Lucene search
PRIOn knowledge basePRION:CVE-2023-22796HistoryFeb 09, 2023 - 8:15 p.m.
Design/Logic Flaw
2023-02-0920:15:00
PRIOn knowledge base
www.prio-n.com
3
dos
vulnerability
active support
regular expression
logic flaw
catastrophic backtracking
A regular expression based DoS vulnerability in Active Support <6.1.7.1 and <7.0.4.1. A specially crafted string passed to the underscore method can cause the regular expression engine to enter a state of catastrophic backtracking. This can cause the process to use large amounts of CPU and memory, leading to a possible DoS vulnerability.
| CPE | Name | Operator | Version |
|---|---|---|---|
| activesupport | ge | 7.0.0 | |
| activesupport | lt | 7.0.4.1 | |
| activesupport | lt | 6.1.7.1 |
Related
cve
cve
CVE-2023-22796
2023-02-09 20:15:11
cvelist
cvelist
CVE-2023-22796
2023-02-09 00:00:00
openvas
openvas
openSUSE: Security Advisory for rubygem (SUSE-SU-2023:0275-1)
2024-03-04 00:00:00
Debian: Security Advisory (DSA-5372-1)
2023-03-14 00:00:00
gitlab
gitlab
Inefficient Regular Expression Complexity
2023-02-09 00:00:00
Duplicate of ./gem/activesupport/CVE-2023-22796.yml
2023-01-18 00:00:00
veracode
veracode
Regular Expression Denial Of Service (ReDoS)
2023-01-19 02:04:48
ubuntucve
ubuntucve
CVE-2023-22796
2023-02-09 00:00:00
hackerone
hackerone
osv
osv
ReDoS based DoS vulnerability in Active Support's underscore
2023-01-18 18:23:20
rails - security update
2023-03-13 00:00:00
debiancve
debiancve
CVE-2023-22796
2023-02-09 20:15:11
alpinelinux
alpinelinux
CVE-2023-22796
2023-02-09 20:15:11
redhatcve
redhatcve
CVE-2023-22796
2023-01-26 10:36:11
nessus
nessus
SUSE SLES15 / openSUSE 15 Security Update : rubygem-activesupport-5_1 (SUSE-SU-2023:0275-1)
2023-02-07 00:00:00
Debian DSA-5372-1 : rails - security update
2023-03-14 00:00:00
nvd
nvd
CVE-2023-22796
2023-02-09 20:15:11
github
github
ReDoS based DoS vulnerability in Active Support's underscore
2023-01-18 18:23:20
rubygems
rubygems
ReDoS based DoS vulnerability in Active Support’s underscore
2023-01-17 21:00:00
redhat
redhat
debian
debian
[SECURITY] [DSA 5372-1] rails security update
2023-03-13 03:06:47
rocky
rocky
Satellite 6.14 security and bug fix update
2023-11-11 22:58:57