Lucene search

K
redosRedosROS-20240826-09
HistoryAug 26, 2024 - 12:00 a.m.

ROS-20240826-09

2024-08-2600:00:00
redos.red-soft.ru
3
ruby interpreter
uri component
denial of service
vulnerability
computational complexity
remote exploitation
attacker
time library
ruby programming language
invalid urls

CVSS3

5.3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

LOW

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

AI Score

7.1

Confidence

High

EPSS

0.004

Percentile

72.3%

The vulnerability in the Time library of the Ruby interpreter is related to the use of regular expression c
inefficient computational complexity. Exploitation of the vulnerability could allow an attacker,
acting remotely, to cause a denial of service

Vulnerability in the URI component of the Ruby programming language is related to incorrect implementation of the handling of
invalid URLs. Exploitation of the vulnerability could allow an attacker acting remotely to cause a
denial of service

OSVersionArchitecturePackageVersionFilename
redos7.3x86_64ruby< 2.7.6-131UNKNOWN

CVSS3

5.3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

LOW

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

AI Score

7.1

Confidence

High

EPSS

0.004

Percentile

72.3%