did_you_meanUpgrade rubygem-io-consoleUpgrade rubygem-bsonUpgrade rubygem-bson-debuginfoUpgrade rubygem-rakeUpgrade ruby-irbUpgrade rubygem-mysql2-debuginfoUpgrade rubygem-jsonUpgrade rubygem-pg-debugsourceUpgrade rubygem-pg-debuginfoUpgrade rubyUpgrade rubygem-mysql2-debugsourceUpgrade ruby-develUpgrade rubygem-pg-docUpgrade rubygem-rdocUpgrade rubygem-pgUpgrade rubygem-net-telnetUpgrade rubygem-minitestUpgrade rubygem-opensslUpgrade rubygem-bson-docUpgrade rubygem-psych-debuginfoUpgrade ruby-libs-debuginfoUpgrade ruby-default-gemsUpgrade rubygem-bigdecimal-debuginfoUpgrade rubygems-develUpgrade rubygem-json-debuginfoUpgrade rubygem-bson-debugsourceUpgrade rubygem-psychUpgrade rubygem-mongoUpgrade rubygem-power_assertUpgrade ruby-debugsourceUpgrade rubygemsUpgrade rubygem-bundler-docUpgrade rubygem-abrt-docUpgrade ruby-libs | Jun 28, 2023 | Mar 31, 2023 |
| Debian | — | Upgrade jrubyUpgrade ruby2.7 | May 2, 2023 | Mar 31, 2023 |
| Dell Powerstore Dsa2024158 | — | Upgrade Dell PowerStoreOS to the latest version | Jan 13, 2026 | Apr 4, 2024 |
| Dell Powerstore Dsa2024225 | — | Upgrade Dell PowerStoreOS to the latest version | Oct 23, 2025 | May 29, 2024 |
| Freebsd | — | Upgrade rubygem-timeUpgrade ruby32Upgrade rubyUpgrade ruby30Upgrade ruby31Upgrade ruby27 | Apr 1, 2023 | Mar 30, 2023 |
| Gentoo Linux | — | Upgrade dev-lang/ruby. | Jan 25, 2024 | Mar 31, 2023 |
| Huawei Euleros 2_0_sp10 | — | Upgrade ruby-irbUpgrade ruby-helpUpgrade ruby | May 9, 2023 | Mar 31, 2023 |
| Huawei Euleros 2_0_sp11 | — | Upgrade rubyUpgrade ruby-helpUpgrade ruby-irb | Jan 10, 2024 | Mar 31, 2023 |
| Huawei Euleros 2_0_sp9 | — | Upgrade rubyUpgrade ruby-irbUpgrade ruby-help | Jul 10, 2023 | Mar 31, 2023 |
| Nutanix Ahv | — | Upgrade Nutanix AHV to the latest version | Jun 5, 2026 | Sep 22, 2023 |
| Oracle_linux | — | Upgrade rubygems-develUpgrade rubygem-test-unitUpgrade rubygem-pgUpgrade rubygem-xmlrpcUpgrade rubygem-typeprofUpgrade rubygem-bson-docUpgrade rubygem-minitestUpgrade rubygem-bundler-docUpgrade rubygem-power_assertUpgrade ruby-default-gemsUpgrade rubygem-bsonUpgrade rubygem-mysql2-docUpgrade ruby-libsUpgrade rubygem-psychUpgrade rubygem-rssUpgrade rubygem-mongoUpgrade ruby-bundled-gemsUpgrade rubygem-net-telnetUpgrade rubygem-rdocUpgrade rubygem-opensslUpgrade rubygem-jsonUpgrade rubygemsUpgrade rubygem-abrt-docUpgrade rubygem-mongo-docUpgrade ruby-docUpgrade ruby-develUpgrade rubygem-bundlerUpgrade rubygem-bigdecimalUpgrade rubygem-abrtUpgrade rubygem-rakeUpgrade rubygem-rexmlUpgrade rubygem-irbUpgrade ruby-irbUpgrade rubygem-rbsUpgrade rubygem-pg-docUpgrade rubygem-did_you_meanUpgrade rubygem-io-consoleUpgrade rubyUpgrade rubygem-mysql2 | Jul 8, 2023 | Mar 21, 2023 |
