Lucene search

Regular Expression Denial Of Service (ReDoS)

🗓️ 30 Jun 2023 03:11:59Reported by Veracode Vulnerability DatabaseType

veracode🔗 sca.analysiscenter.veracode.com👁 63 Views

Vulnerable URI regex patterns, can crash application

Reporter	Title	Published	Views	Family All 199
OSV	ruby2.3, ruby2.5, ruby2.7, ruby3.0, ruby3.1 vulnerabilities	12 Jul 202314:47	–	osv
OSV	URI gem has ReDoS vulnerability	29 Jun 202315:30	–	osv
OSV	CVE-2023-36617	29 Jun 202313:15	–	osv
OSV	Red Hat Security Advisory: ruby:3.1 security, bug fix, and enhancement update	10 Oct 202417:02	–	osv
OSV	Red Hat Security Advisory: ruby:3.1 security, bug fix, and enhancement update	10 Oct 202417:02	–	osv
OSV	Moderate: ruby:3.1 security, bug fix, and enhancement update	5 Apr 202414:57	–	osv
OSV	Moderate: ruby:3.1 security, bug fix, and enhancement update	19 Mar 202400:00	–	osv
OSV	Moderate: ruby:3.1 security, bug fix, and enhancement update	27 Mar 202404:34	–	osv
OSV	Moderate: ruby:3.1 security, bug fix, and enhancement update	1 Apr 202400:00	–	osv
OSV	CGA-2ggw-f3mg-p6mj	6 Jun 202412:18	–	osv

Vulners

Node

uriRange≤0.12.1

Source	Link
ruby-lang	www.ruby-lang.org/en/news/2023/06/29/redos-in-uri-CVE-2023-36617/
github	www.github.com/ruby/uri/commit/70794abc162bb15bb934713b5669713d6700d35c
github	www.github.com/ruby/uri/commit/9a8e0cc03da964054c2a4ea26b59c53c3bae4921
github	www.github.com/ruby/uri/commit/3cd938df20db26c9439e9f681aadfb9bbeb6d1c0
github	www.github.com/ruby/uri/commit/4d02315181d8a485496f1bb107a6ab51d6f3a35f
github	www.github.com/ruby/uri/commit/05b1e7d026b886e65a60ee35625229da9ec220bb
github	www.github.com/ruby/uri/commit/38bf797c488bcb4a37fb322bfa84977981863ec6
github	www.github.com/ruby/uri/commit/ba36c8a3ecad8c16dd3e60a6da9abd768206c8fa
github	www.github.com/ruby/uri/commit/7e33934c91b7f8f3ea7b7a4258b468e19f636bc3
lists	www.lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/QA6XUKUY7B5OLNQBLHOT43UW7C5NIOQQ/

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

30 Jun 2023 03:59Current

6.7Medium risk

Vulners AI Score6.7

CVSS35.3

EPSS0.005