Lucene search

CVE-2023-36617

🗓️ 29 Jun 2023 13:09:15Reported by mitreType

ReDoS issue in URI component for Ruby before 0.12.2. Mishandles invalid URLs with specific characters, leading to increased execution time

Reporter	Title	Published	Views	Family All 199
Hacker One	Internet Bug Bounty: CVE-2023-36617: ReDoS vulnerability in URI (Ruby)	17 Jul 202305:09	–	hackerone
Hacker One	Ruby: URI parser's RFC3986 regular expression has poor performance when there are two # characters, leading to ReDoS	9 Jan 202214:12	–	hackerone
Hacker One	Internet Bug Bounty: CVE-2023-28755: ReDoS vulnerability in URI	13 Apr 202302:03	–	hackerone
Tenable Nessus	EulerOS 2.0 SP10 : ruby (EulerOS-SA-2023-2824)	16 Jan 202400:00	–	nessus
Tenable Nessus	Ubuntu 16.04 ESM / 18.04 ESM / 20.04 LTS / 22.04 LTS / 23.04 : Ruby vulnerabilities (USN-6219-1)	12 Jul 202300:00	–	nessus
Tenable Nessus	EulerOS 2.0 SP11 : ruby (EulerOS-SA-2023-2868)	16 Jan 202400:00	–	nessus
Tenable Nessus	EulerOS 2.0 SP11 : ruby (EulerOS-SA-2023-2851)	16 Jan 202400:00	–	nessus
Tenable Nessus	EulerOS 2.0 SP10 : ruby (EulerOS-SA-2023-2800)	16 Jan 202400:00	–	nessus
Tenable Nessus	Photon OS 5.0: Ruby PHSA-2024-5.0-0247	24 Jul 202400:00	–	nessus
Tenable Nessus	AlmaLinux 8 : ruby:3.1 (ALSA-2024:1431)	21 Mar 202400:00	–	nessus

Nvd

Node

ruby-lang uriRange<0.10.3ruby

ruby-lang uriRange0.11.0–0.12.2ruby

Source	Link
lists	www.lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/27LUWREIFTP3MQAW7QE4PJM4DPAQJWXF/
ruby-lang	www.ruby-lang.org/en/news/2023/06/29/redos-in-uri-CVE-2023-36617/
lists	www.lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/QA6XUKUY7B5OLNQBLHOT43UW7C5NIOQQ/
security	www.security.netapp.com/advisory/ntap-20230725-0002/

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

29 Jun 2023 13:15Current

5.8Medium risk

Vulners AI Score5.8

CVSS35.3

EPSS0.005

CWE-1333