Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
nessusThis script is Copyright (C) 2023 and is owned by Tenable, Inc. or an Affiliate thereof.AL2023_ALAS2023-2023-158.NASL
HistoryApr 20, 2023 - 12:00 a.m.

Amazon Linux 2023 : ruby3.2, ruby3.2-bundled-gems, ruby3.2-default-gems (ALAS2023-2023-158)

2023-04-2000:00:00
This script is Copyright (C) 2023 and is owned by Tenable, Inc. or an Affiliate thereof.
www.tenable.com
22
amazon linux 2023
ruby3.2
alas2023-2023-158
redos
uri parser
time parser
cve-2023-28755
cve-2023-28756
nessus scanner

EPSS

0.004

Percentile

72.3%

JSON

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2023-158 advisory.

  • A ReDoS issue was discovered in the URI component through 0.12.0 in Ruby through 3.2.1. The URI parser mishandles invalid URLs that have specific characters. It causes an increase in execution time for parsing strings to URI objects. The fixed versions are 0.12.1, 0.11.1, 0.10.2 and 0.10.0.1. (CVE-2023-28755)

  • A ReDoS issue was discovered in the Time component through 0.2.1 in Ruby through 3.2.1. The Time parser mishandles invalid URLs that have specific characters. It causes an increase in execution time for parsing strings to Time objects. The fixed versions are 0.1.1 and 0.2.2. (CVE-2023-28756)

Note that Nessus has not tested for these issues but has instead relied only on the application’s self-reported version number.

#%NASL_MIN_LEVEL 80900
##
# (C) Tenable, Inc.
#
# The descriptive text and package checks in this plugin were
# extracted from Amazon Linux 2023 Security Advisory ALAS2023-2023-158.
##

include('compat.inc');

if (description)
{
  script_id(174571);
  script_version("1.1");
  script_set_attribute(attribute:"plugin_modification_date", value:"2023/05/31");

  script_cve_id("CVE-2023-28755", "CVE-2023-28756");

  script_name(english:"Amazon Linux 2023 : ruby3.2, ruby3.2-bundled-gems, ruby3.2-default-gems (ALAS2023-2023-158)");

  script_set_attribute(attribute:"synopsis", value:
"The remote Amazon Linux 2023 host is missing a security update.");
  script_set_attribute(attribute:"description", value:
"It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2023-158 advisory.

  - A ReDoS issue was discovered in the URI component through 0.12.0 in Ruby through 3.2.1. The URI parser
    mishandles invalid URLs that have specific characters. It causes an increase in execution time for parsing
    strings to URI objects. The fixed versions are 0.12.1, 0.11.1, 0.10.2 and 0.10.0.1. (CVE-2023-28755)

  - A ReDoS issue was discovered in the Time component through 0.2.1 in Ruby through 3.2.1. The Time parser
    mishandles invalid URLs that have specific characters. It causes an increase in execution time for parsing
    strings to Time objects. The fixed versions are 0.1.1 and 0.2.2. (CVE-2023-28756)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version
number.");
  script_set_attribute(attribute:"see_also", value:"https://alas.aws.amazon.com/AL2023/ALAS-2023-158.html");
  script_set_attribute(attribute:"see_also", value:"https://alas.aws.amazon.com/cve/html/CVE-2023-28755.html");
  script_set_attribute(attribute:"see_also", value:"https://alas.aws.amazon.com/cve/html/CVE-2023-28756.html");
  script_set_attribute(attribute:"see_also", value:"https://alas.aws.amazon.com/faqs.html");
  script_set_attribute(attribute:"solution", value:
"Run 'dnf update ruby3.2 --releasever=2023.0.20230419' to update your system.");
  script_set_cvss_base_vector("CVSS2#AV:N/AC:L/Au:N/C:N/I:N/A:P");
  script_set_cvss_temporal_vector("CVSS2#E:U/RL:OF/RC:C");
  script_set_cvss3_base_vector("CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L");
  script_set_cvss3_temporal_vector("CVSS:3.0/E:U/RL:O/RC:C");
  script_set_attribute(attribute:"cvss_score_source", value:"CVE-2023-28756");

