Lucene search

CVE-2023-28755

🗓️ 31 Mar 2023 04:09:15Reported by mitreType

ReDoS issue in URI component in Ruby 0.12.0-3.2.

Reporter	Title	Published	Views	Family All 140
Tenable Nessus	FreeBSD : rubygem-uri -- ReDoS vulnerability (9b60bba1-cf18-11ed-bd44-080027f5fec9)	30 Mar 202300:00	–	nessus
Tenable Nessus	EulerOS 2.0 SP10 : ruby (EulerOS-SA-2023-2366)	18 Jul 202300:00	–	nessus
Tenable Nessus	EulerOS 2.0 SP10 : ruby (EulerOS-SA-2023-2392)	18 Jul 202300:00	–	nessus
Tenable Nessus	Ubuntu 16.04 ESM / 18.04 LTS / 20.04 LTS : Ruby regression (USN-6055-2)	5 May 202300:00	–	nessus
Tenable Nessus	Fedora 38 : ruby (2023-6b924d3b75)	15 Apr 202300:00	–	nessus
Tenable Nessus	EulerOS 2.0 SP11 : ruby (EulerOS-SA-2023-2868)	16 Jan 202400:00	–	nessus
Tenable Nessus	Amazon Linux 2023 : ruby3.2, ruby3.2-bundled-gems, ruby3.2-default-gems (ALAS2023-2023-158)	20 Apr 202300:00	–	nessus
Tenable Nessus	Amazon Linux 2 : ruby (ALASRUBY3.0-2023-001)	27 Sep 202300:00	–	nessus
Tenable Nessus	EulerOS 2.0 SP11 : ruby (EulerOS-SA-2023-2666)	16 Jan 202400:00	–	nessus
Tenable Nessus	Ubuntu 16.04 ESM / 18.04 LTS / 20.04 LTS : Ruby vulnerabilities (USN-6087-1)	18 May 202300:00	–	nessus

Nvd

Node

ruby-lang uriRange≤0.10.0ruby

ruby-lang uriMatch0.10.1ruby

ruby-lang uriMatch0.11.0ruby

ruby-lang uriMatch0.12.0ruby

Node

debian debian_linuxMatch10.0

fedoraproject fedoraMatch36

fedoraproject fedoraMatch37

fedoraproject fedoraMatch38

Source	Link
lists	www.lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/G76GZG3RAGYF4P75YY7J7TGYAU7Z5E2T/
lists	www.lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/27LUWREIFTP3MQAW7QE4PJM4DPAQJWXF/
lists	www.lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/WMIOPLBAAM3FEQNAXA2L7BDKOGSVUT5Z/
security	www.security.netapp.com/advisory/ntap-20230526-0003/
lists	www.lists.debian.org/debian-lts-announce/2023/04/msg00033.html
ruby-lang	www.ruby-lang.org/en/downloads/releases/
security	www.security.gentoo.org/glsa/202401-27
lists	www.lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FFZANOQA4RYX7XCB42OO3P24DQKWHEKA/
github	www.github.com/ruby/uri/releases/
ruby-lang	www.ruby-lang.org/en/news/2022/12/25/ruby-3-2-0-released/

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

31 Mar 2023 04:15Current

5.9Medium risk

Vulners AI Score5.9

CVSS35.3

EPSS0.005

CWE-1333