Lucene search

CVE-2021-41817

🗓️ 01 Jan 2022 05:08:15Reported by mitreType

cve🔗 web.nvd.nist.gov📰️ 2 Media mentions👁 367 Views

CVE-2021-41817: ReDoS in Date Gem for Rub

AI Insights are available for you today

Leverage the power of AI to quickly understand vulnerabilities, impacts, and exploitability

Reporter	Title	Published	Views	Family All 139
nessus	Amazon Linux 2 : ruby (ALAS-2023-2345)	15 Nov 202300:00	–	nessus
nessus	Linux Distros Unpatched Vulnerability : CVE-2021-41817	5 Mar 202500:00	–	nessus
nessus	Oracle Linux 8 : ruby:2.5 (ELSA-2022-5779)	4 Aug 202200:00	–	nessus
nessus	Amazon Linux 2 : ruby (ALASRUBY2.6-2023-002)	27 Sep 202300:00	–	nessus
nessus	CentOS 8 : ruby:2.5 (CESA-2022:5779)	1 Aug 202200:00	–	nessus
nessus	RHEL 8 : ruby:2.5 (RHSA-2022:5779)	1 Aug 202200:00	–	nessus
nessus	Rocky Linux 8 : ruby:2.5 (RLSA-2022:5779)	7 Nov 202300:00	–	nessus
nessus	EulerOS 2.0 SP8 : ruby (EulerOS-SA-2022-1951)	22 Jun 202200:00	–	nessus
nessus	Debian DLA-2853-1 : ruby2.3 - LTS security update	28 Dec 202100:00	–	nessus
nessus	AlmaLinux 8 : ruby:2.5 (5779) (ALSA-2022:5779)	10 Aug 202200:00	–	nessus

Nvd

Node

ruby-lang dateRange<2.0.1ruby

ruby-lang dateRange3.0.0–3.0.2ruby

ruby-lang dateRange3.1.0–3.1.2ruby

ruby-lang dateMatch3.2.0ruby

ruby-lang rubyRange2.6.0–2.6.9

ruby-lang rubyRange2.7.0–2.7.5

ruby-lang rubyRange3.0.0–3.0.3

Node

redhat software_collectionsMatch-

redhat enterprise_linuxMatch7.0

redhat enterprise_linuxMatch8.0

Node

fedoraproject fedoraMatch34

fedoraproject fedoraMatch35

Node

debian debian_linuxMatch9.0

debian debian_linuxMatch10.0

debian debian_linuxMatch11.0

Node

suse linux_enterpriseMatch12.0

suse linux_enterpriseMatch15.0

Node

opensuse factoryMatch-

opensuse leapMatch15.2

Source	Link
lists	www.lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/IUXQCH6FRKANCVZO2Q7D2SQX33FP3KWN/
security	www.security.gentoo.org/glsa/202401-27
ruby-lang	www.ruby-lang.org/en/news/2021/11/15/date-parsing-method-regexp-dos-cve-2021-41817/
lists	www.lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UTOJGS5IEFDK3UOO7IY4OTTFGHGLSWZF/
hackerone	www.hackerone.com/reports/1254844

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

01 Jan 2022 05:15Current

7.4High risk

Vulners AI Score7.4

CVSS25

CVSS37.5

EPSS0.00334

CWE-1333