  script_set_attribute(attribute:"exploitability_ease", value:"No known exploits are available");
  script_set_attribute(attribute:"exploit_available", value:"false");

  script_set_attribute(attribute:"vuln_publication_date", value:"2023/03/30");
  script_set_attribute(attribute:"patch_publication_date", value:"2023/04/13");
  script_set_attribute(attribute:"plugin_publication_date", value:"2023/04/20");

  script_set_attribute(attribute:"plugin_type", value:"local");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:amazon:linux:ruby3.2");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:amazon:linux:ruby3.2-bundled-gems");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:amazon:linux:ruby3.2-bundled-gems-debuginfo");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:amazon:linux:ruby3.2-debuginfo");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:amazon:linux:ruby3.2-debugsource");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:amazon:linux:ruby3.2-default-gems");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:amazon:linux:ruby3.2-devel");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:amazon:linux:ruby3.2-doc");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:amazon:linux:ruby3.2-libs");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:amazon:linux:ruby3.2-libs-debuginfo");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:amazon:linux:ruby3.2-rubygem-bigdecimal");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:amazon:linux:ruby3.2-rubygem-bigdecimal-debuginfo");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:amazon:linux:ruby3.2-rubygem-bundler");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:amazon:linux:ruby3.2-rubygem-io-console");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:amazon:linux:ruby3.2-rubygem-io-console-debuginfo");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:amazon:linux:ruby3.2-rubygem-irb");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:amazon:linux:ruby3.2-rubygem-json");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:amazon:linux:ruby3.2-rubygem-json-debuginfo");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:amazon:linux:ruby3.2-rubygem-minitest");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:amazon:linux:ruby3.2-rubygem-power_assert");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:amazon:linux:ruby3.2-rubygem-psych");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:amazon:linux:ruby3.2-rubygem-psych-debuginfo");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:amazon:linux:ruby3.2-rubygem-rake");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:amazon:linux:ruby3.2-rubygem-rbs");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:amazon:linux:ruby3.2-rubygem-rbs-debuginfo");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:amazon:linux:ruby3.2-rubygem-rdoc");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:amazon:linux:ruby3.2-rubygem-rexml");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:amazon:linux:ruby3.2-rubygem-rss");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:amazon:linux:ruby3.2-rubygem-test-unit");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:amazon:linux:ruby3.2-rubygem-typeprof");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:amazon:linux:ruby3.2-rubygems");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:amazon:linux:ruby3.2-rubygems-devel");
  script_set_attribute(attribute:"cpe", value:"cpe:/o:amazon:linux:2023");
  script_set_attribute(attribute:"generated_plugin", value:"current");
  script_end_attributes();

  script_category(ACT_GATHER_INFO);
  script_family(english:"Amazon Linux Local Security Checks");

  script_copyright(english:"This script is Copyright (C) 2023 and is owned by Tenable, Inc. or an Affiliate thereof.");

  script_dependencies("ssh_get_info.nasl");
  script_require_keys("Host/local_checks_enabled", "Host/AmazonLinux/release", "Host/AmazonLinux/rpm-list");

  exit(0);
}

include("rpm.inc");

if (!get_kb_item("Host/local_checks_enabled")) audit(AUDIT_LOCAL_CHECKS_NOT_ENABLED);

var alas_release = get_kb_item("Host/AmazonLinux/release");
if (isnull(alas_release) || !strlen(alas_release)) audit(AUDIT_OS_NOT, "Amazon Linux");
var os_ver = pregmatch(pattern: "^AL(A|\d+|-\d+)", string:alas_release);
if (isnull(os_ver)) audit(AUDIT_UNKNOWN_APP_VER, "Amazon Linux");
os_ver = os_ver[1];
if (os_ver != "-2023")
{
  if (os_ver == 'A') os_ver = 'AMI';
  audit(AUDIT_OS_NOT, "Amazon Linux 2023", "Amazon Linux " + os_ver);
}

if (!get_kb_item("Host/AmazonLinux/rpm-list")) audit(AUDIT_PACKAGE_LIST_MISSING);