| Redhat_linux | — | Upgrade ruby-bundled-gemsUpgrade rubygem-irbUpgrade rubygem-abrtUpgrade rubygem-bson-debuginfoUpgrade ruby-debugsourceUpgrade rubygem-jsonUpgrade rubygem-bson-debugsourceUpgrade rubygem-mysql2Upgrade rubygem-mongoUpgrade rubygem-bigdecimalUpgrade rubygem-net-telnetUpgrade rubygem-pg-debugsourceUpgrade rubygem-power_assertUpgrade rubygem-openssl-debuginfoUpgrade ruby-docUpgrade rubygem-bigdecimal-debuginfoUpgrade rubygem-psychUpgrade ruby-irbUpgrade rubygem-rakeUpgrade rubygem-abrt-docUpgrade rubygem-pg-debuginfoUpgrade rubygem-bundlerNo solution existsUpgrade rubygem-rbsUpgrade rubygem-mysql2-debugsourceUpgrade ruby-libsUpgrade rubygem-pg-docUpgrade rubyUpgrade rubygem-typeprofUpgrade rubygem-bsonUpgrade rubygem-rssUpgrade rubygem-io-consoleUpgrade rubygem-minitestUpgrade rubygem-did_you_meanUpgrade rubygem-json-debuginfoUpgrade rubygem-rbs-debuginfoUpgrade rubygem-bundler-docUpgrade ruby-default-gemsUpgrade rubygem-rdocUpgrade rubygems-develUpgrade rubygem-xmlrpcUpgrade rubygem-io-console-debuginfoUpgrade rubygem-mysql2-docUpgrade rubygemsUpgrade ruby-debuginfoUpgrade rubygem-psych-debuginfoUpgrade rubygem-opensslUpgrade ruby-develUpgrade ruby-bundled-gems-debuginfoUpgrade rubygem-test-unitUpgrade rubygem-bson-docUpgrade rubygem-mongo-docUpgrade rubygem-pgUpgrade rubygem-mysql2-debuginfoUpgrade ruby-libs-debuginfoUpgrade rubygem-rexml | Jun 28, 2023 | Mar 31, 2023 |
| Rocky_linux | — | Upgrade rubygem-bsonUpgrade ruby-debugsourceUpgrade rubygem-bson-debuginfoUpgrade rubygem-json-debuginfoUpgrade rubygem-openssl-debuginfoUpgrade rubygem-bigdecimal-debuginfoUpgrade rubygem-mysql2-debugsourceUpgrade rubygem-psychUpgrade rubygem-bson-debugsourceUpgrade rubygem-jsonUpgrade ruby-libsUpgrade rubygem-bigdecimalUpgrade rubygem-pg-debuginfoUpgrade rubygem-rbs-debuginfoUpgrade ruby-debuginfoUpgrade rubygem-io-consoleUpgrade ruby-bundled-gemsUpgrade rubygem-io-console-debuginfoUpgrade rubyUpgrade rubygem-psych-debuginfoUpgrade rubygem-pgUpgrade rubygem-mysql2-debuginfoUpgrade ruby-develUpgrade rubygem-opensslUpgrade ruby-bundled-gems-debuginfoUpgrade rubygem-mysql2Upgrade rubygem-pg-debugsourceUpgrade rubygem-rbsUpgrade ruby-libs-debuginfo | Mar 5, 2024 | Mar 31, 2023 |
| Suse | — | Upgrade ruby2.5-docUpgrade ruby2.5Upgrade ruby2.5-develUpgrade libruby2_5-2_5Upgrade ruby2.5-devel-extraUpgrade ruby2.5-stdlibUpgrade ruby2.5-doc-ri | Oct 25, 2023 | Mar 31, 2023 |
| Ubuntu | — | Upgrade libruby2.3 (Ubuntu Pro)Upgrade ruby3.1Upgrade libruby2.7Upgrade libruby2.5Upgrade ruby2.5Upgrade ruby2.7Upgrade libruby3.1Upgrade ruby2.3 (Ubuntu Pro) | May 5, 2023 | Mar 31, 2023 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Mar 31, 2023 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub