Lucene search
FreeBSD6BD2773C-CF1A-11ED-BD44-080027F5FEC9HistoryMar 30, 2023 - 12:00 a.m.
rubygem-time -- ReDoS vulnerability
2023-03-3000:00:00
vuxml.freebsd.org
16
5.3 Medium
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
LOW
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
5 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:N/I:N/A:P
0.002 Low
EPSS
Percentile
55.3%
ooooooo_q reports:
The Time parser mishandles invalid strings that have
specific characters. It causes an increase in execution
time for parsing strings to Time objects.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| FreeBSD | any | noarch | ruby | = 2.7.0,1 | UNKNOWN |
| FreeBSD | any | noarch | ruby | < 2.7.8,1 | UNKNOWN |
| FreeBSD | any | noarch | ruby27 | = 2.7.0,1 | UNKNOWN |
| FreeBSD | any | noarch | ruby27 | < 2.7.8,1 | UNKNOWN |
| FreeBSD | any | noarch | ruby30 | = 3.0.0,1 | UNKNOWN |
| FreeBSD | any | noarch | ruby30 | < 3.0.6,1 | UNKNOWN |
| FreeBSD | any | noarch | ruby31 | = 3.1.0,1 | UNKNOWN |
| FreeBSD | any | noarch | ruby31 | < 3.1.4,1 | UNKNOWN |
| FreeBSD | any | noarch | ruby32 | = 3.2.0.p1,1 | UNKNOWN |
| FreeBSD | any | noarch | ruby32 | < 3.2.2,1 | UNKNOWN |
Related
nessus
nessus
EulerOS 2.0 SP10 : ruby (EulerOS-SA-2023-1810)
2023-05-10 00:00:00
EulerOS 2.0 SP9 : ruby (EulerOS-SA-2023-2321)
2023-07-09 00:00:00
Amazon Linux 2 : ruby (ALAS-2023-2084)
2023-06-13 00:00:00
openvas
openvas
Huawei EulerOS: Security Advisory for ruby (EulerOS-SA-2023-2321)
2023-07-10 00:00:00
Huawei EulerOS: Security Advisory for ruby (EulerOS-SA-2023-1828)
2023-05-09 00:00:00
Huawei EulerOS: Security Advisory for ruby (EulerOS-SA-2023-1810)
2023-05-09 00:00:00
github
github
Ruby Time component ReDoS issue
2023-03-31 06:30:15
cgr
cgr
CVE-2023-28756 vulnerabilities
2024-04-30 09:06:13
osv
osv
CVE-2023-28756
2023-03-31 04:15:09
Ruby Time component ReDoS issue
2023-03-31 06:30:15
BIT-ruby-2023-28756
2024-03-06 11:04:05
hackerone
hackerone
Internet Bug Bounty: ReDoS( Ruby, Time)
2023-04-01 23:52:39
Ruby: ReDoS in Time.rfc2822
2022-02-18 22:22:29
cve
cve
CVE-2023-28756
2023-03-31 04:15:09
veracode
veracode
Regular Expression Denial Of Service (ReDoS)
2023-04-04 14:02:35
ubuntucve
ubuntucve
CVE-2023-28756
2023-03-31 00:00:00
prion
prion
Authentication flaw
2023-03-31 04:15:00
alpinelinux
alpinelinux
CVE-2023-28756
2023-03-31 04:15:09
redhatcve
redhatcve
CVE-2023-28756
2023-04-03 14:43:40
amazon
amazon
Medium: ruby
2023-06-07 23:52:00
debiancve
debiancve
CVE-2023-28756
2023-03-31 04:15:09
wolfi
wolfi
CVE-2023-28756 vulnerabilities
2024-04-30 09:06:13
cloudfoundry
cloudfoundry
USN-6055-1: Ruby vulnerabilities | Cloud Foundry
2023-06-30 00:00:00
USN-6087-1: Ruby vulnerabilities | Cloud Foundry
2023-06-05 00:00:00
slackware
slackware
[slackware-security] ruby
2023-03-31 18:29:16
ubuntu
ubuntu
Ruby vulnerabilities
2023-05-04 00:00:00
Ruby vulnerabilities
2023-05-18 00:00:00
Ruby vulnerabilities
2023-06-21 00:00:00
debian
debian
[SECURITY] [DLA 3447-1] ruby2.5 security update
2023-06-07 20:38:22
[SECURITY] [DLA 3408-1] jruby security update
2023-04-30 20:58:08
fedora
fedora
[SECURITY] Fedora 36 Update: ruby-3.1.4-175.fc36
2023-04-21 01:25:27
[SECURITY] Fedora 38 Update: ruby-3.2.2-180.fc38
2023-04-15 02:16:08
[SECURITY] Fedora 37 Update: ruby-3.1.4-175.fc37
2023-04-21 02:11:09
rocky
rocky
ruby:2.7 security, bug fix, and enhancement update
2023-08-31 16:54:34
ruby:3.1 security, bug fix, and enhancement update
2024-04-05 14:57:12
ruby:3.1 security, bug fix, and enhancement update
2024-03-27 04:34:32
oraclelinux
oraclelinux
ruby:2.7 security, bug fix, and enhancement update
2023-07-08 00:00:00
ruby:3.1 security, bug fix, and enhancement update
2024-03-20 00:00:00
ruby:3.1 security, bug fix, and enhancement update
2024-04-02 00:00:00
redhat
redhat
almalinux
almalinux
Moderate: ruby:2.7 security, bug fix, and enhancement update
2023-06-27 00:00:00
Moderate: ruby:3.1 security, bug fix, and enhancement update
2024-03-19 00:00:00
Moderate: ruby:3.1 security, bug fix, and enhancement update
2024-04-01 00:00:00
photon
photon
Important Photon OS Security Update - PHSA-2024-4.0-0562
2024-02-08 00:00:00
thn
thn
gentoo
gentoo
Ruby: Multiple vulnerabilities
2024-01-24 00:00:00
ibm
ibm
oracle
oracle
Oracle Critical Patch Update Advisory - January 2024
2024-01-16 00:00:00
5.3 Medium
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
LOW
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
5 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:N/I:N/A:P
0.002 Low
EPSS
Percentile
55.3%
Related for 6BD2773C-CF1A-11ED-BD44-080027F5FEC9