var pkgs = [
    {'reference':'ruby3.2-3.2.2-180.amzn2023.0.1', 'cpu':'aarch64', 'release':'AL-2023', 'rpm_spec_vers_cmp':TRUE},
    {'reference':'ruby3.2-3.2.2-180.amzn2023.0.1', 'cpu':'i686', 'release':'AL-2023', 'rpm_spec_vers_cmp':TRUE},
    {'reference':'ruby3.2-3.2.2-180.amzn2023.0.1', 'cpu':'x86_64', 'release':'AL-2023', 'rpm_spec_vers_cmp':TRUE},
    {'reference':'ruby3.2-bundled-gems-3.2.2-180.amzn2023.0.1', 'cpu':'aarch64', 'release':'AL-2023', 'rpm_spec_vers_cmp':TRUE},
    {'reference':'ruby3.2-bundled-gems-3.2.2-180.amzn2023.0.1', 'cpu':'i686', 'release':'AL-2023', 'rpm_spec_vers_cmp':TRUE},
    {'reference':'ruby3.2-bundled-gems-3.2.2-180.amzn2023.0.1', 'cpu':'x86_64', 'release':'AL-2023', 'rpm_spec_vers_cmp':TRUE},
    {'reference':'ruby3.2-bundled-gems-debuginfo-3.2.2-180.amzn2023.0.1', 'cpu':'aarch64', 'release':'AL-2023', 'rpm_spec_vers_cmp':TRUE},
    {'reference':'ruby3.2-bundled-gems-debuginfo-3.2.2-180.amzn2023.0.1', 'cpu':'i686', 'release':'AL-2023', 'rpm_spec_vers_cmp':TRUE},
    {'reference':'ruby3.2-bundled-gems-debuginfo-3.2.2-180.amzn2023.0.1', 'cpu':'x86_64', 'release':'AL-2023', 'rpm_spec_vers_cmp':TRUE},
    {'reference':'ruby3.2-debuginfo-3.2.2-180.amzn2023.0.1', 'cpu':'aarch64', 'release':'AL-2023', 'rpm_spec_vers_cmp':TRUE},
    {'reference':'ruby3.2-debuginfo-3.2.2-180.amzn2023.0.1', 'cpu':'i686', 'release':'AL-2023', 'rpm_spec_vers_cmp':TRUE},
    {'reference':'ruby3.2-debuginfo-3.2.2-180.amzn2023.0.1', 'cpu':'x86_64', 'release':'AL-2023', 'rpm_spec_vers_cmp':TRUE},
    {'reference':'ruby3.2-debugsource-3.2.2-180.amzn2023.0.1', 'cpu':'aarch64', 'release':'AL-2023', 'rpm_spec_vers_cmp':TRUE},
    {'reference':'ruby3.2-debugsource-3.2.2-180.amzn2023.0.1', 'cpu':'i686', 'release':'AL-2023', 'rpm_spec_vers_cmp':TRUE},
    {'reference':'ruby3.2-debugsource-3.2.2-180.amzn2023.0.1', 'cpu':'x86_64', 'release':'AL-2023', 'rpm_spec_vers_cmp':TRUE},
    {'reference':'ruby3.2-default-gems-3.2.2-180.amzn2023.0.1', 'release':'AL-2023', 'rpm_spec_vers_cmp':TRUE},
    {'reference':'ruby3.2-devel-3.2.2-180.amzn2023.0.1', 'cpu':'aarch64', 'release':'AL-2023', 'rpm_spec_vers_cmp':TRUE},
    {'reference':'ruby3.2-devel-3.2.2-180.amzn2023.0.1', 'cpu':'i686', 'release':'AL-2023', 'rpm_spec_vers_cmp':TRUE},
    {'reference':'ruby3.2-devel-3.2.2-180.amzn2023.0.1', 'cpu':'x86_64', 'release':'AL-2023', 'rpm_spec_vers_cmp':TRUE},
    {'reference':'ruby3.2-doc-3.2.2-180.amzn2023.0.1', 'release':'AL-2023', 'rpm_spec_vers_cmp':TRUE},
    {'reference':'ruby3.2-libs-3.2.2-180.amzn2023.0.1', 'cpu':'aarch64', 'release':'AL-2023', 'rpm_spec_vers_cmp':TRUE},
    {'reference':'ruby3.2-libs-3.2.2-180.amzn2023.0.1', 'cpu':'i686', 'release':'AL-2023', 'rpm_spec_vers_cmp':TRUE},
    {'reference':'ruby3.2-libs-3.2.2-180.amzn2023.0.1', 'cpu':'x86_64', 'release':'AL-2023', 'rpm_spec_vers_cmp':TRUE},
    {'reference':'ruby3.2-libs-debuginfo-3.2.2-180.amzn2023.0.1', 'cpu':'aarch64', 'release':'AL-2023', 'rpm_spec_vers_cmp':TRUE},
    {'reference':'ruby3.2-libs-debuginfo-3.2.2-180.amzn2023.0.1', 'cpu':'i686', 'release':'AL-2023', 'rpm_spec_vers_cmp':TRUE},
    {'reference':'ruby3.2-libs-debuginfo-3.2.2-180.amzn2023.0.1', 'cpu':'x86_64', 'release':'AL-2023', 'rpm_spec_vers_cmp':TRUE},
    {'reference':'ruby3.2-rubygem-bigdecimal-3.1.3-180.amzn2023.0.1', 'cpu':'aarch64', 'release':'AL-2023', 'rpm_spec_vers_cmp':TRUE},
    {'reference':'ruby3.2-rubygem-bigdecimal-3.1.3-180.amzn2023.0.1', 'cpu':'i686', 'release':'AL-2023', 'rpm_spec_vers_cmp':TRUE},
    {'reference':'ruby3.2-rubygem-bigdecimal-3.1.3-180.amzn2023.0.1', 'cpu':'x86_64', 'release':'AL-2023', 'rpm_spec_vers_cmp':TRUE},
    {'reference':'ruby3.2-rubygem-bigdecimal-debuginfo-3.1.3-180.amzn2023.0.1', 'cpu':'aarch64', 'release':'AL-2023', 'rpm_spec_vers_cmp':TRUE},
    {'reference':'ruby3.2-rubygem-bigdecimal-debuginfo-3.1.3-180.amzn2023.0.1', 'cpu':'i686', 'release':'AL-2023', 'rpm_spec_vers_cmp':TRUE},
    {'reference':'ruby3.2-rubygem-bigdecimal-debuginfo-3.1.3-180.amzn2023.0.1', 'cpu':'x86_64', 'release':'AL-2023', 'rpm_spec_vers_cmp':TRUE},
    {'reference':'ruby3.2-rubygem-bundler-2.4.10-180.amzn2023.0.1', 'release':'AL-2023', 'rpm_spec_vers_cmp':TRUE},
    {'reference':'ruby3.2-rubygem-io-console-0.6.0-180.amzn2023.0.1', 'cpu':'aarch64', 'release':'AL-2023', 'rpm_spec_vers_cmp':TRUE},
    {'reference':'ruby3.2-rubygem-io-console-0.6.0-180.amzn2023.0.1', 'cpu':'i686', 'release':'AL-2023', 'rpm_spec_vers_cmp':TRUE},
    {'reference':'ruby3.2-rubygem-io-console-0.6.0-180.amzn2023.0.1', 'cpu':'x86_64', 'release':'AL-2023', 'rpm_spec_vers_cmp':TRUE},
    {'reference':'ruby3.2-rubygem-io-console-debuginfo-0.6.0-180.amzn2023.0.1', 'cpu':'aarch64', 'release':'AL-2023', 'rpm_spec_vers_cmp':TRUE},
    {'reference':'ruby3.2-rubygem-io-console-debuginfo-0.6.0-180.amzn2023.0.1', 'cpu':'i686', 'release':'AL-2023', 'rpm_spec_vers_cmp':TRUE},
    {'reference':'ruby3.2-rubygem-io-console-debuginfo-0.6.0-180.amzn2023.0.1', 'cpu':'x86_64', 'release':'AL-2023', 'rpm_spec_vers_cmp':TRUE},
    {'reference':'ruby3.2-rubygem-irb-1.6.2-180.amzn2023.0.1', 'release':'AL-2023', 'rpm_spec_vers_cmp':TRUE},
    {'reference':'ruby3.2-rubygem-json-2.6.3-180.amzn2023.0.1', 'cpu':'aarch64', 'release':'AL-2023', 'rpm_spec_vers_cmp':TRUE},
    {'reference':'ruby3.2-rubygem-json-2.6.3-180.amzn2023.0.1', 'cpu':'i686', 'release':'AL-2023', 'rpm_spec_vers_cmp':TRUE},
    {'reference':'ruby3.2-rubygem-json-2.6.3-180.amzn2023.0.1', 'cpu':'x86_64', 'release':'AL-2023', 'rpm_spec_vers_cmp':TRUE},
    {'reference':'ruby3.2-rubygem-json-debuginfo-2.6.3-180.amzn2023.0.1', 'cpu':'aarch64', 'release':'AL-2023', 'rpm_spec_vers_cmp':TRUE},
    {'reference':'ruby3.2-rubygem-json-debuginfo-2.6.3-180.amzn2023.0.1', 'cpu':'i686', 'release':'AL-2023', 'rpm_spec_vers_cmp':TRUE},
