Lucene search

CVE-2023-28756

🗓️ 31 Mar 2023 04:09:15Reported by mitreType

A ReDoS issue discovered in Ruby's Time component version 0.2.1 through 3.2.1 mishandles invalid URLs, leading to a significant increase in execution time

Reporter	Title	Published	Views	Family All 154
Tenable Nessus	EulerOS 2.0 SP9 : ruby (EulerOS-SA-2023-2321)	9 Jul 202300:00	–	nessus
Tenable Nessus	EulerOS 2.0 SP10 : ruby (EulerOS-SA-2023-1810)	10 May 202300:00	–	nessus
Tenable Nessus	EulerOS 2.0 SP10 : ruby (EulerOS-SA-2023-1828)	9 May 202300:00	–	nessus
Tenable Nessus	Amazon Linux 2 : ruby (ALAS-2023-2084)	13 Jun 202300:00	–	nessus
Tenable Nessus	EulerOS 2.0 SP9 : ruby (EulerOS-SA-2023-2341)	9 Jul 202300:00	–	nessus
Tenable Nessus	NewStart CGSL CORE 5.04 / MAIN 5.04 : ruby Vulnerability (NS-SA-2024-0012)	18 Apr 202400:00	–	nessus
Tenable Nessus	FreeBSD : rubygem-time -- ReDoS vulnerability (6bd2773c-cf1a-11ed-bd44-080027f5fec9)	30 Mar 202300:00	–	nessus
Tenable Nessus	Amazon Linux 2023 : ruby3.2, ruby3.2-bundled-gems, ruby3.2-default-gems (ALAS2023-2023-158)	20 Apr 202300:00	–	nessus
Tenable Nessus	Ubuntu 16.04 ESM / 18.04 LTS / 20.04 LTS : Ruby vulnerabilities (USN-6055-1)	4 May 202300:00	–	nessus
Tenable Nessus	Ubuntu 16.04 ESM / 18.04 LTS / 20.04 LTS : Ruby vulnerabilities (USN-6087-1)	18 May 202300:00	–	nessus

Nvd

Node

ruby-lang rubyRange≤2.7.7

ruby-lang timeMatch0.1.0ruby

ruby-lang timeMatch0.2.1ruby

Node

debian debian_linuxMatch10.0

fedoraproject fedoraMatch36

fedoraproject fedoraMatch37

fedoraproject fedoraMatch38

Source	Link
lists	www.lists.debian.org/debian-lts-announce/2023/04/msg00033.html
lists	www.lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FFZANOQA4RYX7XCB42OO3P24DQKWHEKA/
security	www.security.netapp.com/advisory/ntap-20230526-0004/
ruby-lang	www.ruby-lang.org/en/downloads/releases/
ruby-lang	www.ruby-lang.org/en/news/2022/12/25/ruby-3-2-0-released/
github	www.github.com/ruby/time/releases/
security	www.security.gentoo.org/glsa/202401-27
lists	www.lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/WMIOPLBAAM3FEQNAXA2L7BDKOGSVUT5Z/
lists	www.lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/G76GZG3RAGYF4P75YY7J7TGYAU7Z5E2T/
ruby-lang	www.ruby-lang.org/en/news/2023/03/30/redos-in-time-cve-2023-28756/

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

31 Mar 2023 04:15Current

5.7Medium risk

Vulners AI Score5.7

CVSS35.3

EPSS0.005

CWE-1333