    {'reference':'ruby3.2-rubygem-json-debuginfo-2.6.3-180.amzn2023.0.1', 'cpu':'x86_64', 'release':'AL-2023', 'rpm_spec_vers_cmp':TRUE},
    {'reference':'ruby3.2-rubygem-minitest-5.16.3-180.amzn2023.0.1', 'release':'AL-2023', 'rpm_spec_vers_cmp':TRUE},
    {'reference':'ruby3.2-rubygem-power_assert-2.0.3-180.amzn2023.0.1', 'release':'AL-2023', 'rpm_spec_vers_cmp':TRUE},
    {'reference':'ruby3.2-rubygem-psych-5.0.1-180.amzn2023.0.1', 'cpu':'aarch64', 'release':'AL-2023', 'rpm_spec_vers_cmp':TRUE},
    {'reference':'ruby3.2-rubygem-psych-5.0.1-180.amzn2023.0.1', 'cpu':'i686', 'release':'AL-2023', 'rpm_spec_vers_cmp':TRUE},
    {'reference':'ruby3.2-rubygem-psych-5.0.1-180.amzn2023.0.1', 'cpu':'x86_64', 'release':'AL-2023', 'rpm_spec_vers_cmp':TRUE},
    {'reference':'ruby3.2-rubygem-psych-debuginfo-5.0.1-180.amzn2023.0.1', 'cpu':'aarch64', 'release':'AL-2023', 'rpm_spec_vers_cmp':TRUE},
    {'reference':'ruby3.2-rubygem-psych-debuginfo-5.0.1-180.amzn2023.0.1', 'cpu':'i686', 'release':'AL-2023', 'rpm_spec_vers_cmp':TRUE},
    {'reference':'ruby3.2-rubygem-psych-debuginfo-5.0.1-180.amzn2023.0.1', 'cpu':'x86_64', 'release':'AL-2023', 'rpm_spec_vers_cmp':TRUE},
    {'reference':'ruby3.2-rubygem-rake-13.0.6-180.amzn2023.0.1', 'release':'AL-2023', 'rpm_spec_vers_cmp':TRUE},
    {'reference':'ruby3.2-rubygem-rbs-2.8.2-180.amzn2023.0.1', 'cpu':'aarch64', 'release':'AL-2023', 'rpm_spec_vers_cmp':TRUE},
    {'reference':'ruby3.2-rubygem-rbs-2.8.2-180.amzn2023.0.1', 'cpu':'i686', 'release':'AL-2023', 'rpm_spec_vers_cmp':TRUE},
    {'reference':'ruby3.2-rubygem-rbs-2.8.2-180.amzn2023.0.1', 'cpu':'x86_64', 'release':'AL-2023', 'rpm_spec_vers_cmp':TRUE},
    {'reference':'ruby3.2-rubygem-rbs-debuginfo-2.8.2-180.amzn2023.0.1', 'cpu':'aarch64', 'release':'AL-2023', 'rpm_spec_vers_cmp':TRUE},
    {'reference':'ruby3.2-rubygem-rbs-debuginfo-2.8.2-180.amzn2023.0.1', 'cpu':'i686', 'release':'AL-2023', 'rpm_spec_vers_cmp':TRUE},
    {'reference':'ruby3.2-rubygem-rbs-debuginfo-2.8.2-180.amzn2023.0.1', 'cpu':'x86_64', 'release':'AL-2023', 'rpm_spec_vers_cmp':TRUE},
    {'reference':'ruby3.2-rubygem-rdoc-6.5.0-180.amzn2023.0.1', 'release':'AL-2023', 'rpm_spec_vers_cmp':TRUE},
    {'reference':'ruby3.2-rubygem-rexml-3.2.5-180.amzn2023.0.1', 'release':'AL-2023', 'rpm_spec_vers_cmp':TRUE},
    {'reference':'ruby3.2-rubygem-rss-0.2.9-180.amzn2023.0.1', 'release':'AL-2023', 'rpm_spec_vers_cmp':TRUE},
    {'reference':'ruby3.2-rubygem-test-unit-3.5.7-180.amzn2023.0.1', 'release':'AL-2023', 'rpm_spec_vers_cmp':TRUE},
    {'reference':'ruby3.2-rubygem-typeprof-0.21.3-180.amzn2023.0.1', 'release':'AL-2023', 'rpm_spec_vers_cmp':TRUE},
    {'reference':'ruby3.2-rubygems-3.4.10-180.amzn2023.0.1', 'release':'AL-2023', 'rpm_spec_vers_cmp':TRUE},
    {'reference':'ruby3.2-rubygems-devel-3.4.10-180.amzn2023.0.1', 'release':'AL-2023', 'rpm_spec_vers_cmp':TRUE}
];

var flag = 0;
foreach var package_array ( pkgs ) {
  var reference = NULL;
  var _release = NULL;
  var sp = NULL;
  var _cpu = NULL;
  var el_string = NULL;
  var rpm_spec_vers_cmp = NULL;
  var epoch = NULL;
  var allowmaj = NULL;
  var exists_check = NULL;
  if (!empty_or_null(package_array['reference'])) reference = package_array['reference'];
  if (!empty_or_null(package_array['release'])) _release = package_array['release'];
  if (!empty_or_null(package_array['sp'])) sp = package_array['sp'];
  if (!empty_or_null(package_array['cpu'])) _cpu = package_array['cpu'];
  if (!empty_or_null(package_array['el_string'])) el_string = package_array['el_string'];
  if (!empty_or_null(package_array['rpm_spec_vers_cmp'])) rpm_spec_vers_cmp = package_array['rpm_spec_vers_cmp'];
  if (!empty_or_null(package_array['epoch'])) epoch = package_array['epoch'];
  if (!empty_or_null(package_array['allowmaj'])) allowmaj = package_array['allowmaj'];
  if (!empty_or_null(package_array['exists_check'])) exists_check = package_array['exists_check'];
  if (reference && _release && (!exists_check || rpm_exists(release:_release, rpm:exists_check))) {
    if (rpm_check(release:_release, sp:sp, cpu:_cpu, reference:reference, epoch:epoch, el_string:el_string, rpm_spec_vers_cmp:rpm_spec_vers_cmp, allowmaj:allowmaj)) flag++;
  }
}

if (flag)
{
  security_report_v4(
      port       : 0,
      severity   : SECURITY_WARNING,
      extra      : rpm_report_get()
  );
  exit(0);
}
else
{
  var tested = pkg_tests_get();
  if (tested) audit(AUDIT_PACKAGE_NOT_AFFECTED, tested);
  else audit(AUDIT_PACKAGE_NOT_INSTALLED, "ruby3.2 / ruby3.2-bundled-gems / ruby3.2-bundled-gems-debuginfo / etc");
}

Related

slackware 1
cloudfoundry 4
nessus 57
ubuntu 5
osv 29
openvas 26
redos 2
fedora 3
debian 3
rocky 3
redhat 7
almalinux 6
oraclelinux 6
github 3
cgr 2
debiancve 3
ubuntucve 3
cvelist 3
cve 3
nvd 3
hackerone 5
alpinelinux 2
prion 3
rubygems 3
amazon 1
redhatcve 3
wolfi 2
freebsd 2
veracode 3
thn 1
photon 1
gentoo 1
slackware
slackware
[slackware-security] ruby
2023-03-31 18:29:16
cloudfoundry
cloudfoundry
USN-6055-1: Ruby vulnerabilities | Cloud Foundry
2023-06-30 00:00:00
USN-6087-1: Ruby vulnerabilities | Cloud Foundry
2023-06-05 00:00:00
USN-6055-2: Ruby regression | Cloud Foundry
2023-06-30 00:00:00
nessus
nessus
Fedora 38 : ruby (2023-6b924d3b75)
2023-04-15 00:00:00
EulerOS 2.0 SP11 : ruby (EulerOS-SA-2023-2708)
2024-01-16 00:00:00
Ubuntu 16.04 ESM / 18.04 LTS / 20.04 LTS : Ruby vulnerabilities (USN-6055-1)
2023-05-04 00:00:00
ubuntu
ubuntu
Ruby vulnerabilities
2023-05-04 00:00:00
Ruby vulnerabilities
2023-05-18 00:00:00
Ruby vulnerabilities
2023-06-21 00:00:00
osv
osv
ruby2.3, ruby2.5, ruby2.7 vulnerabilities
2023-05-18 09:35:29
ruby2.5 - security update
2023-06-06 00:00:00
ruby2.3, ruby2.5, ruby2.7 vulnerabilities
2023-05-04 08:10:22
openvas
openvas
Slackware: Security Advisory (SSA:2023-090-01)
2023-04-03 00:00:00
Fedora: Security Advisory for ruby (FEDORA-2023-6b924d3b75)
2023-04-16 00:00:00
Ubuntu: Security Advisory (USN-6055-1)
2023-05-05 00:00:00
redos
redos
ROS-20240826-09
2024-08-26 00:00:00
ROS-20240826-12
2024-08-26 00:00:00
fedora
fedora
[SECURITY] Fedora 38 Update: ruby-3.2.2-180.fc38
2023-04-15 02:16:08
[SECURITY] Fedora 37 Update: ruby-3.1.4-175.fc37
2023-04-21 02:11:09
[SECURITY] Fedora 36 Update: ruby-3.1.4-175.fc36
2023-04-21 01:25:27
debian
debian
[SECURITY] [DLA 3447-1] ruby2.5 security update
2023-06-07 20:38:22
[SECURITY] [DLA 3858-1] ruby2.7 security update
2024-09-02 12:46:22
[SECURITY] [DLA 3408-1] jruby security update
2023-04-30 20:58:08
rocky
rocky
ruby:2.7 security, bug fix, and enhancement update
2023-08-31 16:54:34
ruby:3.1 security, bug fix, and enhancement update
2024-04-05 14:57:12
ruby:3.1 security, bug fix, and enhancement update
2024-03-27 04:34:32
redhat
redhat
(RHSA-2023:3821) Moderate: ruby:2.7 security, bug fix, and enhancement update
2023-06-27 13:35:33
(RHSA-2023:3291) Moderate: rh-ruby27-ruby security, bug fix, and enhancement update
2023-05-24 08:44:46
(RHSA-2024:1576) Moderate: ruby:3.1 security, bug fix, and enhancement update
2024-04-01 00:57:59
almalinux
almalinux
Moderate: ruby:2.7 security, bug fix, and enhancement update
2023-06-27 00:00:00
Moderate: ruby:3.1 security, bug fix, and enhancement update
2024-03-19 00:00:00
Moderate: ruby:3.1 security, bug fix, and enhancement update
2024-04-01 00:00:00
oraclelinux
oraclelinux
ruby:2.7 security, bug fix, and enhancement update
2023-07-08 00:00:00
ruby:3.1 security, bug fix, and enhancement update
2024-03-20 00:00:00
ruby:3.1 security, bug fix, and enhancement update
2024-04-02 00:00:00
github
github
Ruby Time component ReDoS issue
2023-03-31 06:30:15
Ruby URI component ReDoS issue
2023-03-31 06:30:15
URI gem has ReDoS vulnerability
2023-06-29 15:30:34
cgr
cgr
CVE-2023-28756 vulnerabilities
2024-05-19 03:07:16
CVE-2023-28755 vulnerabilities
2024-05-19 03:07:16
debiancve
debiancve
CVE-2023-28755
2023-03-31 04:15:09
CVE-2023-28756
2023-03-31 04:15:09
CVE-2023-36617
2023-06-29 13:15:09
ubuntucve
ubuntucve
CVE-2023-28755
2023-03-31 00:00:00
CVE-2023-28756
2023-03-31 00:00:00
CVE-2023-36617
2023-06-29 00:00:00
cvelist
cvelist
CVE-2023-28755
2023-03-31 00:00:00
CVE-2023-28756
2023-03-31 00:00:00
CVE-2023-36617
2023-06-29 00:00:00
cve
cve
CVE-2023-28755
2023-03-31 04:15:09
CVE-2023-28756
2023-03-31 04:15:09
CVE-2023-36617
2023-06-29 13:15:09
nvd
nvd
CVE-2023-28755
2023-03-31 04:15:09
CVE-2023-28756
2023-03-31 04:15:09
CVE-2023-36617
2023-06-29 13:15:09
hackerone
hackerone
Ruby: ReDoS in Time.rfc2822
2022-02-18 22:22:29
Internet Bug Bounty: ReDoS( Ruby, Time)
2023-04-01 23:52:39
Internet Bug Bounty: CVE-2023-28755: ReDoS vulnerability in URI
2023-04-13 02:03:53
alpinelinux
alpinelinux
CVE-2023-28756
2023-03-31 04:15:09
CVE-2023-28755
2023-03-31 04:15:09
prion
prion
Authentication flaw
2023-03-31 04:15:00
Authentication flaw
2023-03-31 04:15:00
Design/Logic Flaw
2023-06-29 13:15:00
rubygems
rubygems
Ruby Time component ReDos issue
2023-03-30 21:00:00
Ruby URI component ReDoS issue
2023-03-30 21:00:00
ReDoS vulnerability in URI
2023-06-28 21:00:00
amazon
amazon
Medium: ruby
2023-06-07 23:52:00
redhatcve
redhatcve
CVE-2023-28756
2023-04-03 14:43:40
CVE-2023-28755
2023-04-03 14:43:40
CVE-2023-36617
2023-07-13 11:36:22
wolfi
wolfi
CVE-2023-28756 vulnerabilities
2024-09-18 21:11:55
CVE-2023-28755 vulnerabilities
2024-09-18 21:11:55
freebsd
freebsd
rubygem-time -- ReDoS vulnerability
2023-03-30 00:00:00
rubygem-uri -- ReDoS vulnerability
2023-03-28 00:00:00
veracode
veracode
Regular Expression Denial Of Service (ReDoS)
2023-04-04 14:02:35
Regular Expression Denial Of Service (ReDoS)
2023-04-04 14:02:44
Regular Expression Denial Of Service (ReDoS)
2023-06-30 03:59:11
thn
thn
CISA Alerts on Critical Security Vulnerabilities in Industrial Control Systems
2023-03-22 13:09:00
photon
photon
Important Photon OS Security Update - PHSA-2024-5.0-0247
2024-04-16 00:00:00
gentoo
gentoo
Ruby: Multiple vulnerabilities
2024-01-24 00:00:00

EPSS

0.004

Percentile

72.3%

JSON
Related for AL2023_ALAS2023-2023-158.NASL
slackware1cloudfoundry4nessus57ubuntu5osv29openvas26redos2fedora3debian3rocky3redhat7almalinux6oraclelinux6github3cgr2debiancve3ubuntucve3cvelist3cve3nvd3hackerone5alpinelinux2prion3rubygems3amazon1redhatcve3wolfi2freebsd2veracode3thn1photon1gentoo1